connect, device number 122 [ 2457.068690][ T8172] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2457.318511][ T8172] usb 3-1: Using ep0 maxpacket: 8 [ 2457.482138][ T8172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2457.572200][ T8172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 10:09:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) 10:09:50 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xb3240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:09:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', r2}) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)={'syztnl0\x00', r2, 0x700, 0x7800, 0x1, 0x7, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x64, 0x0, 0x1, 0x29, 0x0, @empty, @rand_addr=0x64010100}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x4, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48081}, 0x816) 10:09:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8100}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:09:50 executing program 2: rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x158f, 0x4}, 0x6}, 0x20, 0x1, 0x0) [ 2457.789041][ T8172] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2457.798105][ T8172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2457.840606][ T8172] usb 3-1: Product: syz 10:09:50 executing program 5: ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000000)={[], 0x6, 0xdb, 0x1, 0x0, 0x8, 0x5000, 0x100000, [], 0x2}) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@none, 0x20}) 10:09:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x0) [ 2457.878761][ T8172] usb 3-1: can't set config #1, error -71 [ 2457.892967][ T8172] usb 3-1: USB disconnect, device number 123 10:09:50 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0x90, [], 0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/144}, &(0x7f0000000240)=0x50) [ 2457.931752][ T9648] device syz_tun entered promiscuous mode [ 2457.976394][ T9648] device syz_tun left promiscuous mode 10:09:50 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xcc, r0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ab}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x63}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x145}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8044}, 0x8044) 10:09:50 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2202, 0x0) 10:09:51 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xec, 0x3, 0x5], 0x3, 0x0, 0x0, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x61) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100005070000000000000000c91dde6ec0818829442ddf1e8200000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) 10:09:51 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:09:51 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = getpid() r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r0, r1, 0x16, &(0x7f0000000000)) [ 2458.414410][ T8172] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2458.638523][ T9683] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2458.652450][ T9694] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2458.678530][ T8172] usb 3-1: Using ep0 maxpacket: 8 10:09:51 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xb4240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:09:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) 10:09:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe915}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:09:51 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000002c0)={{0x2, 0x2, 0x5, 0xf0a, 'syz0\x00'}, 0x5, 0x1, 0x1, 0x0, 0x9, 0x5, 'syz1\x00', &(0x7f0000000240)=['cgroup.stat\x00', '{$\x00', 'cgroup.stat\x00', 'cgroup.stat\x00', 'cgroup.stat\x00', 'cgroup.stat\x00', '@\x00', 'cgroup.stat\x00', 'cgroup.stat\x00'], 0x59, [], [0x3ff, 0x2, 0x6, 0x33]}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) [ 2458.839255][ T8172] usb 3-1: unable to get BOS descriptor or descriptor too short 10:09:51 executing program 5: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x6, 0x1000, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0xfff, 0x4) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) write$evdev(r1, &(0x7f00000003c0)=[{{0x77359400}, 0x1, 0x4, 0x5}, {{}, 0x14, 0xd50, 0x5}, {{0x0, 0x2710}, 0x14, 0x8001, 0x1}, {{r2, r3/1000+60000}, 0x12, 0x3, 0x7}, {{0x77359400}, 0x1, 0x8, 0x4}], 0x50) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$FITHAW(r4, 0xc0045878) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x103, 0x1, {0x9, 0x6, 0xffffff81, 0x7}}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRESHEX=r3, @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x890}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x36, 0x2005) [ 2458.929359][ T8172] usb 3-1: too many endpoints for config 1 interface 0 altsetting 81: 218, using maximum allowed: 30 [ 2458.963710][ T8172] usb 3-1: config 1 interface 0 altsetting 81 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 2459.004600][ T8172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2459.025823][ T8172] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2459.066834][ T9711] device syz_tun entered promiscuous mode [ 2459.102910][ T9711] device syz_tun left promiscuous mode [ 2459.189316][ T8172] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2459.207996][ T8172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2459.238721][ T8172] usb 3-1: Product: syz [ 2459.248980][ T8172] usb 3-1: Manufacturer: syz [ 2459.262172][ T8172] usb 3-1: SerialNumber: syz 10:09:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf000}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2459.648874][ T8172] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2459.716386][ T8172] usb 3-1: USB disconnect, device number 124 [ 2459.815754][ T9711] device syz_tun entered promiscuous mode [ 2459.894074][ T9711] device syz_tun left promiscuous mode [ 2460.418595][ T8172] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2460.668460][ T8172] usb 3-1: Using ep0 maxpacket: 8 [ 2460.829196][ T8172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2460.908644][ T8172] usb 3-1: too many endpoints for config 1 interface 0 altsetting 81: 218, using maximum allowed: 30 [ 2460.928495][ T8172] usb 3-1: config 1 interface 0 altsetting 81 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 2460.958481][ T8172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2460.970880][ T8172] usb 3-1: config 1 interface 0 has no altsetting 0 10:09:53 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x14f0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 10:09:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000800)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) 10:09:53 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) syz_open_dev$tty20(0xc, 0x4, 0x0) 10:09:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:09:53 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xb5240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:09:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000000)=0x2bd, 0x4) 10:09:54 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x8, 0x7f, 0x4}}) [ 2461.188719][ T8172] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2461.208076][ T8172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2461.224922][ T9775] device syz_tun entered promiscuous mode [ 2461.258231][ T9775] device syz_tun left promiscuous mode [ 2461.258930][ T8172] usb 3-1: can't set config #1, error -71 [ 2461.298030][ T8172] usb 3-1: USB disconnect, device number 125 10:09:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000000200), &(0x7f0000000240)=0x6) 10:09:54 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x440040, 0x0) 10:09:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 10:09:54 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) 10:09:54 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) mknodat(r1, &(0x7f0000000140)='./file0\x00', 0x40, 0x10001) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x803f00, 0x0, 0x0, 0x0, 0x2) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)=""/245, &(0x7f0000000100)=0xf5) [ 2461.678630][ T8172] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2461.928467][ T8172] usb 3-1: Using ep0 maxpacket: 8 [ 2462.094947][ T8172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2462.199065][ T8172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2462.379219][ T8172] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2462.391983][ T8172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2462.403435][ T8172] usb 3-1: Product: syz [ 2462.407701][ T8172] usb 3-1: Manufacturer: syz [ 2462.415862][ T8172] usb 3-1: SerialNumber: syz [ 2462.788858][ T8172] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2462.837129][ T8172] usb 3-1: USB disconnect, device number 126 [ 2463.468744][ T8172] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2463.708572][ T8172] usb 3-1: Using ep0 maxpacket: 8 [ 2463.869094][ T8172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2463.960089][ T8172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 10:09:57 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x14f0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) 10:09:57 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x5, 0xa8, 0x9, 0x101, 0x2, 0x1, 0x20}, &(0x7f0000000180)=0x9c) r1 = openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200001, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000000040)=0x5, 0x4) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) 10:09:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, @in, 0x2}, 0xa0) 10:09:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:09:57 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xb6240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2464.188874][ T8172] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2464.197979][ T8172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:09:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000140)) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x80, 0x20}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) close(r3) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup=r2, r1, 0x1}, 0x10) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) [ 2464.257796][ T8172] usb 3-1: Product: syz [ 2464.277847][ T8172] usb 3-1: Manufacturer: syz 10:09:57 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x14) [ 2464.306402][ T9847] device syz_tun entered promiscuous mode [ 2464.319434][ T9847] device syz_tun left promiscuous mode [ 2464.345575][ T8172] usb 3-1: can't set config #1, error -71 [ 2464.363890][ T8172] usb 3-1: USB disconnect, device number 127 10:09:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001580)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000), 0x10) 10:09:57 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000002c0)="eb", 0x1}], 0x1}, 0x0) 10:09:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 10:09:57 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in={0x0, 0x2}, 0x1c) 10:09:57 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0xbbaf606b72401e6e, 0x0) mmap(&(0x7f0000102000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) fstat(r0, &(0x7f0000000100)) [ 2464.748506][ T8172] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2464.998491][ T8172] usb 3-1: Using ep0 maxpacket: 8 [ 2465.158546][ T8172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2465.238578][ T8172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2465.428574][ T8172] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2465.437658][ T8172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2465.447361][ T8172] usb 3-1: Product: syz [ 2465.452449][ T8172] usb 3-1: Manufacturer: syz [ 2465.457053][ T8172] usb 3-1: SerialNumber: syz [ 2465.828920][ T8172] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2465.872017][ T8172] usb 3-1: USB disconnect, device number 2 [ 2466.498504][ T8172] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2466.738515][ T8172] usb 3-1: Using ep0 maxpacket: 8 [ 2466.899021][ T8172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2466.979278][ T8172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2467.149020][ T8172] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2467.159327][ T8172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2467.167323][ T8172] usb 3-1: Product: syz [ 2467.172036][ T8172] usb 3-1: Manufacturer: syz [ 2467.176631][ T8172] usb 3-1: SerialNumber: syz 10:10:00 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x14f0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f0000000000)=0x8) 10:10:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001580)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 10:10:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000300)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)='h', 0x1}], 0x1, &(0x7f0000000340)=ANY=[], 0x24}, 0x0) 10:10:00 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xb7240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:00 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d010140000102170109028c0003010000000904000000010100000a2401000000faa3020a240800000000ee423b0c24020000020000000000080f24060000040000000000000000070904010000010200000904010101010200000905010900000002000725010000000009040200000102000009040201010102000008240201bb92edef654ce00000000009000007250100ff0000"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000017c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000019c0)={{r1, 0x7, 0x6, 0xfa, 0x9, 0x1, 0x0, 0x6, 0x100, 0x6, 0x37a, 0x10001, 0x401, 0x4, 0x32}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050dc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "86cc3e6642be2b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051dc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x7, "bd1c728a6e0b73"}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81e8943c, &(0x7f00000017c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f00000019c0)={{r10, 0x7, 0x6, 0xfa, 0x9, 0x1, 0x0, 0x6, 0x100, 0x6, 0x37a, 0x10001, 0x401, 0x4, 0x32}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052dc0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7f, "1e4ecdc8c84ec0"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000053dc0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000053fc0)={0x0, 0x0, "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", "2e70a532ab54aa5d1bce753a36196f19f81a4da64978e154d268a436f43819c3a3c00c5736b675df7acf02a01c11c77ecafd475a1cb70286fd34f0e9eaf1894f15821a0902104bfdba8e1bd2f52f9ababe0ecda597d1f897555975e0be66bd4cc51e122178e5e9af9de0892096a29feef81a8269e5e71c256417f5de6a7684ef0b5b4fb222b64ed63ee33d7dc86829d22c358538b4772164fe82596218e66976bc3bd016aaf358b53d49be99cbb8af6915f6d01e659677e0d427d3ce576bd5508f7cbdbdc48f9f01be155a0eea2a5c7b39fa55cc1885953e836f9cef2d9cb8b039c0cd5ace2897903799c68c24bd66811fb675968f5e32f62aae812a5c2d5f4e529e1536fbef92a3e65d7eabc28cc59c3a0c34364f4399e1d07477fd5ce83ca4053acdc41c7332b33cf67121c01386e78b6b0ecdfccb7f2a4111b3e83eba1c7bdcb1aa06dbb5cdffcbd5c8d364f0bd28f25960929ef19a6aaa0aa0cace5f21a88a3717d4183c6f685a3f5635c215112b0b4b5a2a34698b5e4309a9e6ba7ef7a6bb0a6ef26f4bc8488fd41612f1bc0c0446a4fac2aadbbb481102c97ddb08ce7e2d95c89c195a660100beabd34560624d141a3939ab2a7e8b29ecc53cb438414a5b86570a7f9e3e7a0af021e41b2449707e0308a9dc8cae6127661f43a497a4000d754048aa99b6c011f137864ee73b5176baee45cb2189acab7e16951a397e9aceed57408abc024a0885ac12c9d9ed44a122dd017b1536b1bbd1a36aa0877aee2dc213f739b92fc618db65c7b37c3caa852d915c3b43a57fc48604658b1843fcc7fe3cba780eda162e844bbaf43a8ec837061508c04619b878f23c612fdb4feb99988b0ce6494eb5392044d6e43e781ac2d8de614dfa9042d0fe754b6edcd9b4eb17a390e1a949062d46a9c6f882fdc1a403658ba971d1c57c7fbe01047b0c218761adfdd3f6d975d72cd4beac76c38c8cfa3b606e12f2bb5a759e693902ad276b273cb21f94d91c6cb30d5bdf54273964ddf03cf29bc3a29200ce8c5b9f1455cbceb52b602a62ed4465e3e8acce6ad03592aef4c0cbfeb5426a53506db85df78d47d1983923d7c6f56918e24dc9a294909f0bbcd6029dd772db53047d9f297cc05fdfa2901a17f4c615e08d95fc03b3e9828e2b7dcff8b335b4cb92636b2c766a53876084d3d3dc198b122922f19962b33c94cb18aa0504c4b0afa7e75488e1674d3d11f853ea0016f79efeeef4788af8cecedb4f802a1f2ab11da1bf21e27e54909cfbd480aecd384120355ef4c36420fae59f5c60d48b18e12ee88115fdd9734e0a414076709c9a455322f1c1a4ff7be8f34cee6e60838077f7a31dce1e4dc4a4cf539cdd7a4cfab1ab617f4b2eb873c652701cabf31c261599c7d9d6fae344d3cf5f87bae35277a913c04967a45af9c69160071b7374ef0ee2bff17b4c9766fe2ec84e26cdfe74ee3d98b0cf067211c7807cc3b8ae01b2bba5cc1b8f13fd1ae8a98b5a147da7c893c06e28c70fa880c909bc2e3f7c3f5be65984253afd102929cb38c4348f09a46d3b1a7a9fbda331599852820d7f7f5b2f202c62a18c68500a7c1f881af50d8970c37880d5982a03444eb8272e04a5d2b9613e8668e3a54c0bc607947e4742fb8f78d11dfbcb67ace6ecd83f7aff72533da6ab4ea2f18b625cb45dae3676030f649b22220fdd34e08957cb875a2fe88ed7a683fe40ad3d9807f5da953d239aa4c54ddbe196e8e126a3051d4e2c1f4b4a70fc193d58ff1ad01757331a66b12162d0db9249d7979ee7a95e79d0587f5fd236aa173b56892cbba7c46456e0914aa0c4cc8f36b407d992a25e9dda41e227731358779b5ef7729a4d7aa0119dd51ab4c016842143c978db0b249b261eb70fa7961f1b0e3c1cdb7736f569e7912cc1a43fcf06538f0b32a2d71d8b04c3e9d273f7bea8d3d7974bea02f2d2755ad475e873116ef605351c085cc7532125f267e9dc744018aa525989e3e6dfd33e22cbbab247f73a891ccc28db3743d78c327df7c722dc3c497236ba334671ab135618fe6667c99de805a4c7f728cc08b43b3ab3be0b8376abf145821d9a4f1e715a45df2cd5957877caa50b66e2445ac05d4d4bc1660dfdc3153c72c29ed99dfcf9588d6aa65b0e01bd1f14b5b7b394eef1ca0391b85ca747b00bedf1ea9ff041f51aa425599bd8df550414aef3b3d2b76412c19767ea5e5502cc7d62f6fa7a558dddd91e74d7c2ca166b38ecbe974b04bafb2f4e87f05b1b260d4cab6aac560a712eb8ba566883b39715a20896fc855a051ccf87fec181a0277231d19f6cb2d2c15dc0b1906e78d94aa8126b7fb58b245b86308d402dfd0a024f04b2e722679ecdbafba94b9d072752d222929f151f4f7d7eb214376c31379a45f6f314fc776796d6ea32e29c7cfaeca38f5386c87f2b92b2481e93ca6a295155ae4417b1e7fdc1c4ab76378c580fd5f58ad1d6c17d23172cff416b5cfe5b1c17b1d26e77c3a10359ddc4928409c82bc1225e9ade549c6f4d953416f4fdff8c207cc91266ea0af2012e9fb4db6c857b909445bc72f91f2a84f14ba957db861cee0b098889f1f65108d70f7348804636286f827f44279aa0d84dd538b130c1e5e6828f20d9fdfc261ccb0be0d1c7f2ba0eb6aa243b05d56a436462d192be0cdf53bd666decdd17a5a5e19b1734768979b914906e79ad94fa357118282ccd6f4be4f68d0b9052603e104646126170c682de5a294e0e401eae74511ac55ad92303c90818fc86a64b1022bd811a8afc3d6a3c1c137f18bf613909cea8dbb5741345d7a68126fc2353a07a255a8d8acf9f4659b1759738d7d965aba11fb74f37ab685fd871b0a9ffa0eed2df4639a5e51a2844f2e9164603f51ffa20ffa1cfcd7bfee5f569d046f1aab56db4fcfdb3dd02a35318a4951b1a2545a5c039222b865dcafdae2e94dbe3546509b0c7e121cea62b2855ed4ee34a4e449cca3e1c710c9583a8eb0e5c1c4121f32d43f43047b3eee1fa9c3a43b4c8efc629ae8467871977fea7ffa14a157cfaf00e69bdfeaa711411f401b11a40a34229673d4985758a7855f61b0a8ae9ce3b71d353e5f0ebf7e3da83d1b52456950c5b6e5ece366d7d96d4ce89c5d6a419b14d672ea883480d7139a5d29e1582e1ab68dfa9bb429b2a24af9b0ebb8031eb80bff9bb5e17538ebebc57422536b1207edad10865878a94d2ef4b0c9998ffd7a4946054ecbcbf77897d8bf27886cff87d1ea0e616b36bdd805f1e3706e58dad9acc092c029b1dc9ba1f8e397b324f71835cfd8c48c667dd2e5752982f567d18dceaf01cf8c67b3b5c5254ce84f012fefb81644b1c23df7cebbdddfbc46412854da721615cc225393757a60786ecb0b9b06f886159e92d463f0e5dc3afa02dbfbaf1f4c8635fd30c940892ecbc134435a67ee15a1215d9308e031dfd8a3b0b37f54a0076b19205bcc0a1c5799a4fb2846f13bfa88c9721acdcca5d12f28e2153bb2927793fa0fe6037a58b79ae00db7a83f5b2c9003a4255edc4f70c3f8bf2998651497bc1f0b924a3ddc32b7d352dc6e5b53012e38be4c3d9a3b2e44db589125f8e20171ac7f75117b04a755aa8d81d8518e57b1a4796e37a5385a4eefe2d1b099fdc2200a0b0a848bd7c32b71fa5efe6a49ab207b710300e91c50f5f7755a212fe825719d29607248809c82f682d577d878b10d448fd26a4bc2ac57f2eefb2eccd60ab85c109f9a52fb0c6110a6808a447c721022b90a1381d4c0fd7ccde5b6e1e23855f0dc62fea93260259caba530460b12eeb8fe631d792b7c18197f7999ab02fa93b33e4805cb7580b4c6e85597b92143f93229e9b3f698dd4d6b790d4779c57b3d9d34a0f8ed6679755a656111ae5d8abe1c7b9765edfa42cc4c37dd56a925f6fc7abac5766e2c6a826802f34c3ed8f9200367b317a9af9cdb667046938b8091602cf82c89d5d746809a34b956eceedef4e88448e25e63a0f4bffc18a6bec478efe6255071d1f2624b971e0d984e94998659bcbd457e4cb38b2e80a25aee05ff9ca5b46ceec66d4ea461198d37ce306e7dea46768f66f95a3602e3fd1ebdddc78cd93bf87a430aea24c4f276dd18db3765ef09f8959c367b7ac9fb703d4ae73cabd1ff54ac0c657c741273e61b86caa6b4cc6ebf5873c2b5558d6e2963df57ca9f567cb43832b613cb19395f31afffc4bcd1bb0d03e3ab21c705ef3d2019df37101b95cd6f3e67113c18770404300feb19c071a891deb991637836511020ead3b0ab5d34e7ff1cb604008f923534cec7285a1db3a5a84e050e331b7247fc464412406f33bd34014941c69ec737df76196ad237b5e93fb7066f72af706be95482c904de97b33b060e810267944801db648c841b842cb142b65afac0a662bcd640a881ec06eb21a10496de0aff0dbdff24385af1e20729f4b21a0cf23f7629dfb21afd6f67e1840e4ef4b394cc5ead159f6bf63773adb2ad49da1796b300cadafb4170f98e747d5f61fd6518e9ea76f617b81cd5004dc86d6b73f97c9505f3ac4c43ee2cd0f7d91055abd852e601dc90551f2f38d6fffaef1e16aa14682c07baa810dd7145500ef01c326d966981ac9bff69d915a94f33ff548e09fe2df5e67865dbf6236041c43edf3e0f2d76a71b43d99cbf1e6abe136b24df837a193d482f528a66a2238f2b28f2cbf698b32b79403f763c3a232a56114ea4bad3d640fd4ab3b69f8320a35fa92c50d4e3c11ec96412af34ac3485ad7dd24ac8dfbe3d7df8d7ef374991e2592bc51e6dfe1cd54ba60654104503b09ace8c6b17149e7a9e5f5f5120778bc7de60854c5eb6591c64f8d4aaaf3641b6552502fef0dc3b7b2315f5858146b9459014e8e0e8152ef1955461550e2e3f0cb120ea908e1773c7e06692bd7c89c3d6ab0701dc8d76a46336622a369a54ac47f12346589fd571a3ef941d2e5b17b329fad503d31910e180f74f20871ac616e1968a6ad62dedc3b478e937c1592dc1a5b4a0737701e019b4b09d3d224aa57be41479946cac2881560ee5d330096346ad6437264e08d2bbb92d0cec343573b6072a4ceff8bb33b8cd0ab0504b0bf9995181674d571bbed81640e864742848150f5ce10ca49735f3e209ad24bdfc798423926381d2ca5b14f2fc4521320cfaff3a305e2a0839d036091b8fb856b343f247b1d4005309de5c7de0b7ba2198e660bb8ed4dff7fbcf223270e7c1d97936f97ccc63b6056685144d469792899115737a88567fe3a19e87dbd7e60ce331051960adb5c7b89b7d2531c714aeedbf6e80edcb6d211edeccfcde42f87d1795f2463046402809ed5c341eb97f001365ceb565c744bf2b79cc11ac6bf2809170a94a8430f877dfff17c83aaa809154a6696b9a0310146ce3a6e61d610cd11b5f2bad54f46a2"}) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r14, 0x84, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r14, 0x81e8943c, &(0x7f00000017c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r14, 0xd0009411, &(0x7f00000019c0)={{r15, 0x7, 0x6, 0xfa, 0x9, 0x1, 0x0, 0x6, 0x100, 0x6, 0x37a, 0x10001, 0x401, 0x4, 0x32}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054fc0)={0xb02, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r4}, {}, {}, {0x0, r8}, {}, {r10, r11}, {r12, r13}, {r15}], 0x0, "4f6465aee2b22d"}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:10:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) [ 2467.329713][ T9929] device syz_tun entered promiscuous mode [ 2467.355691][ T9929] device syz_tun left promiscuous mode [ 2467.361721][ T8172] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found 10:10:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x10) [ 2467.417529][ T8172] usb 3-1: USB disconnect, device number 3 10:10:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001580)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000380), 0xc) 10:10:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001580)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 10:10:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001580)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="9b", 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0xec}, 0x0) [ 2467.648643][T21525] usb 2-1: new high-speed USB device number 107 using dummy_hcd 10:10:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@dstaddrv4={0x10, 0x84, 0x9, @remote={0xac, 0x14, 0x0}}], 0x10}, 0x0) [ 2467.848521][ T8172] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2467.888680][T21525] usb 2-1: Using ep0 maxpacket: 8 [ 2468.009112][T21525] usb 2-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 2468.019618][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2468.032078][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2468.043750][T21525] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2468.088708][ T8172] usb 3-1: Using ep0 maxpacket: 8 [ 2468.208731][T21525] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2468.217862][T21525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=23 [ 2468.226466][T21525] usb 2-1: Product: syz [ 2468.231706][T21525] usb 2-1: Manufacturer: syz [ 2468.236397][T21525] usb 2-1: SerialNumber: syz [ 2468.249205][ T8172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2468.328761][ T8172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2468.499345][ T8172] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2468.508606][ T8172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2468.516691][ T8172] usb 3-1: Product: syz [ 2468.523399][ T8172] usb 3-1: Manufacturer: syz [ 2468.528062][ T8172] usb 3-1: SerialNumber: syz [ 2468.558652][T21525] usb 2-1: invalid UAC_HEADER (v1) [ 2468.564064][T21525] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 2468.579852][T21525] usb 2-1: USB disconnect, device number 107 [ 2468.888704][ T8172] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2468.935248][ T8172] usb 3-1: USB disconnect, device number 4 [ 2469.268493][T21525] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2469.508526][T21525] usb 2-1: Using ep0 maxpacket: 8 [ 2469.568603][T20567] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2469.635539][T21525] usb 2-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 2469.645958][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2469.658107][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2469.668696][T21525] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2469.838644][T21525] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2469.848132][T21525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=23 [ 2469.848493][T20567] usb 3-1: Using ep0 maxpacket: 8 [ 2469.858244][T21525] usb 2-1: Product: syz [ 2469.866066][T21525] usb 2-1: Manufacturer: syz [ 2469.871251][T21525] usb 2-1: SerialNumber: syz [ 2470.038611][T20567] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2470.118774][T20567] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2470.198744][T21525] usb 2-1: invalid UAC_HEADER (v1) [ 2470.204047][T21525] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 2470.218244][T21525] usb 2-1: USB disconnect, device number 108 [ 2470.289310][T20567] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2470.298353][T20567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2470.306827][T20567] usb 3-1: Product: syz [ 2470.311107][T20567] usb 3-1: Manufacturer: syz [ 2470.315696][T20567] usb 3-1: SerialNumber: syz 10:10:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001580)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000580)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="9b", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000a5bdbb415b000032186f5ed5ef1f000765bfbb8f9272"], 0xec}, 0x0) 10:10:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000280)=0x84) 10:10:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xb8240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:03 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) r2 = openat$pfkey(0xffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xc2, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0) [ 2470.359046][T20567] usb 3-1: can't set config #1, error -71 [ 2470.402771][T20567] usb 3-1: USB disconnect, device number 5 10:10:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 10:10:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x18f80, 0x0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000000)={0x265, 0x1c, 0x3}, 0x1c) r5 = dup2(r4, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0x8) [ 2470.508206][T10068] device syz_tun entered promiscuous mode [ 2470.541985][T10068] device syz_tun left promiscuous mode 10:10:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000400)={0x200}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001580)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 10:10:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) syz_genetlink_get_family_id$tipc2(0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x1e) sysfs$2(0x2, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) 10:10:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:10:03 executing program 5: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') sendfile(r0, r1, 0x0, 0x320f) [ 2470.798679][T21525] usb 2-1: new high-speed USB device number 109 using dummy_hcd 10:10:03 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "355402", 0x14, 0x6, 0x0, @dev, @empty, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 10:10:03 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x7, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @initr0]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf7}, 0x48) r2 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) dup2(r2, r1) 10:10:03 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x7, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @initr0]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf7}, 0x48) [ 2471.038476][T21525] usb 2-1: Using ep0 maxpacket: 8 10:10:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2471.158717][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2471.192546][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2471.225918][T21525] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 10:10:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xb9240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2471.419199][T21525] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2471.428267][T21525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2471.447597][T21525] usb 2-1: Product: syz [ 2471.454480][T21525] usb 2-1: Manufacturer: syz [ 2471.463222][T21525] usb 2-1: SerialNumber: syz [ 2471.489792][T10115] device syz_tun entered promiscuous mode [ 2471.500816][T10115] device syz_tun left promiscuous mode [ 2471.716417][T10115] device syz_tun entered promiscuous mode [ 2471.727981][T10115] device syz_tun left promiscuous mode [ 2471.819720][T21525] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2471.859530][T21525] usb 2-1: USB disconnect, device number 109 [ 2472.528501][T11238] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2472.768539][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2472.888938][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2472.899852][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2472.912766][T11238] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2473.079305][T11238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2473.088548][T11238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2473.096597][T11238] usb 2-1: Product: syz [ 2473.102366][T11238] usb 2-1: Manufacturer: syz [ 2473.107158][T11238] usb 2-1: SerialNumber: syz 10:10:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000001c0)) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028c0003010000000904000000010100000a24010000000201020a240800000000ee423b0c24020000020000000000080f24060000000000070904010000010200000904010101010200000905010900000002650a2501000000000904020000010200000904022402010000000009058209040000000007250100ff0000942222ed7b4ef182ff5b6598121846455c61e194eca76853902ff8e4b3adbd351ae05b39b4c16c7b9e24c0d3c1603bc2aa3a5373de39e61858b565bbe8da44c57dbf264b321d9fcf81acf9b43a842f4598ce89d9e2593052c742fe990ff6a5e3bdcf8d3df38e38d941a0d4be0e7548e92f6988b867711229e04b485357c0a4bcd873283ef5be8f9415c1caa8173ae32aff2de87e68fb2e87b02109d1962c1cdab15b26b708de276313d8e2ba0f10adaaa96384f665a254a738e8061499fedaaf305dcde248916169ba86afa9b57266a881950aee7cfa383d5fb987bea74da5b7d66c69d1415bf6e1c65ddc2ffa118cf756"], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:10:06 executing program 2: syz_usb_connect$uac1(0x2, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x5, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x7, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x14f0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0xff}, 0x3b, 0x0}) ioctl$CHAR_RAW_DISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="110026bd7000fddbdf2505000000140006000000000000000000000000000000000114a11b7a878000000000000000000000000000aa06000b001000000006000b001e01000008000700ac1414aa080004000300000006000b002c00000008000c000000000014000600fc00000000000000000000000000000108000800"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x40) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x32}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x43}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000000) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x4) 10:10:06 executing program 3: 10:10:06 executing program 5: 10:10:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:06 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xba020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:06 executing program 5: 10:10:06 executing program 3: [ 2473.449066][T11238] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2473.521522][T11238] usb 2-1: USB disconnect, device number 110 [ 2473.548101][T10167] device syz_tun entered promiscuous mode 10:10:06 executing program 5: 10:10:06 executing program 3: [ 2473.669183][T10167] device syz_tun left promiscuous mode [ 2473.688806][T21525] usb 3-1: new full-speed USB device number 6 using dummy_hcd 10:10:06 executing program 5: 10:10:06 executing program 3: [ 2473.988559][T11238] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2474.150122][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2474.195518][T21525] usb 3-1: not running at top speed; connect to a high speed hub [ 2474.229066][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2474.251713][T10205] device syz_tun entered promiscuous mode [ 2474.259620][T10205] device syz_tun left promiscuous mode [ 2474.289412][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 2474.349140][T11238] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2474.365302][T11238] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2474.459175][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2474.472726][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2474.482452][T21525] usb 3-1: Product: syz [ 2474.486621][T21525] usb 3-1: Manufacturer: syz [ 2474.498503][T21525] usb 3-1: SerialNumber: syz [ 2474.539209][T11238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2474.548305][T11238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2474.556984][T11238] usb 2-1: Product: syz [ 2474.561568][T11238] usb 2-1: Manufacturer: syz [ 2474.566194][T11238] usb 2-1: SerialNumber: syz [ 2474.888957][T11238] usb 2-1: 0:2 : does not exist [ 2474.902980][T11238] usb 2-1: USB disconnect, device number 111 [ 2475.012285][T21525] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2475.070679][T21525] usb 3-1: USB disconnect, device number 6 10:10:08 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000001480)={{0x3, 0x0, 0x80, {0x106001, 0x2}}, "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", "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"}) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) openat$qat_adf_ctl(0xffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x100, 0x0) r1 = openat$nvram(0xffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4582, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x8, 0x0, {{0x1c, 0x4, 0x2, 0x6, 0x70, 0x65, 0x0, 0xfe, 0x4, 0x0, @rand_addr=0x64010102, @local, {[@generic={0x88, 0x6, "60ba6165"}, @timestamp_addr={0x44, 0x14, 0x41, 0x1, 0x3, [{@multicast1}, {@remote, 0x6}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x5f, [@loopback, @remote, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast2, @multicast2, @loopback, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0xca, [@broadcast, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x3e}]}]}}}}}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, 0x0) [ 2475.658505][T21525] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 2476.129290][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2476.181420][T21525] usb 3-1: not running at top speed; connect to a high speed hub [ 2476.281092][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 10:10:09 executing program 2: syz_usb_connect$uac1(0x1, 0xbe, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x9, 0x0, "da58fd"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xab, 0x4, 0xc8, 0x4, "40f6c8"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xd0, 0x3, 0x6, 0x2c, "9b01c27adb8c2af0ba"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3ff, 0x3, 0x7, "dc04ac"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3, 0x0, 0x14f0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) 10:10:09 executing program 3: 10:10:09 executing program 5: 10:10:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:09 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xba240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:09 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028c00030c000000090400ccc33639ff7fc70000010100000a24010000000201020a240800000000ee423b0c24020000020000000000081e2406000004000000000000000007090411000001020000090401010101020000090501090000000200072501000000000904020000010200000904020101010200000824020100000008090582090400000000"], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:10:09 executing program 5: 10:10:09 executing program 3: [ 2476.498596][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2476.525801][T10273] device syz_tun entered promiscuous mode [ 2476.531629][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2476.561021][T21525] usb 3-1: Product: syz [ 2476.574750][T10273] device syz_tun left promiscuous mode [ 2476.599393][T21525] usb 3-1: can't set config #1, error -71 10:10:09 executing program 5: [ 2476.624957][T21525] usb 3-1: USB disconnect, device number 7 10:10:09 executing program 3: 10:10:09 executing program 5: [ 2476.748583][T27016] usb 2-1: new high-speed USB device number 112 using dummy_hcd 10:10:09 executing program 3: [ 2477.008557][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2477.039274][T21525] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 2477.148617][T27016] usb 2-1: config 12 has an invalid descriptor of length 199, skipping remainder of the config [ 2477.165051][T27016] usb 2-1: config 12 has 1 interface, different from the descriptor's value: 3 [ 2477.181992][T27016] usb 2-1: too many endpoints for config 12 interface 0 altsetting 204: 195, using maximum allowed: 30 [ 2477.193946][T27016] usb 2-1: config 12 interface 0 altsetting 204 has 0 endpoint descriptors, different from the interface descriptor's value: 195 [ 2477.208132][T27016] usb 2-1: config 12 interface 0 has no altsetting 0 [ 2477.268860][T10273] device ip6gretap0 entered promiscuous mode [ 2477.276350][T10273] device ip6gretap0 left promiscuous mode [ 2477.419173][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2477.428239][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2477.443108][T27016] usb 2-1: Product: syz [ 2477.447290][T27016] usb 2-1: Manufacturer: syz [ 2477.453489][T27016] usb 2-1: SerialNumber: syz [ 2477.489981][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2477.609381][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 2477.620167][T21525] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 4, setting to 0 [ 2477.744346][T27016] usb 2-1: USB disconnect, device number 112 [ 2478.488503][T27016] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2478.728654][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2478.848658][T27016] usb 2-1: config 12 has an invalid descriptor of length 199, skipping remainder of the config [ 2478.859120][T27016] usb 2-1: config 12 has 1 interface, different from the descriptor's value: 3 [ 2478.868114][T27016] usb 2-1: too many endpoints for config 12 interface 0 altsetting 204: 195, using maximum allowed: 30 [ 2478.881426][T27016] usb 2-1: config 12 interface 0 altsetting 204 has 0 endpoint descriptors, different from the interface descriptor's value: 195 [ 2478.895723][T27016] usb 2-1: config 12 interface 0 has no altsetting 0 [ 2479.059039][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2479.068270][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2479.084478][T27016] usb 2-1: Product: syz [ 2479.089982][T27016] usb 2-1: Manufacturer: syz [ 2479.094619][T27016] usb 2-1: SerialNumber: syz [ 2479.391596][T27016] usb 2-1: USB disconnect, device number 113 10:10:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x0, 0x29476b6546720fd1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x117}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f00000006c0)={{0x3, 0x100, 0xc55, 0x7, 0x8, 0x800000}, 0x164, [0x7, 0x0, 0x3, 0x3, 0x8, 0xfffffffa, 0x0, 0x10000, 0xa61, 0x3, 0x9, 0x8000, 0x6, 0x8, 0x3, 0x9, 0x4fa0, 0x5, 0x8001, 0x7, 0x20, 0x3, 0xff, 0x1, 0x2, 0xb8f, 0x0, 0x3f, 0x400, 0x2, 0x207b, 0xd7, 0x5, 0x80, 0x7, 0xf2, 0x6, 0x10001, 0x101, 0x4, 0x7ff, 0x20, 0x2, 0x80000001, 0x1, 0x22fc, 0x4, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x3, 0x3, 0x7fff, 0x5, 0x8, 0x1, 0x7f, 0x6, 0x400, 0x3f, 0x5, 0x0, 0x6, 0x5, 0x6, 0x0, 0x8, 0x5, 0x7fffffff, 0x3, 0x89, 0x7, 0xe6c8, 0x3, 0x80, 0xfffffff8, 0x20, 0x0, 0x0, 0x10000, 0x2, 0x8001, 0x7, 0x8, 0x9, 0x4137, 0x1, 0xffff, 0xffff, 0xff, 0xb5, 0x9, 0x1, 0x4, 0x5, 0x1, 0x3, 0x0, 0x40, 0x3, 0x0, 0x8, 0x7, 0x7fff, 0x10001, 0x43, 0x6, 0xfffffaf8, 0x8bf9, 0xfffffffa, 0x1, 0x1, 0x7, 0x2, 0xc9, 0x3, 0x1f, 0x7ab20eaf, 0xfffffff9, 0xfffffff8, 0xfffffff8, 0x0, 0x0, 0xffff, 0x8, 0xffffff00, 0x0, 0x1f, 0x9, 0x7ff, 0x0, 0x7, 0x704, 0x1, 0x4, 0x3f, 0x4, 0x401, 0x80000000, 0x76e, 0x0, 0x0, 0x800, 0x81, 0x3, 0x8, 0xff, 0x7eb, 0x400, 0x40, 0x401, 0x7ff, 0x3, 0x1, 0x2, 0x1ff, 0x55, 0x200, 0xd0, 0xffffffff, 0x8001, 0x6, 0x8, 0x7fff, 0x223f, 0x6e800, 0x5, 0x80000000, 0xfffffff9, 0x1f, 0xfffff001, 0x5, 0x1, 0x2, 0x58, 0xfffff3fc, 0x10000, 0xf7d, 0xfffff801, 0x8, 0x0, 0x0, 0x6, 0x4, 0xa0a, 0x8001, 0x6, 0x7fffffff, 0x48, 0x39f, 0x7f, 0xfffffffa, 0x7, 0x2, 0x2, 0x265, 0x5, 0x3, 0x3f, 0x4, 0x5, 0x6465, 0xfffffff9, 0x7, 0x4, 0x67, 0x7ff, 0x8, 0x7, 0xff, 0x9d1, 0xffffffc0, 0x800, 0x0, 0x335, 0x400000, 0x5, 0xfffff801, 0x5, 0x1, 0x400, 0x6, 0x5, 0x20, 0x9, 0x3f, 0x8, 0x3ff, 0x8001, 0x9, 0x100, 0x3, 0x1, 0x5, 0x9, 0x53ca, 0x9, 0x1, 0x3, 0x7fffffff, 0x9, 0x7, 0x200, 0xffff, 0x0, 0x3ff, 0x8, 0x0, 0x2, 0xffff, 0x10000000, 0x2, 0x800, 0x7, 0x9, 0xffffffff, 0x1000, 0x6, 0x3, 0x56f7, 0x81, 0x80000001, 0xb9e, 0x2, 0x80000001, 0xffffffff, 0x8001, 0x12d8, 0x7fffffff, 0x9, 0x2, 0x5, 0x86e2, 0x2, 0x1, 0x6, 0x1, 0x2, 0x1, 0x5, 0x9, 0x5, 0x65000000, 0x9, 0x9, 0x6, 0x20, 0x4, 0x47, 0xffffffff, 0x7ff, 0x3, 0x1f, 0x0, 0x20, 0x4, 0x1, 0x1, 0x3, 0xff, 0x22a, 0x40, 0xffffffff, 0x2, 0x8, 0x2, 0x2832, 0x1ff, 0x16, 0xfffffffa, 0xffff, 0x80000000, 0xfffffff7, 0x8, 0x10a, 0x6d3, 0x7, 0x8, 0x6, 0x1, 0x800, 0x1ff, 0xffff, 0x8000, 0x1f, 0xe9c5, 0x1, 0x1, 0x200, 0x7, 0x2, 0x6, 0x3, 0x9, 0xd50a, 0x8, 0x2, 0x1, 0x5, 0x6, 0x8, 0x400, 0x9, 0x4, 0x74e, 0xffff, 0x2f5, 0x8000, 0x1, 0x4d, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0x8001, 0x8, 0xfffffffa, 0x117b, 0xfff, 0x0, 0x8, 0x7296, 0x87a, 0x8, 0x5, 0x3, 0x4, 0x5, 0x3f, 0x6, 0x3, 0x8, 0x1, 0x9, 0x5, 0x5, 0x8, 0xffffc052, 0x6, 0x7, 0x100, 0x7, 0x100, 0x89ae, 0x400, 0x3f, 0x1, 0x125, 0x7, 0x1de, 0x6, 0x2, 0x8, 0xfffffff9, 0x3, 0x7f, 0x9, 0x94, 0x2, 0x6, 0x3ff, 0x0, 0x1000, 0x4, 0x80, 0x8423, 0x8, 0x101, 0x10001, 0x7, 0x9, 0x1, 0x4, 0x81, 0x3, 0x7, 0xb2db, 0x1, 0x1f, 0x20, 0x63b, 0x401, 0x80000000, 0xffffffff, 0x294, 0xda45, 0x10001, 0x4, 0xf8, 0x7, 0xffff, 0x80000000, 0x10001, 0x0, 0x0, 0x7, 0x4, 0xfff, 0x7, 0xca, 0xf6d, 0x5, 0x401, 0xc7, 0x8fae, 0x0, 0x101, 0x20, 0xfe, 0x80000000, 0x2, 0x400, 0x3, 0x80000000, 0xfffffff8, 0x7, 0xffffffe1, 0x2, 0x20, 0x4, 0x4217, 0x5d, 0x8, 0x7, 0x1, 0x5, 0x9, 0x9, 0x0, 0xe76, 0x6, 0x9, 0x3, 0x80, 0x6ef53efd, 0x81, 0x3, 0x7, 0x80, 0xd4, 0x1, 0x0, 0x1, 0x7f, 0x400, 0x5, 0xffff, 0x2, 0x1, 0xf4, 0x5, 0x1, 0x7, 0x2, 0x80000000, 0x800, 0x9, 0x0, 0x3, 0x100, 0x8, 0x5, 0x1, 0x81, 0x8, 0x9, 0x40, 0xfffffc01, 0x3, 0x9, 0x2dc00, 0x3ff, 0x3f, 0x80, 0x0, 0x6, 0x7f, 0x7, 0x1, 0xff, 0x31a, 0x649, 0x1, 0x3, 0x9, 0x5, 0x0, 0x10001, 0x3, 0x10001, 0x5, 0xf5a, 0x8, 0x1152, 0x1, 0x8, 0x80000001, 0xff, 0x1b6, 0x20, 0xffffeeba, 0x8, 0xfff, 0x2, 0xffffffff, 0x8807, 0x800, 0x4, 0x2, 0x6, 0x79ee, 0x21, 0x7, 0x0, 0xffff, 0x8, 0x3ea00000, 0x3, 0x7, 0x7, 0x10001, 0x800, 0x3, 0x4, 0x3000000, 0x8d09, 0x81, 0x7, 0x2, 0x80000000, 0x100, 0xffff, 0x7, 0x4, 0x6, 0x9, 0x5, 0x6, 0x80, 0x2a08, 0x7, 0x9, 0x0, 0x5, 0x72e21e3a, 0xd31a, 0x6, 0x5, 0x10000, 0x9, 0x660, 0x8, 0x401, 0x2571, 0x4, 0x0, 0x8, 0xfa8, 0x0, 0xfff, 0x19e4, 0xff, 0x4, 0x4, 0x0, 0x6, 0x9, 0x3, 0xffff, 0x9, 0xc2, 0x80000000, 0x6, 0x6, 0x70, 0x0, 0x1400000, 0x4, 0x9, 0x3, 0x9, 0xffff, 0x7, 0x0, 0x900000, 0x4fc, 0x80000000, 0x6, 0x0, 0x9, 0x4800, 0xc9ff, 0x53210f6a, 0x0, 0x1, 0x6, 0x6, 0x2, 0xff, 0x77ed, 0x3, 0x0, 0x1, 0x2, 0x4, 0x3f, 0xfff, 0xdc, 0x9, 0x2, 0x8, 0x3ff, 0x8, 0x3, 0x1, 0x2, 0x4, 0x3, 0x2307, 0x1f, 0x28, 0x3, 0xaf, 0xe4, 0x80000000, 0xd8ce, 0x8, 0x2, 0x4, 0x8d6a, 0xec51, 0x9, 0x5, 0x2, 0x7, 0x3, 0x4, 0x3ff, 0x0, 0xfffffffc, 0xad, 0x1, 0x81, 0x5, 0x3, 0x4, 0xff, 0xff, 0xfffffffa, 0x6, 0x800, 0x7, 0xc8a, 0x2, 0x10000, 0x5, 0x2a, 0xffffff93, 0x44c4, 0x20, 0x5, 0xb6, 0x0, 0x80, 0x1cc, 0x6, 0x0, 0x2, 0x87, 0x9, 0x6, 0x1, 0x7, 0x2, 0x2, 0x3f, 0xa1e, 0xffff6573, 0x8, 0xffffffff, 0xb0ab, 0x9bc, 0xa7b5, 0x101, 0x5, 0xbe3, 0x8, 0x7fff, 0xffff, 0x4, 0x1, 0x0, 0x1ff, 0x0, 0x100, 0x7, 0xfa94, 0x5, 0xa4, 0x3, 0x80000001, 0x3, 0x80000000, 0x8, 0x1ff, 0x7, 0x9, 0x400, 0xc0, 0x2, 0x3, 0x7fffffff, 0x9, 0x401, 0x4, 0x812, 0x100, 0x3, 0x2, 0x400, 0x6, 0x7fffffff, 0x2, 0x101, 0x3, 0x5, 0x3, 0x1000, 0x6, 0x3ff, 0x1e1, 0x5, 0x2, 0x400, 0x0, 0x8000, 0x8, 0x3, 0x5, 0x1f, 0x249, 0x7f, 0x0, 0x75, 0x101, 0x4, 0x45, 0xffff7fff, 0x2, 0x8, 0x8000000, 0x401, 0xc, 0x926, 0x3cdc3696, 0x8, 0x7d, 0x20, 0x80000001, 0x7, 0x2, 0x8, 0x3ff, 0x1ff, 0x1f, 0x6, 0x42, 0x81, 0x1ff, 0x2, 0x0, 0xff, 0x7, 0x8001, 0x1, 0x3, 0xff, 0x6d3b, 0x3, 0x0, 0x1a, 0x5, 0x8, 0x2, 0xffffffff, 0x3, 0x5, 0x2e, 0x8, 0x5, 0xbc, 0x397, 0x3, 0x5, 0x4, 0x81, 0x1000000, 0xfffffff7, 0x6, 0x8, 0x8000, 0x401, 0xbdda, 0x7fffffff, 0x9, 0x1, 0x80000000, 0x9, 0xffffff2c, 0x9, 0x6, 0x7, 0x4, 0xfff, 0x80000000, 0xffffffff, 0x401, 0x5, 0x8, 0x8, 0x9, 0x8, 0x0, 0x8, 0xffff, 0xb3d1, 0xe0, 0x80000001, 0x8, 0x1, 0x7, 0x27e5, 0x2, 0x2, 0x2, 0x3, 0x6, 0x1, 0x0, 0x5, 0x9, 0x1ff, 0x7, 0x7b4, 0x5, 0x1ff, 0xd6, 0x7fff, 0x3f, 0x0, 0x401, 0x4, 0x5, 0x3, 0x3, 0xa5d, 0x3, 0x3f, 0x32, 0x20, 0xfa, 0x3, 0x87, 0xfb57, 0xd06, 0x5, 0x7fffffff, 0x2, 0x3, 0x20, 0x1, 0xd83, 0x7ff, 0x1, 0x1000, 0x0, 0x8000, 0x4, 0x4, 0x8000, 0x6, 0x2ab1, 0x105, 0x4, 0xcd, 0x2, 0x7, 0x7ec, 0xfffffffe, 0x6, 0x9, 0x3ff, 0x0, 0x7f, 0x1, 0xffffffd4, 0x2, 0x6, 0x9, 0x7, 0x400, 0x7ff, 0x7ff, 0x80, 0x5, 0x4, 0x1, 0x1, 0x7f, 0xb23, 0x78, 0x0, 0x1000, 0x80, 0xff, 0x0, 0x9, 0xfffffff7, 0x1ff, 0x7, 0x3, 0x4, 0xffffffff, 0x7, 0x59, 0x8, 0x5, 0x0, 0x10000, 0x9fd1, 0xabc, 0x4, 0x3, 0xffff, 0x5, 0x2, 0x3, 0x8001, 0x7, 0x1, 0x80000001, 0xb58, 0x80000000, 0x6, 0xf3e7, 0x4, 0x5, 0xfffffff9, 0x1, 0x6, 0x9, 0x0, 0x2, 0x3, 0x3, 0x9, 0x7a, 0x10000, 0xa8, 0x7ff, 0x9, 0xffe0, 0x101, 0x0, 0x7ea8, 0x4, 0xe2, 0x2, 0x1, 0x885, 0x3d, 0x2, 0x8, 0x2, 0x80000000, 0x5, 0x7fffffff, 0x8, 0x1, 0xfdeddfd, 0x80]}) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x14f0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) 10:10:12 executing program 3: 10:10:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:12 executing program 5: 10:10:12 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xbb240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:12 executing program 1: syz_usb_connect$uac1(0x0, 0xc7, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x0, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x5, 0x20, 0x800, 0x20, 0xf8}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x2, 0x4, [0x0, 0x1, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7f, 0x8, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2f, 0x2, 0x1f, 0x40, "", "ca"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x401, 0xc47, 0x9, '.'}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0x5, 0x4, "c25c7c8e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0xfc, 0x0, {0x7, 0x25, 0x1, 0x0, 0xfd}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6400c800}, 0x80800) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000180)={0xa30000, 0x7fffffff, 0x6cbd, r0, 0x0, &(0x7f0000000140)={0xa00902, 0xfffff800, [], @p_u8=&(0x7f0000000100)}}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000300)={0x5, 0x80, [{0x0, 0x0, 0x8}, {0x3, 0x0, 0x3ff}, {0x1ff, 0x0, 0x3ff}, {0x8f57, 0x0, 0x4}, {0x9bf8, 0x0, 0x2b4}]}) 10:10:12 executing program 3: 10:10:12 executing program 5: [ 2479.658610][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2479.667674][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2479.699620][T10334] device syz_tun entered promiscuous mode [ 2479.728849][T21525] usb 3-1: can't set config #1, error -71 [ 2479.743868][T10334] device syz_tun left promiscuous mode [ 2479.744867][T21525] usb 3-1: USB disconnect, device number 8 10:10:12 executing program 3: 10:10:12 executing program 5: 10:10:12 executing program 5: 10:10:12 executing program 3: [ 2479.921866][T27016] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2480.128615][T21525] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2480.170239][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2480.289255][T27016] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2480.297961][T27016] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2480.310088][T27016] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2480.368586][T21525] usb 3-1: Using ep0 maxpacket: 8 [ 2480.419526][T10359] device ip6gretap0 entered promiscuous mode [ 2480.427284][T10359] device ip6gretap0 left promiscuous mode [ 2480.479206][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2480.488256][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.512352][T27016] usb 2-1: Product: syz [ 2480.516566][T27016] usb 2-1: Manufacturer: syz [ 2480.528695][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2480.539098][T27016] usb 2-1: SerialNumber: syz [ 2480.608741][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2480.789315][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2480.799372][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.807345][T21525] usb 3-1: Product: syz [ 2480.812646][T21525] usb 3-1: Manufacturer: syz [ 2480.817236][T21525] usb 3-1: SerialNumber: syz [ 2480.918643][T27016] usb 2-1: 0:2 : does not exist [ 2480.938086][T27016] usb 2-1: USB disconnect, device number 114 [ 2481.198768][T21525] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2481.230364][T21525] usb 3-1: USB disconnect, device number 9 10:10:14 executing program 3: 10:10:14 executing program 5: 10:10:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:14 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xbc240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:14 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)=ANY=[@ANYBLOB="12015002000000086b1d01014000010203010902840003014400000904000000010100000a24010000000201020a240804000000ee423b0c24020100000000000000000f2406000004000000000000000007090401000500020000090401010101020000090501090002009f5f2a7d0902ef072501000000000904020000010200000904020101010200000905820904000800000725"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x3, {"6188e2a6aed96e7fa5ff60854c0053de"}, 0x3, 0x39, 0xfffffffffffffffc}, @in6={0xa, 0x4e21, 0x1, @loopback, 0x5}}}, 0x118) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000140)={0x2}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f00000004c0)=ANY=[@ANYBLOB="080000002800000001000000080000000300000002000000f7ffffff0100000008000000fdffffff70440000060000005f7968b066bbab7ef4c16fe330c8d2d2fdc8554eb7856fc201e537e8f2ffa088bbaa5c0f37495711ebdc932953b5761c057f697469307a5735e720a3c13c4da30bf142846376ff3b530771bbb8844c693ee41381039863fa00cb29fd277e9203bae3f2ab4d4f0840d1191cde41b1d5d77df7ef81910809e782ddf6784ddb6c2e880c4aa8"]) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f00000009c0)=""/240, 0xf0}], 0x4, 0x0, 0x9) r2 = openat$btrfs_control(0xffffff9c, &(0x7f0000000740)='/dev/btrfs-control\x00', 0x6400, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000780)={@local, @multicast1}, &(0x7f0000000980)=0xc) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40000) read$snddsp(r0, &(0x7f0000000000)=""/237, 0xed) [ 2481.630351][T11238] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2481.745747][T10418] device syz_tun entered promiscuous mode [ 2481.754983][T10418] device syz_tun left promiscuous mode [ 2481.868902][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2481.948735][T21525] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2481.999085][T11238] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2482.007801][T11238] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2482.030287][T11238] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2482.198627][T11238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2482.207894][T11238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2482.208480][T21525] usb 3-1: Using ep0 maxpacket: 8 [ 2482.218150][T11238] usb 2-1: Product: syz [ 2482.225969][T11238] usb 2-1: Manufacturer: syz [ 2482.232238][T11238] usb 2-1: SerialNumber: syz [ 2482.241934][T10418] device syz_tun entered promiscuous mode [ 2482.262570][T10418] device syz_tun left promiscuous mode [ 2482.439231][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short 10:10:15 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028c0003010000000904000000010100000a24010000000201020a240800000000ee423b0c24020000020000000000080f2406000004000000000000823867629fc4bf6f331b6e6e9418000007090401f95f0102000009040101010102000009050109000000020007250100000000090402000001020000090402010101020000082402010000000009058209040000000007250100ff0000bf7fae44afc72ac5a1bdc0d8f03cdbf7fc0174e6287e8ec062ddfccadcd5d826e766e05accc865c7090f1a3f4b6b8ea694a3a53c415bf2b887e5e3e157625073d63590814dd4b41be36e976a"], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:10:15 executing program 3: 10:10:15 executing program 5: 10:10:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:15 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xbd240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2482.519196][T21525] usb 3-1: config 1 has an invalid descriptor of length 42, skipping remainder of the config [ 2482.557922][T21525] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2482.567676][T11238] usb 2-1: 0:2 : does not exist 10:10:15 executing program 5: [ 2482.598521][T21525] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2482.609529][T11238] usb 2-1: USB disconnect, device number 115 [ 2482.643756][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 10:10:15 executing program 3: [ 2482.718205][T10450] device syz_tun entered promiscuous mode 10:10:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x10}, {0x10}, {0x10}], 0x30}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1}, 0x0) [ 2482.775328][T10450] device syz_tun left promiscuous mode [ 2482.829305][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2482.838376][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2482.866678][T21525] usb 3-1: Product: syz 10:10:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xeb, 0x3, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7115}, 0x100) [ 2482.877982][T21525] usb 3-1: Manufacturer: syz [ 2482.889815][T21525] usb 3-1: SerialNumber: syz 10:10:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd632124b0d6452d791cc0576c8624862bd395fea6432d69e55d761fafbb02b4dd32cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834", 0xab}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x6) [ 2483.018683][T11238] usb 2-1: new high-speed USB device number 116 using dummy_hcd 10:10:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) [ 2483.198593][T10468] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2483.250344][T10486] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2483.268815][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2483.298838][T21525] usb 3-1: 0:2 : does not exist [ 2483.335023][T21525] usb 3-1: USB disconnect, device number 10 [ 2483.399323][T11238] usb 2-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 2483.419819][T10450] device syz_tun entered promiscuous mode [ 2483.424911][T11238] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2483.435875][T10450] device syz_tun left promiscuous mode [ 2483.599270][T11238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2483.613276][T11238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2483.622085][T11238] usb 2-1: Product: syz [ 2483.626339][T11238] usb 2-1: Manufacturer: syz [ 2483.634730][T11238] usb 2-1: SerialNumber: syz [ 2483.949102][T20567] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2483.957667][T11238] usb 2-1: 0:2 : does not exist [ 2483.975346][T11238] usb 2-1: USB disconnect, device number 116 [ 2484.198576][T20567] usb 3-1: Using ep0 maxpacket: 8 [ 2484.358622][T20567] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2484.438645][T20567] usb 3-1: config 1 has an invalid descriptor of length 42, skipping remainder of the config [ 2484.449253][T20567] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2484.458255][T20567] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2484.471512][T20567] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2484.638719][T20567] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2484.647888][T20567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2484.657308][T20567] usb 3-1: Product: syz [ 2484.662295][T11238] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2484.670081][T20567] usb 3-1: Manufacturer: syz [ 2484.674673][T20567] usb 3-1: SerialNumber: syz 10:10:17 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x14f0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000000)={{0x0, @name="154caed3da8913c9085c207f452e70e6058f310a005a2b3c5f171aa930bd8e3b"}, 0x8, 0x9, 0x8}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$inet(r1, &(0x7f00000000c0)="8e380bcc87b49c560be6bfa4f896a10a5ccb3285324a19755ad4b9b6e25866891a30f75d7b84f27202c87495c92744711f09245d4d5c777f2e68d17d3a1d35c37c9ada2a7c107795243963abebf708ecbab02fc61ee1b9d5bfd48474c669a21fa7d273fa61", 0x65, 0x4000000, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) [ 2484.719466][T20567] usb 3-1: can't set config #1, error -71 [ 2484.738121][T20567] usb 3-1: USB disconnect, device number 11 [ 2484.918546][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2485.039069][T11238] usb 2-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 2485.049645][T11238] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2485.108557][T20567] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2485.219111][T11238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2485.228151][T11238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2485.238000][T11238] usb 2-1: Product: syz [ 2485.242841][T11238] usb 2-1: Manufacturer: syz [ 2485.247443][T11238] usb 2-1: SerialNumber: syz [ 2485.348977][T20567] usb 3-1: Using ep0 maxpacket: 8 10:10:18 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x1000300, 0x4) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:10:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c466539866", 0xb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x6) 10:10:18 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x247a04, 0x0) chdir(&(0x7f0000000440)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x6, 0x0) getdents64(r0, 0x0, 0x0) 10:10:18 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xbe000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2485.509452][T20567] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2485.565030][T10552] device syz_tun entered promiscuous mode [ 2485.572304][T11238] usb 2-1: 0:2 : does not exist [ 2485.587138][T11238] usb 2-1: USB disconnect, device number 117 [ 2485.594249][T20567] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 10:10:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x49, 0x49, 0x7, [@typedef, @typedef, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "01"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x6b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2485.643348][T10552] device syz_tun left promiscuous mode [ 2485.769495][T20567] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2485.787278][T20567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2485.805060][T20567] usb 3-1: Product: syz [ 2485.810247][T20567] usb 3-1: Manufacturer: syz [ 2485.815103][T20567] usb 3-1: SerialNumber: syz [ 2486.028715][T11238] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2486.133112][T10552] device ip6gretap0 entered promiscuous mode [ 2486.147154][T10552] device ip6gretap0 left promiscuous mode [ 2486.188956][T20567] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2486.246107][T20567] usb 3-1: USB disconnect, device number 12 [ 2486.278623][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2486.399499][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2486.419980][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2486.446795][T11238] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 10:10:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2486.618665][T11238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2486.632314][T11238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2486.642780][T11238] usb 2-1: Product: syz [ 2486.647072][T11238] usb 2-1: Manufacturer: syz [ 2486.657394][T11238] usb 2-1: SerialNumber: syz 10:10:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:19 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xbe240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2486.848584][T20567] usb 3-1: new high-speed USB device number 13 using dummy_hcd 10:10:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2486.992300][T10633] device syz_tun entered promiscuous mode [ 2486.999561][T11238] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2487.016588][T10633] device syz_tun left promiscuous mode [ 2487.048274][T11238] usb 2-1: USB disconnect, device number 118 [ 2487.088704][T20567] usb 3-1: Using ep0 maxpacket: 8 [ 2487.248748][T20567] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2487.330648][T20567] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2487.498865][T20567] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2487.509283][T20567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2487.517536][T20567] usb 3-1: Product: syz [ 2487.524251][T20567] usb 3-1: Manufacturer: syz [ 2487.530498][T20567] usb 3-1: SerialNumber: syz 10:10:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x11}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2487.566222][T10633] device syz_tun entered promiscuous mode [ 2487.585705][T10633] device syz_tun left promiscuous mode [ 2487.698562][ T7960] usb 2-1: new high-speed USB device number 119 using dummy_hcd 10:10:20 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)=ANY=[@ANYBLOB="12015002000000086b1d01014000010203010902840003014400000904000000010100000a24010000000201020a240804000000ee423b0c24020100000000000000000f24060000040000000000000000070904010000010200000904010101010200000905010900020002ef072501000000000900010200000904020101010200000905820904000800000725010000f014000000"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) [ 2487.880002][T20567] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2487.930498][T20567] usb 3-1: USB disconnect, device number 13 [ 2487.938671][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2488.072333][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2488.094005][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2488.105626][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2488.298625][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2488.308124][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2488.317238][ T7960] usb 2-1: Product: syz [ 2488.321699][ T7960] usb 2-1: Manufacturer: syz [ 2488.326369][ T7960] usb 2-1: SerialNumber: syz [ 2488.378610][T20567] usb 3-1: new high-speed USB device number 14 using dummy_hcd 10:10:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x8080) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f00000000c0)=0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, 0x0) 10:10:21 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xbf240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x12}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) [ 2488.623692][T20567] usb 3-1: Using ep0 maxpacket: 8 [ 2488.649344][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2488.700624][ T7960] usb 2-1: USB disconnect, device number 119 [ 2488.724595][T10717] device syz_tun entered promiscuous mode 10:10:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="1f5583624999c46653", 0x9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x6) 10:10:21 executing program 1: syz_usb_connect$uac1(0x0, 0xc3, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xd8, 0x4, 0x7e, 0x81, "14a0ce0b32"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x3, 0x40, "05b7a7ca"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1f, 0x3, 0x40, 0x5, "", "4b2a9d"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x1f, 0x4}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x4, 0x5, "1756997e"}, @as_header={0x7, 0x24, 0x1, 0x20, 0xc6, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x5, 0x4, 0x5, "1d2c43f36aa7b03049"}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x3}}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x240800, 0x20, 0x4}, 0x18) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc04c5611, &(0x7f0000000680)={0x9, 0x0, 0x4, 0x76ce3c4c61050aff, 0x6, {r2, r3/1000+60000}, {0x1, 0x0, 0x1, 0xf2, 0x0, 0xfb, "9744931b"}, 0xffff, 0x1, @offset=0x8, 0x6, 0x0, r4}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x20000000) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x40800}, 0x80) [ 2488.793969][T10717] device syz_tun left promiscuous mode [ 2488.800622][T20567] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2488.911704][T20567] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2488.944595][T20567] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2488.987516][T20567] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 10:10:21 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0xc6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000003040)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 10:10:22 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x41) r2 = fanotify_init(0x4, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0xfe) fanotify_mark(r2, 0x105, 0x101b, r1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xa3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0xb69}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) [ 2489.179282][T20567] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2489.188352][T20567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2489.207518][T20567] usb 3-1: Product: syz [ 2489.213202][T20567] usb 3-1: Manufacturer: syz [ 2489.217808][T20567] usb 3-1: SerialNumber: syz 10:10:22 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000280)="3e650f0d8c4c070f20c06635000001000f22c02e0f00100f143dba4100edba2100b001eeba4300b80f00ef0fc732b8bf0faee866b86e0000000f23c00f21f866350200060050a3f8", 0x48}], 0x13, 0x0, 0x0, 0x64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0071, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2489.349613][ T7960] usb 2-1: new high-speed USB device number 120 using dummy_hcd 10:10:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x13}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2489.402321][T10717] device syz_tun entered promiscuous mode [ 2489.421130][T10717] device syz_tun left promiscuous mode [ 2489.604750][T20567] usb 3-1: 0:2 : does not exist [ 2489.609783][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2489.640821][T20567] usb 3-1: USB disconnect, device number 14 [ 2489.739157][ T7960] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2489.752474][ T7960] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2489.809782][ T7960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2490.000298][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2490.010325][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2490.021102][ T7960] usb 2-1: Product: syz [ 2490.025753][ T7960] usb 2-1: Manufacturer: syz [ 2490.032746][ T7960] usb 2-1: SerialNumber: syz 10:10:22 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xc0240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2490.153322][T10811] device syz_tun entered promiscuous mode [ 2490.173293][T10811] device syz_tun left promiscuous mode [ 2490.278503][T27016] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2490.358808][ T7960] usb 2-1: 0:2 : does not exist [ 2490.381459][ T7960] usb 2-1: USB disconnect, device number 120 [ 2490.413027][T10811] device syz_tun entered promiscuous mode [ 2490.447879][T10811] device syz_tun left promiscuous mode [ 2490.558592][T27016] usb 3-1: Using ep0 maxpacket: 8 [ 2490.728708][T27016] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2490.829590][T27016] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2490.840114][T27016] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2490.851430][T27016] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 10:10:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, &(0x7f0000000400)="231ba12e0bfb5f1e0bd36a12a0d7e80849e42e2a5494d44b9138acdb54b02a23b504ae"}}, &(0x7f00000003c0)) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 10:10:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x60}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xc1240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:23 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)=ANY=[@ANYBLOB="12015002000000086b1d01014000010203010902840003014400000904000000010100000a24010071848753780dc41204000000ee423b0c24020100000080000000000f24060000040000000000000000070904010000010200000904010101010200000905010900020002ef0725010000000009040200000102000009040201010102000009058209040a8d0f6bed0815a400f014"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) [ 2491.069122][T27016] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2491.078903][T19515] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2491.092324][T27016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2491.113290][T27016] usb 3-1: Product: syz [ 2491.117817][T27016] usb 3-1: Manufacturer: syz [ 2491.158399][T10845] device syz_tun entered promiscuous mode [ 2491.158578][T27016] usb 3-1: can't set config #1, error -71 [ 2491.171159][T10845] device syz_tun left promiscuous mode [ 2491.194298][T27016] usb 3-1: USB disconnect, device number 15 [ 2491.328568][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2491.468835][T19515] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2491.490851][T19515] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config 10:10:24 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xc2240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2491.516875][T19515] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2491.547860][T10864] device syz_tun entered promiscuous mode [ 2491.556720][T10864] device syz_tun left promiscuous mode [ 2491.568802][T27016] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2491.729453][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2491.742792][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2491.752198][T19515] usb 2-1: Product: syz [ 2491.756389][T19515] usb 2-1: Manufacturer: syz [ 2491.769172][T19515] usb 2-1: SerialNumber: syz [ 2491.780099][T10864] device syz_tun entered promiscuous mode [ 2491.790337][T10864] device syz_tun left promiscuous mode [ 2491.841541][T27016] usb 3-1: Using ep0 maxpacket: 8 10:10:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={&(0x7f0000000080), 0x0}}, &(0x7f00000003c0)) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000), 0xc) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 10:10:24 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008005}, 0x40080) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:10:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf0}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:24 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x89, 0x89, 0x7, [@typedef, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}, @typedef, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "01"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xab}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2492.019789][T19515] usb 2-1: 0:2 : does not exist [ 2492.025405][T27016] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2492.059511][T19515] usb 2-1: USB disconnect, device number 121 [ 2492.120178][T27016] usb 3-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 2492.142663][T27016] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 10:10:25 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xc3240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2492.338683][T27016] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2492.360397][T27016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2492.374991][T27016] usb 3-1: Product: syz [ 2492.380266][T27016] usb 3-1: Manufacturer: syz [ 2492.384860][T27016] usb 3-1: SerialNumber: syz 10:10:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x300}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2492.450536][T10913] device syz_tun entered promiscuous mode [ 2492.468281][T10913] device syz_tun left promiscuous mode [ 2492.488540][T19515] usb 2-1: new high-speed USB device number 122 using dummy_hcd 10:10:25 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0xf0, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xf0}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2492.758885][T19515] usb 2-1: device descriptor read/64, error 18 [ 2492.765353][T27016] usb 3-1: invalid UAC_HEADER (v1) [ 2492.772948][T27016] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 2492.785328][T10913] device syz_tun entered promiscuous mode [ 2492.814766][T27016] usb 3-1: USB disconnect, device number 16 [ 2492.821083][T10913] device syz_tun left promiscuous mode 10:10:25 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:10:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x500}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2493.188476][T19515] usb 2-1: device descriptor read/64, error 18 10:10:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x600}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2493.418620][ T7960] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2493.458584][T19515] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2493.658586][ T7960] usb 3-1: Using ep0 maxpacket: 8 [ 2493.788645][T19515] usb 2-1: device descriptor read/64, error 18 [ 2493.818676][ T7960] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2493.899358][ T7960] usb 3-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 2493.909707][ T7960] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2494.079366][ T7960] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2494.088487][ T7960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2494.096460][ T7960] usb 3-1: Product: syz [ 2494.103111][ T7960] usb 3-1: Manufacturer: syz [ 2494.107696][ T7960] usb 3-1: SerialNumber: syz 10:10:27 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)=ANY=[@ANYBLOB="12015002000000086b1d010140000102030109028400030144000009040000000101000000ee423b0c24020100000000010000000f24060000040000000000000000070904010000010200000904010101010200000905010900020002ef0725010000000009040200000102000009040201010102000009058209040008000007250100ea693c"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) 10:10:27 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xc3ffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x612}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2494.208597][T19515] usb 2-1: device descriptor read/64, error 18 [ 2494.268792][ T7960] usb 3-1: invalid UAC_HEADER (v1) [ 2494.274258][ T7960] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 2494.294116][ T7960] usb 3-1: USB disconnect, device number 17 [ 2494.304307][T10962] device syz_tun entered promiscuous mode [ 2494.321938][T10962] device syz_tun left promiscuous mode [ 2494.329450][T19515] usb usb2-port1: attempt power cycle [ 2494.688613][ T7960] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2494.818985][T10962] device syz_tun entered promiscuous mode [ 2494.826371][T10962] device syz_tun left promiscuous mode [ 2494.928554][ T7960] usb 3-1: Using ep0 maxpacket: 8 10:10:27 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) getrandom(&(0x7f0000000100)=""/192, 0xc0, 0x2) 10:10:27 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet(0x2, 0x2, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1ae, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008100], 0x0, &(0x7f0000000080), &(0x7f0000008100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x4, 0x80f3, 'ip6gretap0\x00', 'ipvlan0\x00', 'veth0\x00', 'wg0\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x17}, [0xff, 0xff, 0xff, 0x0, 0xff], 0xe6, 0xe6, 0x11e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@loopback, @private1, [0xffffff00, 0xff000000, 0xffffffff, 0xff], [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], 0x1f, 0x33, 0xa, 0x8, 0x4e22, 0x4e21, 0x4e21, 0x4e20}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@dev={[], 0x24}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1ee) r2 = dup(r0) signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000240), 0x0, 0x80, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff71ac1b7bdd08000000000000000001e00000010000000080db0c000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070000000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) sendmmsg(r3, &(0x7f000000ac80), 0x66, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:10:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x900}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) 10:10:27 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xc4240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2495.028012][T10985] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2495.048585][T19515] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2495.098661][ T7960] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2495.146528][T10992] bond1 (unregistering): Released all slaves [ 2495.179479][ T7960] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 10:10:28 executing program 3: ustat(0x7, &(0x7f0000000100)) [ 2495.218340][ T7960] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 10:10:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0f20e035010000000f22e0b9e30b0000b8ab75cc71ba000000000f30b8010000000f01d90f20c035000000400f22c0b9800000c00f3235008000000f302e0f6b8eec8cfce40f22c0ea3b0f00009600660f65470867260f790a", 0x59}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2495.394401][T11024] device syz_tun entered promiscuous mode [ 2495.409966][ T7960] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2495.420198][ T7960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2495.420509][T11024] device syz_tun left promiscuous mode [ 2495.438545][ T7960] usb 3-1: Product: syz [ 2495.442747][ T7960] usb 3-1: Manufacturer: syz [ 2495.447352][ T7960] usb 3-1: SerialNumber: syz [ 2495.549662][T19515] usb 2-1: device not accepting address 124, error -71 10:10:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x9, [@typedef, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], '#'}, @typedef]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x55}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 10:10:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa00}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2495.769955][T10985] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2495.818719][ T7960] usb 3-1: cannot find UAC_HEADER [ 2495.824049][ T7960] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 2495.887478][ T7960] usb 3-1: USB disconnect, device number 18 [ 2495.914576][T10992] bond1 (unregistering): Released all slaves [ 2495.938736][T19515] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2496.170336][T19515] usb 2-1: device descriptor read/8, error -61 [ 2496.458677][T19515] usb 2-1: device descriptor read/8, error -61 [ 2496.488530][T21525] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2496.578742][T19515] usb usb2-port1: unable to enumerate USB device [ 2496.758501][T21525] usb 3-1: Using ep0 maxpacket: 8 [ 2496.948585][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2497.029438][T21525] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2497.040774][T21525] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 10:10:30 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000086b1d01014000010203010902840003014400000904000000010100000a2401000097acaa36ec6ed939ee080418d700020181113d2604000000ee423b0c24020100000000000000be0f24060000040000000000000000070904010000010200000904013618f23500000905010900020002ef0725010000000009040200000102001009040201010102000009058100ff030800000725010000f014ccd8a40a58431d25fa38051bbf751614a5b95987e18b9d01966b73cb77d608cc6b06be648f4af7c3db7b7db2d2d0b80acb83dd49b6abfcff971a4296a1c865d7ae37bec0927d"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000300)='/dev/ocfs2_control\x00', 0x3, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0x7}, 0x8) 10:10:30 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xc5240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) [ 2497.248549][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2497.287691][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2497.307881][T11184] device syz_tun entered promiscuous mode [ 2497.342069][T21525] usb 3-1: Product: syz [ 2497.355596][T21525] usb 3-1: Manufacturer: syz [ 2497.366617][T11184] device syz_tun left promiscuous mode [ 2497.385529][T21525] usb 3-1: can't set config #1, error -71 [ 2497.397872][T21525] usb 3-1: USB disconnect, device number 19 [ 2497.607575][T11184] device syz_tun entered promiscuous mode [ 2497.615926][T11184] device syz_tun left promiscuous mode [ 2497.798779][T21525] usb 3-1: new high-speed USB device number 20 using dummy_hcd 10:10:30 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xffff, 0x5]}, 0x8) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:10:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb00}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000001380)={"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"}) 10:10:30 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xc6240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2498.068550][T21525] usb 3-1: Using ep0 maxpacket: 8 10:10:31 executing program 5: [ 2498.196192][T11214] device syz_tun entered promiscuous mode [ 2498.240538][T11214] device syz_tun left promiscuous mode [ 2498.249945][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short 10:10:31 executing program 5: [ 2498.345518][T21525] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 2498.367772][T21525] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 10:10:31 executing program 5: [ 2498.538540][ T7960] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2498.559509][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2498.573481][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2498.584752][T21525] usb 3-1: Product: syz 10:10:31 executing program 3: 10:10:31 executing program 5: [ 2498.594159][T21525] usb 3-1: Manufacturer: syz [ 2498.601022][T21525] usb 3-1: SerialNumber: syz [ 2498.780398][T11214] device syz_tun entered promiscuous mode [ 2498.787988][T11214] device syz_tun left promiscuous mode [ 2498.794751][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2498.921416][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2498.940762][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2498.971021][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2498.988879][T21525] usb 3-1: invalid UAC_HEADER (v1) [ 2498.994227][T21525] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 2499.009007][T21525] usb 3-1: USB disconnect, device number 20 [ 2499.138669][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2499.147895][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2499.157325][ T7960] usb 2-1: Product: syz [ 2499.162334][ T7960] usb 2-1: Manufacturer: syz [ 2499.167037][ T7960] usb 2-1: SerialNumber: syz [ 2499.498775][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2499.536383][ T7960] usb 2-1: USB disconnect, device number 126 [ 2499.628705][T21525] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2499.898516][T21525] usb 3-1: Using ep0 maxpacket: 8 [ 2500.079192][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2500.168608][T21525] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 2500.179146][T21525] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2500.218665][T27016] usb 2-1: new high-speed USB device number 127 using dummy_hcd 10:10:33 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x6, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1, 0x14f0}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4}, 0x3b, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r0, 0x1, 0xffffffffffffffff, 0x1ff}) 10:10:33 executing program 3: 10:10:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc00}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2500.358821][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2500.367893][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2500.378526][T21525] usb 3-1: Product: syz [ 2500.398632][T21525] usb 3-1: can't set config #1, error -71 [ 2500.406813][T21525] usb 3-1: USB disconnect, device number 21 [ 2500.498587][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2500.638742][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2500.649841][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2500.659991][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2500.808825][T21525] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2500.848749][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2500.857898][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2500.867416][T27016] usb 2-1: Product: syz [ 2500.872470][T27016] usb 2-1: Manufacturer: syz [ 2500.877064][T27016] usb 2-1: SerialNumber: syz [ 2501.068521][T21525] usb 3-1: Using ep0 maxpacket: 8 10:10:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, 0x0) 10:10:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000002c0)) 10:10:34 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xc7240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:34 executing program 3: 10:10:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe00}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:34 executing program 3: [ 2501.198781][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found 10:10:34 executing program 5: [ 2501.248583][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2501.257477][T27016] usb 2-1: USB disconnect, device number 127 [ 2501.286613][T11310] device syz_tun entered promiscuous mode 10:10:34 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x8, 0x2004}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x18000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="ae000000050000000800000042f344f904d240de0331b61e7a22b3f455cc605012ae8648d99ddce05a2a686f9a1cbb9e350d19da2eed409539e315c0367ba5b62abc7731e56860814a87b8166a292496098f6b8223a243ab20f17c8f6f8073ae4e9d2774709d7e27b47edb8b83b8b72550e42848dfff91f302757c58040d13f530bb6285b696841ba922e54393cc0e6e3fcff4766989e0448a297a6cc85b3dc35619fe395ac6eb704fb574350bb7b8d533851ddf8788d56aa8e0"]) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:10:34 executing program 3: [ 2501.328888][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2501.365073][T11310] device syz_tun left promiscuous mode [ 2501.519299][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2501.541037][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2501.575076][T21525] usb 3-1: Product: syz [ 2501.590275][T21525] usb 3-1: Manufacturer: syz [ 2501.601479][T21525] usb 3-1: SerialNumber: syz [ 2501.908727][T27016] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2501.968765][T21525] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2502.003938][T11353] device syz_tun entered promiscuous mode [ 2502.012317][T21525] usb 3-1: USB disconnect, device number 22 [ 2502.066566][T11353] device syz_tun left promiscuous mode [ 2502.152553][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2502.289258][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2502.300271][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2502.318564][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2502.498778][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2502.507832][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2502.518544][T27016] usb 2-1: Product: syz [ 2502.522720][T27016] usb 2-1: Manufacturer: syz [ 2502.527311][T27016] usb 2-1: SerialNumber: syz [ 2502.688646][T21525] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2502.848716][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2502.885924][T27016] usb 2-1: USB disconnect, device number 2 [ 2502.958580][T21525] usb 3-1: Using ep0 maxpacket: 8 [ 2503.138641][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2503.229297][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 10:10:36 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x81, 0xffff, 0xfffffffe, 0x80}, 0x10) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)=ANY=[@ANYBLOB="12015002000000086b1d01014000010203010902840003014400000904000000010100000a24010000000201020a240804000000ee423b0c24020100000000000000000f24060000040000000000000000070904010000010200000904010101010200000905010900020002ef072501000000000904020000010200000904020101010200000905820904000800000725010000f015"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) 10:10:36 executing program 3: 10:10:36 executing program 5: 10:10:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1100}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:36 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xc8240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:36 executing program 3: 10:10:36 executing program 5: [ 2503.458662][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2503.476329][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2503.499279][T21525] usb 3-1: Product: syz [ 2503.525271][T11418] device syz_tun entered promiscuous mode [ 2503.539330][T21525] usb 3-1: can't set config #1, error -71 [ 2503.553669][T21525] usb 3-1: USB disconnect, device number 23 [ 2503.558605][T11238] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2503.569842][T11418] device syz_tun left promiscuous mode 10:10:36 executing program 3: 10:10:36 executing program 5: 10:10:36 executing program 3: [ 2503.798730][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2503.919500][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2503.934304][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2503.944582][T11238] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2503.988729][T21525] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2504.119030][T11238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2504.128105][T11238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2504.140572][T11238] usb 2-1: Product: syz [ 2504.144735][T11238] usb 2-1: Manufacturer: syz [ 2504.151235][T11238] usb 2-1: SerialNumber: syz [ 2504.176603][T11418] device syz_tun entered promiscuous mode [ 2504.198373][T11418] device syz_tun left promiscuous mode [ 2504.238607][T21525] usb 3-1: Using ep0 maxpacket: 8 10:10:37 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x0) 10:10:37 executing program 5: [ 2504.440408][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2504.478890][T11238] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2504.521152][T11238] usb 2-1: USB disconnect, device number 3 [ 2504.529343][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2504.729303][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2504.738377][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2504.746503][T21525] usb 3-1: Product: syz [ 2504.751331][T21525] usb 3-1: Manufacturer: syz [ 2504.755955][T21525] usb 3-1: SerialNumber: syz [ 2504.918631][T11238] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2505.129711][T21525] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2505.158508][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2505.184264][T21525] usb 3-1: USB disconnect, device number 24 [ 2505.289297][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2505.300376][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2505.311002][T11238] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2505.480174][T11238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2505.494424][T11238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2505.502842][T11238] usb 2-1: Product: syz [ 2505.507155][T11238] usb 2-1: Manufacturer: syz [ 2505.512180][T11238] usb 2-1: SerialNumber: syz [ 2505.798604][T21525] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2505.839337][T11238] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2505.879668][T11238] usb 2-1: USB disconnect, device number 4 [ 2506.048576][T21525] usb 3-1: Using ep0 maxpacket: 8 [ 2506.218645][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2506.309362][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 10:10:39 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x14f0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x42, 0x145002) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0245629, &(0x7f00000000c0)={0x0, 0x9, 0x0, [], &(0x7f0000000080)}) 10:10:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:10:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1200}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xc9240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 2506.538548][T11238] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2506.558604][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2506.574811][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2506.616986][T21525] usb 3-1: Product: syz [ 2506.634121][T21525] usb 3-1: Manufacturer: syz 10:10:39 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@multicast, @broadcast, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @dev}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x2}}}}}}, 0x0) [ 2506.658658][T21525] usb 3-1: can't set config #1, error -71 [ 2506.677339][T11543] device syz_tun entered promiscuous mode [ 2506.694759][T21525] usb 3-1: USB disconnect, device number 25 [ 2506.724895][T11543] device syz_tun left promiscuous mode 10:10:39 executing program 5: socket$kcm(0x10, 0x0, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0xfffffffffffffec6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 2506.778681][T11238] usb 2-1: Using ep0 maxpacket: 8 10:10:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001840)={0x0, 0x1ff, 0x3}) 10:10:39 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "4a74b94429f191397a12bf4310cf4fe7c141eb"}) [ 2506.901128][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2506.914033][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 10:10:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0x6, [@typedef, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], '#'}, @typedef, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "01"}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x76}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2506.959555][T11238] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2507.088628][T21525] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2507.138823][T11238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2507.149317][T11238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2507.157455][T11238] usb 2-1: Product: syz [ 2507.162181][T11238] usb 2-1: Manufacturer: syz [ 2507.166828][T11238] usb 2-1: SerialNumber: syz [ 2507.218224][T11543] device syz_tun entered promiscuous mode [ 2507.242396][T11543] device syz_tun left promiscuous mode [ 2507.378513][T21525] usb 3-1: Using ep0 maxpacket: 8 10:10:40 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x6b4a, 0x8]}, 0x8) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000040)) 10:10:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x2, 0x1, 0x0, 0x4}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000340)={0x0, 0x1000, 0x800, 0x0, 0x101, 0xd6f, 0x8, 0x2000000200}, &(0x7f0000000040)={0x0, 0x6d7, 0x7d, 0x0, 0x801, 0x8, 0x8, 0x5}, &(0x7f0000000080)={0x7fff, 0x1, 0xffffffffffffff7f, 0x0, 0x4, 0x100, 0x7, 0x1}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x37b, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) [ 2507.488737][T11238] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2507.525818][T11238] usb 2-1: USB disconnect, device number 5 [ 2507.559239][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2507.658798][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2507.889501][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2507.898831][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2507.906969][T21525] usb 3-1: Product: syz [ 2507.913631][T21525] usb 3-1: Manufacturer: syz [ 2507.918323][T21525] usb 3-1: SerialNumber: syz [ 2507.938751][T11238] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2508.188546][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2508.308707][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2508.308824][T21525] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2508.325432][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2508.342554][T11238] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2508.384424][T21525] usb 3-1: USB disconnect, device number 26 [ 2508.509281][T11238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2508.518343][T11238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2508.528704][T11238] usb 2-1: Product: syz [ 2508.532902][T11238] usb 2-1: Manufacturer: syz [ 2508.537498][T11238] usb 2-1: SerialNumber: syz [ 2508.858700][T11238] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2508.887805][T11238] usb 2-1: USB disconnect, device number 6 [ 2508.958665][T21525] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2509.208689][T21525] usb 3-1: Using ep0 maxpacket: 8 [ 2509.398776][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2509.498741][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2509.558669][T11238] usb 2-1: new high-speed USB device number 7 using dummy_hcd 10:10:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1206}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:42 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xca240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:42 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5415, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xe1, "4a74b94429f191397a12bf4310cf4fe7c141eb"}) 10:10:42 executing program 2: ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x801c7011, &(0x7f0000000000)) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x14f0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000080)={0x0, 0xc6b}) ioctl$FIOCLEX(r0, 0x5451) [ 2509.728618][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2509.743910][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2509.767387][T21525] usb 3-1: Product: syz [ 2509.774564][T21525] usb 3-1: Manufacturer: syz [ 2509.798615][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2509.808741][T21525] usb 3-1: can't set config #1, error -71 [ 2509.812164][T11691] device syz_tun entered promiscuous mode 10:10:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x60}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'veth0_to_batadv\x00', {0x3}, 0x9}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2509.827424][T21525] usb 3-1: USB disconnect, device number 27 [ 2509.864939][T11691] device syz_tun left promiscuous mode [ 2509.938981][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2509.962565][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 10:10:42 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) [ 2509.989665][T11238] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 10:10:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) [ 2510.189395][T11238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2510.203437][T11238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2510.221692][T11238] usb 2-1: Product: syz [ 2510.226076][T11238] usb 2-1: Manufacturer: syz 10:10:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x0) [ 2510.235741][T11238] usb 2-1: SerialNumber: syz [ 2510.240814][T21525] usb 3-1: new high-speed USB device number 28 using dummy_hcd 10:10:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1300}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:43 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/196, 0xc4}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0, 0x0) 10:10:43 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) 10:10:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="840000000101050000000000000000000c00000414001080080001400001f8000800014000000006480001801400018008000100ac1e000108000200ffffffff0c0002"], 0x84}}, 0x0) 10:10:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010402508000000000000000000000000567946e532febe96e59729c03250b6ebf45609f1833791e997438d263190e1bbd21d14ddec594e57", @ANYRES32=r8, @ANYBLOB="000000000000000008000a0014000000"], 0x28}}, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYRES64, @ANYRESOCT=r4, @ANYRESHEX=r7, @ANYRES16=r8, @ANYBLOB="dc560bca1d6efa332e09c6b23cff54b61a269647cb0ee0e395ef2a143ec0a9f4afcf3985fcab36c9694a0fbca63d986571a931fff44002fe06a9df37c42751be243b1088700bd86290572a092aa83903e114f3c21aef70f76f746828d3a064e530faeac8bfff87419a74eb27ae5f3a80b7dba41e20fa79daa97c6f6fe40c0f119996d110d7c00ce950c4c2268362cbb8ce56d0db9c8f5e0d04f710fdd7689461be38b4493dec359ef306a8b5b575844d4c4b7815c070fae739642c1b06aa28ec3f8ff6aaa3d47977863fd79d3a1f", @ANYRESHEX=r7, @ANYRESHEX, @ANYRESOCT=r9], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x82, 0x2000) [ 2510.497307][T11691] device syz_tun entered promiscuous mode [ 2510.506764][T11691] device syz_tun left promiscuous mode [ 2510.519152][T21525] usb 3-1: Using ep0 maxpacket: 8 [ 2510.574363][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2510.578867][T11238] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2510.585167][T11744] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2510.615786][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2510.663013][T11238] usb 2-1: USB disconnect, device number 7 [ 2510.703915][T21525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2510.799637][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2510.999365][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2511.008611][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2511.016680][T21525] usb 3-1: Product: syz [ 2511.023283][T21525] usb 3-1: Manufacturer: syz [ 2511.028100][T21525] usb 3-1: SerialNumber: syz [ 2511.081104][T11748] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2511.101215][T11761] batman_adv: batadv0: Adding interface: veth67 [ 2511.107487][T11761] batman_adv: batadv0: The MTU of interface veth67 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2511.133724][T11761] batman_adv: batadv0: Not using interface veth67 (retrying later): interface not active [ 2511.144715][T11769] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2511.198855][T11238] usb 2-1: new high-speed USB device number 8 using dummy_hcd 10:10:44 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xcb240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:44 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x50}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 2511.328462][T11799] device syz_tun entered promiscuous mode [ 2511.337314][T11799] device syz_tun left promiscuous mode [ 2511.398714][T21525] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2511.449721][T21525] usb 3-1: USB disconnect, device number 28 [ 2511.469108][T11238] usb 2-1: device descriptor read/64, error 18 [ 2511.709116][T11799] device syz_tun entered promiscuous mode [ 2511.717530][T11799] device syz_tun left promiscuous mode 10:10:44 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)=ANY=[@ANYBLOB="1201500200000008682a00594c0bd4266795cda3fbc501020304090284000301440000090400020a240804000000ee423b0c24020100000000000000000f2406000004000000000000000007090401000001020000091a0107258c489bfe57f777c400090402092400080000072501"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) openat$tun(0xffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80, 0x0) 10:10:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x95, 0x95, 0x5, [@datasec={0x0, 0x4, 0x0, 0xf, 0x3, [{}, {}, {}, {}], "cb966a"}, @typedef, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], '#'}, @typedef, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "01"}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0xb5}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 10:10:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x15e9}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:44 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="2b206d8c4843b3977b7ea49da2aa", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 2511.858834][T11238] usb 2-1: device descriptor read/64, error 18 10:10:44 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xcc240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcd, 0xcd, 0x6, [@datasec={0x0, 0x4, 0x0, 0xf, 0x3, [{}, {}, {}, {}], "cb966a"}, @typedef, @enum={0x0, 0x7, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], '#'}, @typedef, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "01"}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xee}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2512.036667][T11856] device syz_tun entered promiscuous mode [ 2512.050135][T11856] device syz_tun left promiscuous mode [ 2512.128721][T11238] usb 2-1: new high-speed USB device number 9 using dummy_hcd 10:10:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3f00}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2512.268589][T19515] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2512.326559][T11856] device ip6gretap0 entered promiscuous mode [ 2512.335185][T11856] device ip6gretap0 left promiscuous mode [ 2512.408556][T11238] usb 2-1: device descriptor read/64, error 18 [ 2512.509450][T19515] usb 3-1: Using ep0 maxpacket: 8 10:10:45 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xcd240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5865}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2512.675285][T11880] device syz_tun entered promiscuous mode [ 2512.694927][T11880] device syz_tun left promiscuous mode [ 2512.708736][T19515] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2512.717382][T19515] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 2512.798557][T11238] usb 2-1: device descriptor read/64, error 18 [ 2512.859421][T19515] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2512.867012][T19515] usb 3-1: can't read configurations, error -61 [ 2512.919081][T11238] usb usb2-port1: attempt power cycle [ 2513.038598][T19515] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2513.096527][T11880] device syz_tun entered promiscuous mode [ 2513.117897][T11880] device syz_tun left promiscuous mode [ 2513.298671][T19515] usb 3-1: Using ep0 maxpacket: 8 [ 2513.509181][T19515] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2513.516921][T19515] usb 3-1: too many configurations: 149, using maximum allowed: 8 10:10:46 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030113e58c00030100000009040000000160d3000a24010000000201020a2408000000e5ed423b0c24020000020000000000080f24eaffff03000000000000000003090401000000020000090401010101020000090d0109000000020007250100000000090402000001020000090402010101020000082402010000000009058209040000000007250100ff0000"], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:10:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6000}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:46 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xce240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2513.631202][T11238] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2513.675379][T19515] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2513.683867][T19515] usb 3-1: can't read configurations, error -61 [ 2513.701987][T19515] usb usb3-port1: attempt power cycle [ 2513.754484][T11898] device syz_tun entered promiscuous mode [ 2513.762839][T11898] device syz_tun left promiscuous mode [ 2514.128538][T11238] usb 2-1: device not accepting address 10, error -71 [ 2514.239378][T11898] device syz_tun entered promiscuous mode [ 2514.246704][T11898] device syz_tun left promiscuous mode [ 2514.448643][T19515] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2514.498718][T11238] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2514.558630][T19515] usb 3-1: Using ep0 maxpacket: 8 [ 2514.588699][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2514.739134][T19515] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2514.746869][T19515] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 2514.749158][T11238] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2514.766170][T11238] usb 2-1: can't read configurations, error -61 [ 2514.772993][T11238] usb usb2-port1: unable to enumerate USB device [ 2514.889300][T19515] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2514.905855][T19515] usb 3-1: can't read configurations, error -61 10:10:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:10:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6558}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:47 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xcf240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:10:47 executing program 3: r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x7, 0x0) close(r0) mq_unlink(0x0) 10:10:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001840)={0x0, 0x1ff}) 10:10:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8]}) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x0, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2515.076839][T11918] device syz_tun entered promiscuous mode 10:10:48 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x2, 0x0, [{0x0, 0xd1, &(0x7f0000000400)=""/209}, {0x4, 0x73, &(0x7f0000000180)=""/115}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) [ 2515.125863][T11918] device syz_tun left promiscuous mode 10:10:48 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10:10:48 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/196, 0xc4}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0, 0x0) 10:10:49 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), &(0x7f00000002c0)=[&(0x7f0000000140)='\xaa\x00', &(0x7f0000000180)='[\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='!!--\x00', &(0x7f0000000240)=',\x00', &(0x7f0000000280)=')\xad\x00'], 0x100) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x19a3) 10:10:49 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x58}}, 0x0) 10:10:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast2, @empty}}}, {{@arp={@multicast1, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'ip6_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x48a) 10:10:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8100}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:10:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffef2, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) [ 2517.158597][T19515] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2517.448511][T19515] usb 2-1: device descriptor read/64, error 18 [ 2517.848578][T19515] usb 2-1: device descriptor read/64, error 18 [ 2518.118571][T19515] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2518.334371][T11961] device ip6gretap0 entered promiscuous mode [ 2518.373593][T11961] device ip6gretap0 left promiscuous mode [ 2518.398581][T19515] usb 2-1: device descriptor read/64, error 18 [ 2518.852777][T19515] usb 2-1: device descriptor read/64, error 18 [ 2518.978896][T19515] usb usb2-port1: attempt power cycle [ 2519.708541][T19515] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2519.838705][T19515] usb 2-1: device descriptor read/8, error -71 [ 2520.058585][T19515] usb 2-1: device descriptor read/8, error -71 [ 2520.851164][T11979] bridge0: port 2(bridge_slave_1) entered disabled state [ 2520.859327][T11979] bridge0: port 1(bridge_slave_0) entered disabled state [ 2524.149264][T11979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2524.498971][T11979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2527.497889][T11979] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2527.506830][T11979] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2527.515742][T11979] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2527.524653][T11979] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2529.955907][T11980] device lo left promiscuous mode [ 2529.966596][T11980] device tunl0 left promiscuous mode [ 2529.973111][T11980] device gre0 left promiscuous mode [ 2529.984009][T11980] device gretap0 left promiscuous mode [ 2529.990768][T11980] device erspan0 left promiscuous mode [ 2529.996361][T11980] device ip_vti0 left promiscuous mode [ 2530.007195][T11980] device ip6_vti0 left promiscuous mode [ 2530.014010][T11980] device sit0 left promiscuous mode [ 2530.024810][T11980] device ip6tnl0 left promiscuous mode [ 2530.035065][T11980] device ip6gre0 left promiscuous mode [ 2530.043791][T11980] device ip6gretap0 left promiscuous mode [ 2530.051093][T11980] device bridge0 left promiscuous mode [ 2530.056616][T11980] device vcan0 left promiscuous mode [ 2530.065193][T11980] device bond0 left promiscuous mode [ 2530.071484][T11980] device bond_slave_0 left promiscuous mode [ 2530.077467][T11980] device bond_slave_1 left promiscuous mode [ 2530.086729][T11980] device team0 left promiscuous mode [ 2530.092100][T11980] device team_slave_0 left promiscuous mode [ 2530.098117][T11980] device team_slave_1 left promiscuous mode [ 2530.104402][T11980] device dummy0 left promiscuous mode [ 2530.110067][T11980] device nlmon0 left promiscuous mode [ 2530.115676][T11980] device caif0 left promiscuous mode [ 2530.122359][T11980] device bridge_slave_0 left promiscuous mode [ 2530.128644][T11980] bridge0: port 1(bridge_slave_0) entered disabled state [ 2530.141405][T11980] device bridge_slave_1 left promiscuous mode [ 2530.147549][T11980] bridge0: port 2(bridge_slave_1) entered disabled state [ 2530.158015][T11980] bond0: (slave bond_slave_0): Releasing backup interface [ 2530.168764][T11980] bond0: (slave bond_slave_1): Releasing backup interface [ 2530.179334][T11980] team0: Port device team_slave_0 removed [ 2530.186566][T11980] team0: Port device team_slave_1 removed [ 2530.193270][T11980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2530.202643][T11980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2530.214253][T11980] device bond1 left promiscuous mode [ 2530.219825][T11980] bridge0: port 3(bond1) entered disabled state [ 2530.232154][T11980] batman_adv: batadv0: Removing interface: veth5 [ 2530.241247][T11980] batman_adv: batadv0: Removing interface: veth13 [ 2530.250488][T11980] batman_adv: batadv0: Removing interface: veth19 [ 2530.258883][T11980] bond2: (slave veth23): Releasing active interface [ 2530.265476][T11980] bond2: (slave veth23): the permanent HWaddr of slave - 86:f1:48:4a:c7:f7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2530.284465][T11980] bond2: (slave veth25): Releasing active interface [ 2530.293673][T11980] batman_adv: batadv0: Removing interface: veth29 [ 2530.302478][T11980] batman_adv: batadv0: Removing interface: veth31 [ 2530.312140][T11980] batman_adv: batadv0: Removing interface: veth37 [ 2530.320747][T11980] batman_adv: batadv0: Removing interface: veth39 [ 2530.328984][T11980] batman_adv: batadv0: Removing interface: veth43 [ 2530.337067][T11980] batman_adv: batadv0: Removing interface: veth53 [ 2530.345461][T11980] batman_adv: batadv0: Removing interface: veth55 [ 2530.357356][T11980] batman_adv: batadv0: Removing interface: veth61 10:11:03 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xd0240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:03 executing program 5: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000), 0x1c) sysfs$3(0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000014, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 10:11:03 executing program 3: r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/128, 0x80, 0x0, 0x0) 10:11:03 executing program 1: syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d0101400001020301090242fe03ffff00000904000000010100000a24010000000201020a240800000000ee423b0c24020000020000000000080a2404053f8dd3e9f9ff09040100000102000009040101010102000009058009000000020007250100000000090402000001020000090402010101020000082402010000000009058209040000000007250100ff000055cdcba09b6bf7d9105b2933ab6dfdb378"], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:11:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe915}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10:11:03 executing program 3: r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/128, 0x80, 0x0, 0x0) 10:11:03 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 10:11:03 executing program 3: r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/128, 0x80, 0x0, 0x0) 10:11:03 executing program 3: r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/128, 0x80, 0x0, 0x0) 10:11:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11f, 0x11f, 0x7, [@datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], "cb"}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @typedef, @enum={0x0, 0x7, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], '#'}, @typedef, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{}, {}, {}], "01"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x13f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2530.972189][T12007] device syz_tun entered promiscuous mode [ 2530.988170][T12007] device syz_tun left promiscuous mode 10:11:03 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) [ 2531.088601][T11238] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2531.328588][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2531.448730][T11238] usb 2-1: config index 0 descriptor too short (expected 65090, got 135) [ 2531.457285][T11238] usb 2-1: config 255 has an invalid descriptor of length 1, skipping remainder of the config [ 2531.468038][T11238] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 3 [ 2531.569739][T12007] device syz_tun entered promiscuous mode [ 2531.577053][T12007] device syz_tun left promiscuous mode [ 2531.628874][T11238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2531.637926][T11238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2531.661178][T11238] usb 2-1: Product: syz [ 2531.666822][T11238] usb 2-1: Manufacturer: syz [ 2531.676188][T11238] usb 2-1: SerialNumber: syz 10:11:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xd1240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:04 executing program 3: mq_open(0x0, 0x43, 0x0, 0x0) 10:11:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 2531.854255][T12043] device syz_tun entered promiscuous mode [ 2531.868019][T12043] device syz_tun left promiscuous mode [ 2532.048941][T11238] usb 2-1: 0:2 : does not exist [ 2532.073709][T11238] usb 2-1: USB disconnect, device number 16 [ 2532.121223][T12043] device syz_tun entered promiscuous mode [ 2532.142787][T12043] device syz_tun left promiscuous mode [ 2532.698535][ T8093] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2532.938535][ T8093] usb 2-1: Using ep0 maxpacket: 8 [ 2533.058683][ T8093] usb 2-1: config index 0 descriptor too short (expected 65090, got 135) [ 2533.067137][ T8093] usb 2-1: config 255 has an invalid descriptor of length 1, skipping remainder of the config [ 2533.078117][ T8093] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 3 [ 2533.239146][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2533.248201][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2533.257632][ T8093] usb 2-1: Product: syz [ 2533.262492][ T8093] usb 2-1: Manufacturer: syz [ 2533.267080][ T8093] usb 2-1: SerialNumber: syz 10:11:06 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x3, 0x4) 10:11:06 executing program 3: mq_open(0x0, 0x43, 0x0, 0x0) 10:11:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf000}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10:11:06 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xd2240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:06 executing program 3: mq_open(0x0, 0x43, 0x0, 0x0) [ 2533.640185][ T8093] usb 2-1: 0:2 : does not exist [ 2533.680675][ T8093] usb 2-1: USB disconnect, device number 17 10:11:06 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0) [ 2533.751182][T12084] device syz_tun entered promiscuous mode [ 2533.794345][T12084] device syz_tun left promiscuous mode 10:11:06 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0}, 0x20) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00'}, 0x10) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000200)=r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001e00), 0xa}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) socket$kcm(0x10, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000400)=""/4080, 0x1000}, {&(0x7f0000001740)=""/190, 0xffffff81}, {&(0x7f0000000080)=""/115, 0x73}], 0x3}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x4884) recvmsg$kcm(r2, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x40) 10:11:06 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0) 10:11:06 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0) 10:11:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2534.098736][ T8093] usb 2-1: new high-speed USB device number 18 using dummy_hcd 10:11:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x4, 0x0, &(0x7f0000000280)) [ 2534.348612][ T8093] usb 2-1: Using ep0 maxpacket: 8 [ 2534.424315][T12084] device ip6gretap0 entered promiscuous mode [ 2534.436813][T12084] device ip6gretap0 left promiscuous mode [ 2534.478896][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2534.498492][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2534.508145][ T8093] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2534.679191][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2534.688238][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2534.700472][ T8093] usb 2-1: Product: syz [ 2534.704619][ T8093] usb 2-1: Manufacturer: syz [ 2534.711290][ T8093] usb 2-1: SerialNumber: syz [ 2535.038784][ T8093] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2535.077238][ T8093] usb 2-1: USB disconnect, device number 18 [ 2535.738613][ T8093] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2535.978544][ T8093] usb 2-1: Using ep0 maxpacket: 8 [ 2536.098694][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2536.109582][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2536.120994][ T8093] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2536.288675][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2536.297776][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2536.307165][ T8093] usb 2-1: Product: syz [ 2536.312078][ T8093] usb 2-1: Manufacturer: syz [ 2536.316708][ T8093] usb 2-1: SerialNumber: syz 10:11:09 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0}, 0x20) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00'}, 0x10) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000200)=r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001e00), 0xa}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) socket$kcm(0x10, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000400)=""/4080, 0x1000}, {&(0x7f0000001740)=""/190, 0xffffff81}, {&(0x7f0000000080)=""/115, 0x73}], 0x3}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x4884) recvmsg$kcm(r2, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x40) 10:11:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10:11:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) close(r3) 10:11:09 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xd3240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:09 executing program 1: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) [ 2536.638741][ T8093] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2536.716532][ T8093] usb 2-1: USB disconnect, device number 19 [ 2536.769119][T12179] device syz_tun entered promiscuous mode [ 2536.807396][T12179] device syz_tun left promiscuous mode 10:11:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2537.138576][ T8093] usb 2-1: new high-speed USB device number 20 using dummy_hcd 10:11:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x2}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_setscheduler(r1, 0x0, &(0x7f0000000080)=0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="441009090000000000000001", 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), 0x4) 10:11:10 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0}, 0x20) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00'}, 0x10) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000200)=r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001e00), 0xa}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) socket$kcm(0x10, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000400)=""/4080, 0x1000}, {&(0x7f0000001740)=""/190, 0xffffff81}, {&(0x7f0000000080)=""/115, 0x73}], 0x3}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x4884) recvmsg$kcm(r2, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x40) [ 2537.197680][T12179] device syz_tun entered promiscuous mode [ 2537.219367][T12179] device syz_tun left promiscuous mode 10:11:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x3}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x4}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2537.404950][ T8093] usb 2-1: Using ep0 maxpacket: 8 10:11:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2537.529171][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2537.555136][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 10:11:10 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xd4240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r3, 0xf, 0x0, 0x0, {0xf, 0x0, 0x500}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x4}]}, 0x24}}, 0x0) 10:11:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 2537.579465][ T8093] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 10:11:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x6}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2537.676034][T12242] device syz_tun entered promiscuous mode [ 2537.703513][T12242] device syz_tun left promiscuous mode [ 2537.786179][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2537.798821][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2537.817866][ T8093] usb 2-1: Product: syz [ 2537.823673][ T8093] usb 2-1: Manufacturer: syz [ 2537.835658][ T8093] usb 2-1: SerialNumber: syz [ 2538.158780][ T8093] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2538.232364][ T8093] usb 2-1: USB disconnect, device number 20 [ 2538.858588][ T8093] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2539.098544][ T8093] usb 2-1: Using ep0 maxpacket: 8 [ 2539.218722][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2539.229677][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2539.241278][ T8093] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2539.408715][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2539.417780][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2539.430127][ T8093] usb 2-1: Product: syz [ 2539.434297][ T8093] usb 2-1: Manufacturer: syz [ 2539.441204][ T8093] usb 2-1: SerialNumber: syz 10:11:12 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830000000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c7469636173744005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636153740005008300000000050e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400050083000000000014e9a8d570b7dc717d6852fb0457cd3aec8a3cc1d2adb4ff76833c5aebbba799db328a8f6fb7a5420c9e4a8eecc82b41ff14527d1a9250726d02d55d10d09e895cd237fa06fbe5bd0fed0404a1c66dbd"], 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) 10:11:12 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x401070c9, &(0x7f0000004300)={0x0, 0x0, 0x2}) 10:11:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x8}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 10:11:12 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xd5240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000e00)='./bus\x00', 0x0) [ 2539.728998][ T8093] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2539.735629][T12298] device syz_tun entered promiscuous mode 10:11:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x9}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2539.782561][T12298] device syz_tun left promiscuous mode [ 2539.806621][ T8093] usb 2-1: USB disconnect, device number 21 10:11:12 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x1f, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) chdir(&(0x7f0000000000)='./file1\x00') 10:11:12 executing program 5: socket$inet6(0xa, 0x0, 0x6b) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002007, 0x0, 0x0, 0x0, 0x0, 0x5000603}}], 0xc6, 0x0) 10:11:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xa}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xb}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xc}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2540.288876][ T8093] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2540.369330][T12298] device ip6gretap0 entered promiscuous mode [ 2540.387992][T12298] device ip6gretap0 left promiscuous mode [ 2540.538597][ T8093] usb 2-1: Using ep0 maxpacket: 8 [ 2540.658667][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2540.669667][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2540.681202][ T8093] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2540.848658][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2540.857813][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2540.865973][ T8093] usb 2-1: Product: syz [ 2540.870333][ T8093] usb 2-1: Manufacturer: syz [ 2540.875035][ T8093] usb 2-1: SerialNumber: syz [ 2541.198678][ T8093] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2541.238163][ T8093] usb 2-1: USB disconnect, device number 22 [ 2541.898521][T21525] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2542.138552][T21525] usb 2-1: Using ep0 maxpacket: 8 [ 2542.268988][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2542.279912][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2542.290063][T21525] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2542.459688][T21525] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2542.468850][T21525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2542.476834][T21525] usb 2-1: Product: syz [ 2542.482365][T21525] usb 2-1: Manufacturer: syz [ 2542.486946][T21525] usb 2-1: SerialNumber: syz 10:11:15 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000100)) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000050) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$qrtr(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) 10:11:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 10:11:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002007, 0x0, 0x0, 0x0, 0x0, 0x5000603}}], 0xc6, 0x0) 10:11:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xe}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:15 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xd6240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) ptrace$pokeuser(0x6, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) [ 2542.818715][T21525] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2542.823823][T12415] device syz_tun entered promiscuous mode [ 2542.865016][T12423] ptrace attach of "/root/syz-executor.3"[12416] was attempted by "/root/syz-executor.3"[12423] [ 2542.884098][T12415] device syz_tun left promiscuous mode 10:11:15 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b9030006"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:11:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x10}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2542.908222][T21525] usb 2-1: USB disconnect, device number 23 10:11:15 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) llistxattr(&(0x7f0000004280)='./file0\x00', 0x0, 0x0) 10:11:15 executing program 3: 10:11:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x11}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2543.357539][T12415] device syz_tun entered promiscuous mode [ 2543.363727][T21525] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2543.382560][T12415] device syz_tun left promiscuous mode [ 2543.638713][T21525] usb 2-1: Using ep0 maxpacket: 8 [ 2543.779066][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2543.790031][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2543.799916][T21525] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2544.008648][T21525] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2544.017766][T21525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2544.026064][T21525] usb 2-1: Product: syz [ 2544.030379][T21525] usb 2-1: Manufacturer: syz [ 2544.035076][T21525] usb 2-1: SerialNumber: syz [ 2544.368756][T21525] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2544.399573][T21525] usb 2-1: USB disconnect, device number 24 [ 2545.068594][T11238] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2545.308636][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2545.429686][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2545.443745][T11238] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2545.454806][T11238] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2545.619591][T11238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2545.628699][T11238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2545.636688][T11238] usb 2-1: Product: syz [ 2545.642815][T11238] usb 2-1: Manufacturer: syz [ 2545.647418][T11238] usb 2-1: SerialNumber: syz 10:11:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x12}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:18 executing program 3: 10:11:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:18 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xd7240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:18 executing program 5: 10:11:18 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d030109028c00030100b00009040000000101ab000a24010000000201020a240800000000ee423b0c24020000020000000000080f245912e30600000400000000000000850d09040100000102000009040101010102000009050109000000020007250100000000090402000001020000090402010101020000082402010000000009058209040000000007250100ff0000000000000000"], 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x200012) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) [ 2545.906255][T12525] device syz_tun entered promiscuous mode [ 2545.908811][T11238] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found 10:11:18 executing program 3: 10:11:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x13}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:18 executing program 5: [ 2545.960285][T12525] device syz_tun left promiscuous mode [ 2545.999727][T11238] usb 2-1: USB disconnect, device number 25 10:11:19 executing program 3: 10:11:19 executing program 5: 10:11:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x60}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:19 executing program 3: 10:11:19 executing program 5: [ 2546.428801][T11238] usb 2-1: new high-speed USB device number 26 using dummy_hcd 10:11:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2546.538960][T12525] device syz_tun entered promiscuous mode [ 2546.550255][T12525] device syz_tun left promiscuous mode [ 2546.668558][T11238] usb 2-1: Using ep0 maxpacket: 8 10:11:19 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xd8020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xf0}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2546.780403][T12581] device syz_tun entered promiscuous mode [ 2546.787704][T12581] device syz_tun left promiscuous mode [ 2546.838629][T11238] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2546.846213][T11238] usb 2-1: can't read configurations, error -61 [ 2546.929790][T12581] device ip6gretap0 entered promiscuous mode [ 2546.938389][T12581] device ip6gretap0 left promiscuous mode [ 2546.998648][T11238] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2547.238589][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2547.398649][T11238] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2547.406234][T11238] usb 2-1: can't read configurations, error -61 [ 2547.413176][T11238] usb usb2-port1: attempt power cycle [ 2548.128638][T11238] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2548.229111][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2548.389358][T11238] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2548.397033][T11238] usb 2-1: can't read configurations, error -61 [ 2548.549015][T11238] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2548.639060][T11238] usb 2-1: Using ep0 maxpacket: 8 [ 2548.798704][T11238] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2548.806290][T11238] usb 2-1: can't read configurations, error -61 [ 2548.814115][T11238] usb usb2-port1: unable to enumerate USB device 10:11:21 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) 10:11:21 executing program 3: 10:11:21 executing program 5: 10:11:21 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x300}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:21 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xd8240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:21 executing program 3: 10:11:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0xa, 0x3f}, {0x1}]}) 10:11:21 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x500}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2549.063576][T12598] device syz_tun entered promiscuous mode [ 2549.098783][T12598] device syz_tun left promiscuous mode 10:11:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r5, r2, 0x0) 10:11:22 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/196, 0xc4}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) [ 2549.428657][ T8093] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2549.688569][ T8093] usb 2-1: Using ep0 maxpacket: 8 [ 2549.806585][T12598] device syz_tun entered promiscuous mode [ 2549.814833][T12598] device syz_tun left promiscuous mode [ 2549.838737][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2549.858547][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2549.868199][ T8093] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2550.098704][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2550.107810][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2550.116526][ T8093] usb 2-1: Product: syz [ 2550.120951][ T8093] usb 2-1: Manufacturer: syz [ 2550.125557][ T8093] usb 2-1: SerialNumber: syz [ 2550.448706][ T8093] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2550.478179][ T8093] usb 2-1: USB disconnect, device number 30 [ 2551.158565][T19515] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2551.398579][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2551.519287][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2551.530136][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2551.541205][T19515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2551.709335][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2551.718443][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2551.727001][T19515] usb 2-1: Product: syz [ 2551.731278][T19515] usb 2-1: Manufacturer: syz [ 2551.735965][T19515] usb 2-1: SerialNumber: syz 10:11:24 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0xffff}) 10:11:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x600}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:24 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73de7d558e6cc117020738b489415dcd2915460ae92b656c94ef3dd3c", 0xce}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 10:11:24 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xd9240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:24 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/196, 0xc4}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) [ 2552.048968][T19515] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2552.066130][T12687] device syz_tun entered promiscuous mode [ 2552.077865][T12697] ptrace attach of "/root/syz-executor.3"[12693] was attempted by "/root/syz-executor.3"[12697] 10:11:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) [ 2552.100007][T19515] usb 2-1: USB disconnect, device number 31 10:11:25 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2552.168349][T12687] device syz_tun left promiscuous mode 10:11:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x612}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:25 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendfile(r1, r0, 0x0, 0x100000004) dup2(0xffffffffffffffff, r0) 10:11:25 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x900}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2552.578638][T19515] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2552.708383][T12687] device syz_tun entered promiscuous mode [ 2552.716108][T12687] device syz_tun left promiscuous mode [ 2552.838545][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2552.958720][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2552.969566][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2552.979888][T19515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2553.149158][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2553.158202][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2553.166661][T19515] usb 2-1: Product: syz [ 2553.171180][T19515] usb 2-1: Manufacturer: syz [ 2553.175770][T19515] usb 2-1: SerialNumber: syz [ 2553.488923][T19515] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2553.536784][T19515] usb 2-1: USB disconnect, device number 32 [ 2554.218579][T19515] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2554.498547][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2554.639065][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2554.649970][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2554.661058][T19515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2554.859168][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2554.868233][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2554.877245][T19515] usb 2-1: Product: syz [ 2554.882056][T19515] usb 2-1: Manufacturer: syz [ 2554.886645][T19515] usb 2-1: SerialNumber: syz 10:11:27 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028c0003010000000904000000010100000a24010000000201020a200800000000ee423b0c24020000020000000000080f240600000400000000000000000709040100000102000009040101010102000009050109000000020007250100000000090402000001020000090402010101020000082402010000000009058209040000000007250100ff0000"], 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a45321, &(0x7f0000000000)={{0x3, 0x7a}, 'port0\x00', 0x20, 0x130004, 0x39, 0x6, 0x6000, 0xfffffff8, 0xba, 0x0, 0x1, 0x5}) keyctl$clear(0x7, 0xfffffffffffffff8) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x428b263f, 0x0, 0x0, 0xe, 0x7fff, 0x1}, &(0x7f0000000100)=0x20) 10:11:27 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103}, 0x20) dup2(r1, r2) 10:11:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xa00}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:27 executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:27 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x20000051) inotify_rm_watch(r1, r2) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000480)={0x10}, 0x10) 10:11:27 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xda240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2555.118739][T19515] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2555.153956][T12790] device syz_tun entered promiscuous mode 10:11:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2555.172243][T19515] usb 2-1: USB disconnect, device number 33 10:11:28 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) [ 2555.243614][T12790] device syz_tun left promiscuous mode 10:11:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xb00}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:28 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000001300)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) getpriority(0x2, 0x0) 10:11:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) timerfd_create(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x42e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a46a2f", 0x3f8, 0x3a, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78ce5402000000053d5dea6b259fe5d00000000000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a803721d"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x5a, "062bf7b5e0f2dbbdc849b90d4e80a0e3f7af088060d01a1cfcfad88ef4512c6ef5c0ead4b9cc87484b106a060a9899d50f595204418f51e91480b395741dd314136a262cadf02b071d88e61703f037caded0b315701274012fa532ddd69499074e1a2df196e0afcffda08fb3d82ab8160253a47d3efc3d7cead55c28610ae20f69aaced0a1a6ce815344cf8d0bc8a0dfcdd1e8cd7242601777ec653c2d4b704397dc9e350982afd017eaa630c840d71589499fd68239ae0c0aa2fc9b949d1a716d40a24f078e92e8c268ff726290944b5f3a3bea9559f2d2a51405fba224411ecc49544dea47917a98bf79c3c8ecd70429abf70a52ecbda21c9bf0f6a70cd2c2c887391e4095ad223437c60abf829447b47bd231ca2a98d9da7519a4bd28e803fa0023afc0dc453ed56cdf4356d7abcfec4eed0b94a4f78ce44a7177c6684026bb4f26a17e52e326c8bb7be5e2ea5780d7169d8f4ff62cb2b223f1d6221f62e0ee0244d86042560edd36853c464b23be536c65b87cd5ea60932ed90607b369ed2017f645afcb5cd07f6896a08473bd5dea2bfb52ac501a39c338ede985aa4a7755db876cc1558aac15ad4d6c078834be4d944f3cce0079d2ad9ba8d17f01a614052aadbd4af0fd282f594dc4530ee49b6c9ae6d5d80a073e678594be2e2f0869baa2a58dd2d0f6a995fb706c4d1b618d57da1c2d8f55611f746105a947b4f6bb74dbdbffb1b3c1f2316f6a28a07f0145b1bf8345b6aa4e9d5a819497856792121219ea151c1f8e2f86356039bc5b87fe4cad4344e8b48687e6e751803865165eac2c34bdddae1bbe52f55d08cc4a0865f8df372635e8a26ac4ac9716a124ac4e83349f17b612e2b1893b5eaccecc7d812bb4f4fc6b313f57c2035a90f782a4a97b5f5309b6c5798d72b9187f3d411e84041e3671fe35e39fa1887846721c38d501b471990b919d2ad9ca9bc71157a843d75838c0aa4ff0dabd74284709f1f87f324ec4f56eacd70e6bb5e9677e719786c4d4284e4c"}]}}}}}}, 0x0) [ 2555.618571][T19515] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2555.888592][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2556.030528][T19515] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2556.040702][T19515] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2556.218672][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2556.227778][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2556.236234][T19515] usb 2-1: Product: syz [ 2556.240545][T19515] usb 2-1: Manufacturer: syz [ 2556.245250][T19515] usb 2-1: SerialNumber: syz [ 2556.598727][T19515] usb 2-1: 0:2 : does not exist [ 2556.625850][T19515] usb 2-1: USB disconnect, device number 34 [ 2557.298605][T19515] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2557.558559][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2557.678708][T19515] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2557.688860][T19515] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2557.868783][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2557.877843][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2557.885911][T19515] usb 2-1: Product: syz [ 2557.890175][T19515] usb 2-1: Manufacturer: syz [ 2557.894772][T19515] usb 2-1: SerialNumber: syz 10:11:31 executing program 1: ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:11:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getitimer(0xdca7bb42fec64882, &(0x7f00000000c0)) 10:11:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xc00}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:11:31 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xdb240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000b06632d27a87688dadc0000ebffffff05000100060000000900020073797a30000000001c000780080001"], 0x44}}, 0x0) [ 2558.245596][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2558.255925][T19515] usb 2-1: 0:2 : does not exist 10:11:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xe00}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2558.292589][T19515] usb 2-1: USB disconnect, device number 35 10:11:31 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_tables_targets\x00') sendfile(r0, r1, 0x0, 0xa808) [ 2558.355749][T12881] device syz_tun entered promiscuous mode [ 2558.389902][T12881] device syz_tun left promiscuous mode 10:11:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x1100}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2558.718617][T19515] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2558.733200][T12890] device bridge_slave_0 left promiscuous mode [ 2558.740525][T12890] bridge0: port 1(bridge_slave_0) entered disabled state [ 2558.751743][T12890] bridge4: port 1(bridge_slave_0) entered blocking state [ 2558.759001][T12890] bridge4: port 1(bridge_slave_0) entered disabled state [ 2558.766793][T12890] device bridge_slave_0 entered promiscuous mode [ 2558.790271][T12881] device ip6gretap0 entered promiscuous mode [ 2558.797647][T12881] device ip6gretap0 left promiscuous mode [ 2558.936696][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2558.998898][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2559.138746][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2559.149759][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2559.161136][T19515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2559.338726][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2559.347814][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2559.356251][T19515] usb 2-1: Product: syz [ 2559.360767][T19515] usb 2-1: Manufacturer: syz [ 2559.365378][T19515] usb 2-1: SerialNumber: syz [ 2559.709096][T19515] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2559.784568][T19515] usb 2-1: USB disconnect, device number 36 10:11:33 executing program 1: syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x8, 0x24, 0x4, 0x1, 0x3f, "6d918f"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:11:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:33 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4089, 0xff9}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0, 0x0) 10:11:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x1200}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:11:33 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xdc240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x1206}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2560.199252][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:11:33 executing program 5: syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'bridge_slave_1\x00', 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = eventfd2(0x80000000, 0x1) fchdir(r5) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'ip6gretap0\x00', 0x200}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000001c0)) [ 2560.257476][T12965] device syz_tun entered promiscuous mode [ 2560.292047][T12965] device syz_tun left promiscuous mode 10:11:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x1300}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2560.568716][T27016] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2560.624848][T12964] device bridge_slave_0 left promiscuous mode [ 2560.634726][T12964] bridge4: port 1(bridge_slave_0) entered disabled state [ 2560.646175][T12964] bridge5: port 1(bridge_slave_0) entered blocking state [ 2560.656850][T12964] bridge5: port 1(bridge_slave_0) entered disabled state [ 2560.665848][T12964] device bridge_slave_0 entered promiscuous mode [ 2560.808597][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2560.928625][T27016] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2560.943329][T27016] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2560.950288][T12965] device syz_tun entered promiscuous mode [ 2560.956008][T27016] usb 2-1: too many endpoints for config 1 interface 1 altsetting 63: 109, using maximum allowed: 30 [ 2560.969012][T27016] usb 2-1: config 1 interface 1 altsetting 63 has 0 endpoint descriptors, different from the interface descriptor's value: 109 [ 2560.982347][T12965] device syz_tun left promiscuous mode [ 2560.983641][T27016] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2561.148791][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2561.157953][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2561.167535][T27016] usb 2-1: Product: syz [ 2561.172397][T27016] usb 2-1: Manufacturer: syz [ 2561.176994][T27016] usb 2-1: SerialNumber: syz [ 2561.508788][T27016] usb 2-1: 0:2 : does not exist [ 2561.564693][T27016] usb 2-1: USB disconnect, device number 37 [ 2562.198570][ T7960] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2562.448558][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2562.569248][ T7960] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2562.579388][ T7960] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2562.588323][ T7960] usb 2-1: too many endpoints for config 1 interface 1 altsetting 63: 109, using maximum allowed: 30 [ 2562.601230][ T7960] usb 2-1: config 1 interface 1 altsetting 63 has 0 endpoint descriptors, different from the interface descriptor's value: 109 [ 2562.615236][ T7960] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2562.778686][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2562.787793][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2562.796805][ T7960] usb 2-1: Product: syz [ 2562.801581][ T7960] usb 2-1: Manufacturer: syz [ 2562.806160][ T7960] usb 2-1: SerialNumber: syz 10:11:35 executing program 1: syz_usb_connect$uac1(0x0, 0xa5, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xd, 0x24, 0x8, 0x0, 0x0, 0x1, "0000f74dfe51"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x40, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x41, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8cd, 0xd4e, 0x81, "d58ba5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x81, 0x5, 0xf9, 0x6}, {0xac3b, 0x1f, 0x8, 0xd39c}, {0x100, 0x47, 0x0, 0xfffffff7}, {0x6, 0x0, 0x6, 0x10001}, {0x6, 0x9, 0x80, 0x20}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000180)={r0, 0xffff, 0x9, 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000001c0)={0x7f, 0x0, 0x10, 0x0, 0x3, 0x9, 0x0, 0x4, 0x0, 0xfd, 0x40, 0x4, 0x0, 0x4, 0x400, 0x5, 0x4, 0x9, 0x33, [], 0x20, 0x4}) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) r6 = syz_usb_connect(0x6, 0x830, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x63, 0x4f, 0x9f, 0x20, 0x458, 0x7007, 0xd0ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81e, 0x3, 0x1f, 0x5, 0x8, 0x3, [{{0x9, 0x4, 0xd0, 0x0, 0x4, 0x2b, 0x10, 0xd0, 0x55, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "0c8725c8b63d"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x6, 0x2}, {0x6, 0x24, 0x1a, 0x7, 0x1d}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x34, 0x3f}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mdlm_detail={0x7c, 0x24, 0x13, 0x1c, "6ad621f0d67251910d129e874751c545c5c16c1ecb35ac647707e2fafd613dbd61b163b30c5e8d6c19a2eca3949c63d4b09f08691de371a8de88314821c85af6b6b67f267cc3989660f9ebb00635697d9520d5455ae7b25445c78ca7a9441a242d24129aeffb1fcd920af3938b0f73f141d3167ae726c7a2"}]}], [{{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x0, 0xc7, 0x6}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x5, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x2, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xff}, @generic={0xba, 0x23, "a938cc6b956bae64fe8052c8d2f2584ed29cfb39f4b243fa2e82e8e2e3d12f4a785137a79e0691e46e6c15398667c31a782cd62da9b968886162bce214bb7d2a2f8ecfe4f0a01d2514ad37abc59dce1efa911a52ccdd4a4471f409a80367228f02768d23dab6a1253ac10331b52cf4777bec4a0df3d7f70d9d37d34c12dbccccb925385797de7b81125dd62b8d022b005e71d23a5db282e29804c10667ba899826099799c80e148d693085676989f17567098da941a7bb18"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x16, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe9, 0x4}, @generic={0x3, 0x11, "1b"}]}}]}}, {{0x9, 0x4, 0x39, 0x0, 0x7, 0xff, 0x2, 0x1, 0x9, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x2, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6e, 0x4, 0x8f, 0x7, "92a33a"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8, 0x3, 0x6, 0x9, "25b6aa47679c"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0x9, 0x8, "563de7", '9W'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd8, 0x2, 0xb4, 0xc5, "fa", "fe75"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x80, 0xf, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xbc, 0x1, 0x0, 0x4, "", "03fd"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x7, 0x7, "8d", '^'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x40, 0x1, 0x7, 0x8, "0b38afa9"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xc1, 0x3, 0x2e, 0xff, "07f5e0"}]}], [{{0x9, 0x5, 0xa, 0x2, 0x20, 0x0, 0xf5, 0x4b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x2}]}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x9, 0x82, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x0, 0x1, 0x23}}, {{0x9, 0x5, 0x0, 0xa387f3bff85b8a7b, 0x10, 0x5, 0x0, 0x3b, [@generic={0x37, 0x30, "95f6624757c9019dab79ec6bfbb713bb2486398fd9056a2a3313213531c92194618461a898d686a440943c1a4d3d137a2409dc9a38"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2f}]}}, {{0x9, 0x5, 0xd, 0x18, 0x8, 0x4, 0x4, 0x3b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x3, 0x76, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x2929dbf3ed82254a, 0x8, 0x9}, @generic={0x7b, 0x5, "cf8ab4424a1c11f6af39e2e90e1d3f4e9b8718b0c3faac55a0e732b28faecd077bad50ba5e661d3da7f313b2efc23d6938c454c00ce0c7c5c805438bbcc9e2aa74d921d01026a42687d7a3195150ea26371acdc27cd062669a6e22ac0daf2c0718fccd81f419417ee249eb70476e8efd1411d1b215270666f9"}]}}, {{0x9, 0x5, 0xe, 0x2b, 0x8, 0x1, 0x7f, 0x5, [@generic={0x39, 0x5, "13ef862b0c50a0a3c560086092d2b04f170c4c29bc8b6e241873912f8663a8e0848af758a640601a2cecf60317cae4b83e10517e5b9b0e"}, @generic={0x79, 0x23, "67ce22a612f77e08c956bce1eeb5a50efde0572dd307ed584b78a87dbcdb69c9e12be14fa0fd1c820c26521c61b7beadbc7fa3cfa4fd2f5cef01234a8c995773c9c11599ecd74b59cb795f02e1935f62a858b1cf56e8ff3afb5ad7861a908256da445b69fe31cf2d902ee8b09a73d014f6e54b16f59677"}]}}]}}, {{0x9, 0x4, 0x1b, 0x1, 0xb, 0x10, 0x54, 0x2c, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x6a6, 0x7, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x1}}], [{{0x9, 0x5, 0x9, 0xc, 0x20, 0xd7, 0x1f, 0x6, [@generic={0xc2, 0xd, "69e4fbcabae9f65d7bdfebf4c3610748db4d874ccf72ffc0714736e8c8b249a6f688991ee3949c71f2c3b25bd606df32c8de0deac7177aeff6470a51a4c65da50842cd670455f7ef9799b47d1fc0f88446f8c2d3715ab5b312cafa2268d1a289a1464988aa4817b62eb02697af7796d459a0fd71cb20949f2c3afd936be5f5a4b7a1f109d2768c97f9c3bcb372f15011cd6287d4741319a92af2880059e2d27805c290220af7dff469564331fe9dc7aa14ca57b9f4e45224090fc4833d82281b"}, @generic={0x53, 0x2, "50bb2e8bee390aa4484b2a20feaa5f509bc7bd571ed49747b637bb6b2225ba2cdc4f866c7b0bb5d8cb947a30ffbfb8f85cc9d104bff05f18563b8accf872897bc212c05a6b5f663311704bf53a71725a86"}]}}, {{0x9, 0x5, 0x9, 0x1b, 0x200, 0xfe, 0x4, 0x4b}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x20, 0x8, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x4be2}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x7, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x3}]}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x38, 0x2, 0x20, [@generic={0x53, 0xc, "fa4205c94fcc96ebe74cbd48e12907cf610871d12272c70c836325d2dae4a12ccf9419f9b6655902727ccaea708e5db6eb6800063f153ca5a403c7e9986869b2c9ce43576d691d2ea9c64d8fcfc81b88c7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xf000}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xff, 0x81, 0x4}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x40, 0x80, 0x4, [@generic={0xd3, 0xb, "83bc745dccbb67ab1960d44b56fda26553207fd0d4f76fdfc6907b3eab6c530833444977dbb009d53524452b87f640c85fbffd3517b7d41bb2341fedeb185426260f75c603445b99ccefdddb6d1405ea6371ec2d5ad65adff346ad429514ec30bcd7cdf0cdbac5c20a714c12c640fdda2766a4c5aa4a0d3a9c319e951022b923097ae997859a980a93056d72f6bdc850c26da02bdfafa81035c389675c291edf1e2ac13b03400d03c78a333eae819216125a2bb417bfbd6425b2743f7afec16783e018052fab2743b2202a88894329f29e"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x1}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x1, 0xff, 0x1f, [@generic={0xa, 0x21, "5eb49e4055a43d1b"}, @generic={0x7e, 0x1, "de8c67b841bbba78432107088123ac22fb2f348f1960c13d9f860b9949968e46528615e05f7551acf4c3c54fba846baf55f8872f53074adf14d288a51bee0613efe38d3cce71ec1485ea18f3a32788c09764e28b7d3658cbe2db7002aaa07f8aaf2b9c61ef9641ad06c5c66b5c44e8befc224a0a0ecb046398384f67"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x9, 0x1f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f}, @generic={0xa0, 0x4, "16f08a4a6807db2a60cc4eaddfcd6a48c06d8430756ad4cd909ff211b32cfa66290a15fefa0066cf630f09fbe12ca2fca77d5b9a32971587a3dec02fc5956f871862cecc1a049a42c47d1b826b6faafd453ae19664c10360c7cb8818595ec64ed8e3ebe50ea36210ab0c464d6bbd643a1564702b8c5d35ce2f6887519a41a5728e4c1169d7c4bf3de18def51354edb5f46e130a222916be45ae287d36ab7"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0xbb, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x1, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1f, 0x80}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x4b, 0xea, 0x1f, 0xff, 0x35}, 0xbb, &(0x7f00000003c0)={0x5, 0xf, 0xbb, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "dc0649afecf837c16b2914092c13d2fd"}, @generic={0xa2, 0x10, 0x2, "198af688f3fbd5b405a1e797be310b9f5a11cfa2b5a7f32b2805d3ae5d97642c67c7ff22ec5c9ad58cec6364aa808cb33432d3ea9654ee1a284e56d5116626174cca1781527bfb4a02a76d371ef2becfff34178ea67b15ef4cb141999907a5749f04a6d857bed57560c324a1f657f446fb286414cdea79275416e40eee021d11a57d81c5da3b2720f2657c556a60eec50aa6f97558bd648aefc4d0ecafe2c5"}]}, 0x3, [{0x37, &(0x7f0000000480)=@string={0x37, 0x3, "658aadce7bfa51dc47e6e7da7c07dbfa0f04b5d49891599d24a797f48034fe51b5eabbda3325b565b7e872e4b50b9db78ffbf63b9e"}}, {0x2d, &(0x7f00000004c0)=@string={0x2d, 0x3, "bdd6e89ba6f3c846ca202f1735a34eed4a26b8c350b74c20d0397bf85b6319f39deb753e12032c79a1609b"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xf4ff}}]}) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x190, &(0x7f00000011c0)={[{0xbb, 0x4e00, "8b115d58e362165c53a192b8bce09bbcba4136efa620561acd426172a1a89587ad5ffb9d57747cbd0946da8c171db8f93ab7ffc63495a440cecb612db13b430eb0b1ca796b2ebed16098315e4c4580656a3a52d0d9a192cfe8e205ba803548fae929bad0434bf80bae5cf389cb5ff8c5498cbce5df90bceeb3c7d348c65aab14307a093e6f000465e3679aad44442bab33378d266c70d17e349e3c033e4988f226db35decb49c9858bde2cc171129a8a4088aa9839e714ebfe9e89"}, {0xc9, 0x4e00, "c42e786ce28accd4599de42e9f43624b43c49da946705f61b8b40e3b15758caaa176b2ca704dd330a4761846a5bfee0f4527a0577730a10a29ef34a0792cb196126b23585895898368f8332cfc35206bd7a8aece3a2d14a6e966f8421398a41347a1055c7aa4ff786aa0da1c338ca092e38ae18a563b01e6076174f4cab104a02049cbcc37437fdcebc455edede4ec23392f3ee365b66b6002edf0ddfff2422deefa2758956357a488ff2a33154accb9a321a495beb6a734a7f578976190255cb6f64cb463b40a3cb5"}]}) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000000)=@usbdevfs_connect={0x2}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:11:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x15e9}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:11:35 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/rt_acct\x00') sendfile(r0, r1, 0x0, 0xa808) 10:11:35 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xdd240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2563.128848][ T7960] usb 2-1: 0:2 : does not exist 10:11:36 executing program 5: 10:11:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2563.184535][T13045] device syz_tun entered promiscuous mode [ 2563.201331][ T7960] usb 2-1: USB disconnect, device number 38 [ 2563.223700][T13045] device syz_tun left promiscuous mode 10:11:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x3f00}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5865}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:36 executing program 5: 10:11:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2563.638700][ T7960] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2563.653537][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2563.667762][T13063] device bridge_slave_0 left promiscuous mode [ 2563.680968][T13063] bridge5: port 1(bridge_slave_0) entered disabled state [ 2563.691658][T13063] bridge6: port 1(bridge_slave_0) entered blocking state [ 2563.698939][T13063] bridge6: port 1(bridge_slave_0) entered disabled state [ 2563.706732][T13063] device bridge_slave_0 entered promiscuous mode [ 2563.741025][T13045] device ip6gretap0 entered promiscuous mode [ 2563.753594][T13045] device ip6gretap0 left promiscuous mode [ 2563.888535][ T7960] usb 2-1: Using ep0 maxpacket: 16 [ 2564.008680][ T7960] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2564.018894][ T7960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2564.178687][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2564.187826][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2564.196311][ T7960] usb 2-1: Product: syz [ 2564.200685][ T7960] usb 2-1: Manufacturer: syz [ 2564.205357][ T7960] usb 2-1: SerialNumber: syz [ 2564.452421][ T26] audit: type=1326 audit(1598523097.315:16): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=13054 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7feb549 code=0x0 [ 2564.500808][T13101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 10:11:39 executing program 5: 10:11:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x6000}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:11:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xde240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:39 executing program 1: syz_usb_connect$uac1(0x1, 0x9e, &(0x7f0000000000)=ANY=[], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x301000, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="8a70836c7f44fb78ee7d6d5ca5b41e4b2911", 0x12}], 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000040)={0x81, 0x7}) 10:11:39 executing program 5: [ 2566.228375][T13113] device syz_tun entered promiscuous mode [ 2566.228745][ T7960] usb 2-1: 0:2 : does not exist 10:11:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x6558}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2566.280284][T13113] device syz_tun left promiscuous mode [ 2566.284863][ T7960] usb 2-1: USB disconnect, device number 39 10:11:39 executing program 5: 10:11:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x8100}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:39 executing program 5: 10:11:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xe915}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 10:11:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xf000}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2566.708600][ T7960] usb 2-1: new low-speed USB device number 40 using dummy_hcd 10:11:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2566.752209][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2566.799888][T13127] device bridge_slave_0 left promiscuous mode [ 2566.814590][T13127] bridge6: port 1(bridge_slave_0) entered disabled state [ 2566.826649][T13127] bridge7: port 1(bridge_slave_0) entered blocking state [ 2566.839666][T13127] bridge7: port 1(bridge_slave_0) entered disabled state [ 2566.847681][T13127] device bridge_slave_0 entered promiscuous mode 10:11:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2566.946006][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2566.962329][T13164] device bridge_slave_0 left promiscuous mode [ 2566.968969][T13164] bridge7: port 1(bridge_slave_0) entered disabled state [ 2566.977786][T13164] bridge8: port 1(bridge_slave_0) entered blocking state [ 2566.986791][T13164] bridge8: port 1(bridge_slave_0) entered disabled state 10:11:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xdf240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2566.995662][T13164] device bridge_slave_0 entered promiscuous mode [ 2567.024844][ T7960] usb 2-1: device descriptor read/64, error 18 [ 2567.095669][T13170] device syz_tun entered promiscuous mode [ 2567.105488][T13170] device syz_tun left promiscuous mode [ 2567.277467][T13170] device syz_tun entered promiscuous mode [ 2567.287320][T13170] device syz_tun left promiscuous mode [ 2567.418601][ T7960] usb 2-1: device descriptor read/64, error 18 [ 2567.698600][ T7960] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 2567.969168][ T7960] usb 2-1: device descriptor read/64, error 18 [ 2568.358605][ T7960] usb 2-1: device descriptor read/64, error 18 [ 2568.480970][ T7960] usb usb2-port1: attempt power cycle [ 2569.198600][ T7960] usb 2-1: new low-speed USB device number 42 using dummy_hcd 10:11:42 executing program 1: syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0xff, 0x3, "", "f04e90"}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x4, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:11:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 10:11:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:11:42 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe0110000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2569.358752][ T7960] usb 2-1: device descriptor read/8, error -71 [ 2569.359133][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:11:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}}, 0x20}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2569.435587][T13190] device syz_tun entered promiscuous mode [ 2569.445624][T13190] device syz_tun left promiscuous mode 10:11:42 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r4 = bpf$MAP_CREATE(0x1000000000000, &(0x7f00000000c0)={0x2, 0x800000000000004, 0x400000, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], r3}, 0x40) bpf$MAP_UPDATE_ELEM(0xf, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x20) 10:11:42 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xf167, 0x0, 0x0, 0x101}, 0x8) sendto$inet6(r0, &(0x7f00000000c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}}, 0x1c) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) shutdown(r0, 0x1) r2 = socket(0x0, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'wg0\x00'}) [ 2569.568878][ T7960] usb 2-1: device descriptor read/8, error -71 [ 2569.746618][T13193] device bridge_slave_0 left promiscuous mode [ 2569.760665][T13193] bridge8: port 1(bridge_slave_0) entered disabled state [ 2569.776943][T13193] bridge9: port 1(bridge_slave_0) entered blocking state [ 2569.784478][T13193] bridge9: port 1(bridge_slave_0) entered disabled state 10:11:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2569.792959][T13193] device bridge_slave_0 entered promiscuous mode 10:11:42 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xf167, 0x0, 0x0, 0x101}, 0x8) sendto$inet6(r0, &(0x7f00000000c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}}, 0x1c) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) shutdown(r0, 0x1) r2 = socket(0x0, 0x2, 0x0) setsockopt(r2, 0x2000000000000107, 0x1, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'wg0\x00'}) [ 2569.888429][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2570.008794][T13220] device bridge_slave_0 left promiscuous mode [ 2570.016354][T13220] bridge9: port 1(bridge_slave_0) entered disabled state [ 2570.034537][T13220] bridge10: port 1(bridge_slave_0) entered blocking state [ 2570.058603][ T7960] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2570.060754][T13220] bridge10: port 1(bridge_slave_0) entered disabled state [ 2570.077891][T13220] device bridge_slave_0 entered promiscuous mode [ 2570.104548][T13190] device syz_tun entered promiscuous mode [ 2570.117470][T13190] device syz_tun left promiscuous mode [ 2570.168693][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2570.288759][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2570.299737][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2570.468681][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2570.477792][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2570.486864][ T7960] usb 2-1: Product: syz [ 2570.491689][ T7960] usb 2-1: Manufacturer: syz [ 2570.496281][ T7960] usb 2-1: SerialNumber: syz [ 2570.818726][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2570.856233][ T7960] usb 2-1: USB disconnect, device number 43 [ 2571.518641][T27016] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2571.758576][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2571.900248][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2571.911136][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2572.109208][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2572.118353][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2572.126858][T27016] usb 2-1: Product: syz [ 2572.131434][T27016] usb 2-1: Manufacturer: syz [ 2572.136195][T27016] usb 2-1: SerialNumber: syz 10:11:45 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:11:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}}, 0x20}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x2}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x12f0, 0x1158, 0x304, 0x160, 0x1158, 0x16a, 0x1220, 0x228, 0x228, 0x1220, 0x228, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x46], 0x7b01, 0x1110, 0x1158, 0x52020000, {}, [@common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x6e, 0x0, 0x0, './cgroup.net/syz1\x00'}}, @common=@unspec=@connbytes={{0x38, 'connbytes\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1350) 10:11:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:11:45 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe0240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:45 executing program 5: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000002060000000f000000000000000000007520041f22"], 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000004060102000001007a58008000000b0005000100"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x1000000eb) 10:11:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}}, 0x20}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2572.485035][T13275] device syz_tun entered promiscuous mode [ 2572.505140][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found 10:11:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x3}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2572.539934][T13275] device syz_tun left promiscuous mode [ 2572.592526][T27016] usb 2-1: USB disconnect, device number 44 10:11:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x4}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:45 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x8800, 'lblcr\x00'}, 0x2c) 10:11:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x5}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2573.000047][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2573.015241][T13285] device bridge_slave_0 left promiscuous mode [ 2573.022332][T13285] bridge10: port 1(bridge_slave_0) entered disabled state [ 2573.033512][T13285] bridge11: port 1(bridge_slave_0) entered blocking state [ 2573.042328][T13285] bridge11: port 1(bridge_slave_0) entered disabled state [ 2573.048613][T27016] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2573.052141][T13285] device bridge_slave_0 entered promiscuous mode [ 2573.308628][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2573.430625][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2573.441562][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2573.451701][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2573.619026][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2573.628106][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2573.640778][T27016] usb 2-1: Product: syz [ 2573.644924][T27016] usb 2-1: Manufacturer: syz [ 2573.651345][T27016] usb 2-1: SerialNumber: syz [ 2573.968759][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2574.003631][T27016] usb 2-1: USB disconnect, device number 45 [ 2574.678675][T27016] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2574.918598][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2575.039186][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2575.050067][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2575.061129][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2575.228747][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2575.237797][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2575.246278][T27016] usb 2-1: Product: syz [ 2575.250553][T27016] usb 2-1: Manufacturer: syz [ 2575.255150][T27016] usb 2-1: SerialNumber: syz 10:11:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00X'], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x18, 0x13, "8b4e23b7789277a29175df647026972c2d7b861e"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x553}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x4]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7ff, 0x2}}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xdc, 0xac, "b18463e44d5a00232037bc4ac89cbac5f6be94a42a362393af59e7caaf1fe266b1de3e30a21ed025308c08b0b09020292416f4adfb04ac5421db82b8875830728e47d7658165ceb6400fffa61c278cc3049c152972d42080b82edc1f2f91aa703154309940f61dde6b9d48cdec19f92320395092f3d6c6e319613f95349095c1773ec8dcce2511ebed3e4872c7e490ad9738e580c0125e81eceb491d210b15d875a4077bc3a3a2ad656832843ce229d1f99ae2c6b8bbf533e806186ae3194d711b4ec7785d961ea5e61385f9694ff94662157137122ace5f"}]}, 0x14c}}, 0x40080) syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ea0000"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x8}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x1, 0x6, "f49444"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:11:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x6}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:11:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:48 executing program 5: 10:11:48 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe1240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2575.530860][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2575.558791][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found 10:11:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x8}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:48 executing program 5: [ 2575.592163][T13375] device syz_tun entered promiscuous mode [ 2575.625875][T27016] usb 2-1: USB disconnect, device number 46 10:11:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2575.646982][T13375] device syz_tun left promiscuous mode 10:11:48 executing program 5: 10:11:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x9}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2576.072264][T13376] device bridge_slave_0 left promiscuous mode [ 2576.082566][T13376] bridge11: port 1(bridge_slave_0) entered disabled state [ 2576.090081][T27016] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2576.103819][T13376] bridge12: port 1(bridge_slave_0) entered blocking state [ 2576.111897][T13376] bridge12: port 1(bridge_slave_0) entered disabled state [ 2576.120267][T13376] device bridge_slave_0 entered promiscuous mode [ 2576.328617][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2576.347722][T13423] device ip6gretap0 entered promiscuous mode [ 2576.355489][T13423] device ip6gretap0 left promiscuous mode [ 2576.448631][T27016] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2576.468623][T27016] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2576.629287][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2576.638337][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2576.648612][T27016] usb 2-1: Product: syz [ 2576.652799][T27016] usb 2-1: Manufacturer: syz [ 2576.657381][T27016] usb 2-1: SerialNumber: syz [ 2576.989083][T27016] usb 2-1: 0:2 : does not exist [ 2577.015415][T27016] usb 2-1: USB disconnect, device number 47 10:11:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xb}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:50 executing program 5: 10:11:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:11:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:11:50 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:50 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x756) [ 2577.457601][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:11:50 executing program 5: 10:11:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xc}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:50 executing program 2: [ 2577.506151][T13458] device syz_tun entered promiscuous mode [ 2577.533660][T13458] device syz_tun left promiscuous mode 10:11:50 executing program 5: 10:11:50 executing program 2: 10:11:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xe}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:50 executing program 5: 10:11:50 executing program 2: 10:11:50 executing program 5: [ 2577.809061][T27016] usb 2-1: new high-speed USB device number 48 using dummy_hcd 10:11:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2577.960040][T13453] device bridge_slave_0 left promiscuous mode [ 2577.966307][T13453] bridge12: port 1(bridge_slave_0) entered disabled state [ 2577.976758][T13453] bridge13: port 1(bridge_slave_0) entered blocking state [ 2577.984538][T13453] bridge13: port 1(bridge_slave_0) entered disabled state [ 2577.993695][T13453] device bridge_slave_0 entered promiscuous mode [ 2578.037624][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2578.056872][T13485] device bridge_slave_0 left promiscuous mode [ 2578.063515][T13485] bridge13: port 1(bridge_slave_0) entered disabled state [ 2578.073244][T13485] bridge14: port 1(bridge_slave_0) entered blocking state [ 2578.080507][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2578.085710][T13485] bridge14: port 1(bridge_slave_0) entered disabled state [ 2578.094196][T13485] device bridge_slave_0 entered promiscuous mode [ 2578.218688][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2578.229643][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2578.239485][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2578.281169][T13489] device ip6gretap0 entered promiscuous mode [ 2578.290442][T13489] device ip6gretap0 left promiscuous mode 10:11:51 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe2030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2578.428826][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2578.437882][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2578.447336][T27016] usb 2-1: Product: syz [ 2578.452171][T27016] usb 2-1: Manufacturer: syz [ 2578.456777][T27016] usb 2-1: SerialNumber: syz [ 2578.508376][T13498] device syz_tun entered promiscuous mode [ 2578.531094][T13498] device syz_tun left promiscuous mode [ 2578.737663][T13498] device syz_tun entered promiscuous mode [ 2578.757695][T13498] device syz_tun left promiscuous mode [ 2578.818782][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2578.877427][T27016] usb 2-1: USB disconnect, device number 48 [ 2579.548590][T27016] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2579.788667][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2579.908738][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2579.919629][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2579.929821][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2580.099108][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2580.108141][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2580.123723][T27016] usb 2-1: Product: syz [ 2580.127892][T27016] usb 2-1: Manufacturer: syz [ 2580.135166][T27016] usb 2-1: SerialNumber: syz 10:11:53 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x301000, 0x1) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000240)=0x7ff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)) 10:11:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x10}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:53 executing program 2: 10:11:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:11:53 executing program 5: 10:11:53 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe2240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2580.438131][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2580.458752][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found 10:11:53 executing program 5: [ 2580.502297][T13546] device syz_tun entered promiscuous mode [ 2580.518161][T27016] usb 2-1: USB disconnect, device number 49 [ 2580.526467][T13546] device syz_tun left promiscuous mode 10:11:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x11}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:53 executing program 2: 10:11:53 executing program 5: 10:11:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x12}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:53 executing program 2: [ 2580.968664][T27016] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2580.985349][T13553] device bridge_slave_0 left promiscuous mode [ 2580.992377][T13553] bridge14: port 1(bridge_slave_0) entered disabled state [ 2581.003153][T13553] bridge15: port 1(bridge_slave_0) entered blocking state [ 2581.012159][T13553] bridge15: port 1(bridge_slave_0) entered disabled state [ 2581.021159][T13553] device bridge_slave_0 entered promiscuous mode [ 2581.208620][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2581.243797][T13593] device syz_tun entered promiscuous mode [ 2581.252740][T13593] device syz_tun left promiscuous mode [ 2581.335686][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2581.347095][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2581.378720][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2581.549403][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2581.558475][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2581.566778][T27016] usb 2-1: Product: syz [ 2581.571140][T27016] usb 2-1: Manufacturer: syz [ 2581.575745][T27016] usb 2-1: SerialNumber: syz [ 2581.825091][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2581.846980][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2581.938747][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2581.986925][T27016] usb 2-1: USB disconnect, device number 50 [ 2582.648588][T27016] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2582.888601][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2583.009367][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2583.020203][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2583.031267][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2583.198710][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2583.207763][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2583.216740][T27016] usb 2-1: Product: syz [ 2583.221436][T27016] usb 2-1: Manufacturer: syz [ 2583.226016][T27016] usb 2-1: SerialNumber: syz 10:11:56 executing program 5: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 10:11:56 executing program 2: 10:11:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x13}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:11:56 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe3240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:56 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) [ 2583.471681][T13640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 10:11:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:11:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x60}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45]}, @ipv4={[0x0, 0x2], [], @local}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xbdb4, 0x1, 0x4e8}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001055408598776c6a558d004507000000ec090000000033400000136b2fa0bbe85e21f415006f9aa736dca506761da0957001365f1038adcdcfdd00ed794ba6c0aabf54cbaef3fc2807d62c7f", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) [ 2583.568834][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2583.594733][T13649] device syz_tun entered promiscuous mode [ 2583.637545][T27016] usb 2-1: USB disconnect, device number 51 [ 2583.670718][T13649] device syz_tun left promiscuous mode 10:11:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f00000000c0)={0x2, 0x0, [{0x1}, {}]}) 10:11:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xf0}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x300}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000140)={0x0, 0x3, {0x55, 0x4, 0x8001, {0x0, 0x1}, {0x0, 0x5}, @cond=[{0x5}, {0x0, 0x4, 0x0, 0xffcf}]}, {0x53, 0x0, 0x0, {}, {}, @rumble}}) 10:11:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x500}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2584.048768][T27016] usb 2-1: new high-speed USB device number 52 using dummy_hcd 10:11:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x600}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2584.312068][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2584.328220][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2584.354724][T13663] device bridge_slave_0 left promiscuous mode [ 2584.363575][T13663] bridge15: port 1(bridge_slave_0) entered disabled state [ 2584.381143][T13663] bridge16: port 1(bridge_slave_0) entered blocking state [ 2584.388400][T13663] bridge16: port 1(bridge_slave_0) entered disabled state [ 2584.406127][T13663] device bridge_slave_0 entered promiscuous mode [ 2584.439149][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 10:11:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:11:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x612}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2584.483196][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2584.504593][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2584.568082][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2584.698692][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2584.707790][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.716266][T27016] usb 2-1: Product: syz [ 2584.720677][T27016] usb 2-1: Manufacturer: syz [ 2584.725325][T27016] usb 2-1: SerialNumber: syz [ 2585.048739][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2585.097003][T27016] usb 2-1: USB disconnect, device number 52 [ 2585.768661][T27016] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2586.008579][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2586.129265][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2586.140124][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2586.150217][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2586.359363][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2586.368424][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.376814][T27016] usb 2-1: Product: syz [ 2586.381305][T27016] usb 2-1: Manufacturer: syz [ 2586.385893][T27016] usb 2-1: SerialNumber: syz 10:11:59 executing program 1: syz_usb_connect$uac1(0x0, 0x79, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x10000, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06055c8, &(0x7f0000000040)={0x1, 0x5, {0x53, 0x7fff, 0x4, {0x6, 0x9}, {0x100, 0xc000}, @rumble={0x81, 0x40}}, {0x53, 0x831, 0x8, {0x3, 0x3}, {0x8, 0x6}, @cond=[{0x8, 0x3f, 0x9, 0x5, 0x9, 0x2}, {0x1f, 0x1ff, 0x98, 0x2, 0x8, 0x401}]}}) 10:11:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8672c", 0x82}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274", 0x43}], 0x2}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)="d3", 0x1}], 0x1}}], 0x2, 0x0) syz_emit_ethernet(0x22, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 10:11:59 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe4240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:11:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x2, 0x4000854) 10:11:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:11:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x900}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2586.631690][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2586.658841][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found 10:11:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xa00}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2586.701713][T27016] usb 2-1: USB disconnect, device number 53 [ 2586.740857][T13785] device syz_tun entered promiscuous mode 10:11:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f00000192c0)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2586.814063][T13785] device syz_tun left promiscuous mode 10:11:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) 10:11:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xb00}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:11:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xc00}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xe00}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2587.153711][T27016] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2587.174688][T13831] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2587.237329][T13832] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2587.398657][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2587.519233][T27016] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2587.527952][T27016] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2587.538605][T27016] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2587.719247][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2587.728326][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2587.736570][T27016] usb 2-1: Product: syz [ 2587.740884][T27016] usb 2-1: Manufacturer: syz [ 2587.745473][T27016] usb 2-1: SerialNumber: syz [ 2588.088794][T27016] usb 2-1: 0:2 : does not exist [ 2588.107709][T27016] usb 2-1: USB disconnect, device number 54 [ 2588.788767][T27016] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2589.048605][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2589.168770][T27016] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2589.177467][T27016] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2589.189857][T27016] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2589.388927][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2589.397973][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.406419][T27016] usb 2-1: Product: syz [ 2589.410923][T27016] usb 2-1: Manufacturer: syz [ 2589.415554][T27016] usb 2-1: SerialNumber: syz 10:12:02 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:12:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000104000002000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x1100}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:02 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe4ffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 10:12:02 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="e64b60a127b1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "d9eaa5", 0x0, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, 0x0) [ 2589.738994][T27016] usb 2-1: 0:2 : does not exist 10:12:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x1200}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2589.774067][T13889] device syz_tun entered promiscuous mode [ 2589.774182][T27016] usb 2-1: USB disconnect, device number 55 [ 2589.810798][T13889] device syz_tun left promiscuous mode 10:12:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/104, 0x68}], 0x1, 0x0, 0x0) 10:12:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 10:12:02 executing program 2: 10:12:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x1206}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:02 executing program 2: [ 2590.190578][T27016] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2590.265823][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2590.320031][T13889] device ip6gretap0 entered promiscuous mode [ 2590.327556][T13889] device ip6gretap0 left promiscuous mode [ 2590.428597][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2590.548706][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2590.559628][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2590.571313][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2590.738673][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2590.747816][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2590.756987][T27016] usb 2-1: Product: syz [ 2590.761780][T27016] usb 2-1: Manufacturer: syz [ 2590.766394][T27016] usb 2-1: SerialNumber: syz [ 2591.088811][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2591.115519][T27016] usb 2-1: USB disconnect, device number 56 [ 2591.806770][T27016] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2592.088598][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2592.259886][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2592.270878][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2592.281847][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2592.478772][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2592.487849][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2592.497097][T27016] usb 2-1: Product: syz [ 2592.501946][T27016] usb 2-1: Manufacturer: syz [ 2592.506563][T27016] usb 2-1: SerialNumber: syz 10:12:05 executing program 2: 10:12:05 executing program 5: 10:12:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x1300}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:05 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe5240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:05 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x90, @mcast2, 0x100}, {0xa, 0x4e22, 0x24, @dev={0xfe, 0x80, [], 0x26}, 0x10000}, 0x6, [0x8, 0x9, 0x6, 0x362a, 0x97, 0x3f, 0x0, 0x1e]}, 0x5c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280)='ethtool\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00X'], 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', r3}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x5, 0x9, 0x12, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x2b}, 0x8008, 0x7800, 0x7fff, 0x4}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x12c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00X'], 0x28}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000006c0)={{r0}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000000)={0x0, 0x8, 0x5, 0x5, {0x22, 0x3ff, 0x60000, 0x80, 0xba}, [0xfffffffffffffe01, 0x6, 0x9, 0x2, 0xd9, 0x81, 0x541, 0x10000]}}, @subvolid=0xfffffffffffffff8}) 10:12:05 executing program 5: [ 2592.848904][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found 10:12:05 executing program 2: 10:12:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2592.899635][T27016] usb 2-1: USB disconnect, device number 57 [ 2592.906124][T13980] device syz_tun entered promiscuous mode 10:12:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x15e9}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2592.987652][T13980] device syz_tun left promiscuous mode 10:12:05 executing program 2: 10:12:05 executing program 5: 10:12:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x3f00}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:06 executing program 5: 10:12:06 executing program 2: 10:12:06 executing program 2: [ 2593.328583][T27016] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2593.550625][T13980] device syz_tun entered promiscuous mode [ 2593.557987][T13980] device syz_tun left promiscuous mode [ 2593.608667][T27016] usb 2-1: Using ep0 maxpacket: 8 10:12:06 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe6030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2593.739456][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2593.752104][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2593.764086][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2593.787343][T14032] device syz_tun entered promiscuous mode [ 2593.795662][T14032] device syz_tun left promiscuous mode [ 2593.949545][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2593.958856][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2593.966892][T27016] usb 2-1: Product: syz [ 2593.971402][T27016] usb 2-1: Manufacturer: syz [ 2593.976275][T27016] usb 2-1: SerialNumber: syz [ 2594.015334][T14032] device syz_tun entered promiscuous mode [ 2594.025589][T14032] device syz_tun left promiscuous mode [ 2594.328831][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2594.381033][T27016] usb 2-1: USB disconnect, device number 58 [ 2595.038683][T27016] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2595.288587][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2595.459293][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2595.470326][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2595.481852][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2595.718825][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2595.727985][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2595.736484][T27016] usb 2-1: Product: syz [ 2595.741112][T27016] usb 2-1: Manufacturer: syz [ 2595.745805][T27016] usb 2-1: SerialNumber: syz 10:12:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x5865}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:08 executing program 5: 10:12:08 executing program 2: 10:12:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:08 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe6240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:08 executing program 1: fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='7]$\x00', &(0x7f0000000040)='\x00', 0x0) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:12:08 executing program 2: 10:12:08 executing program 5: [ 2595.978972][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2596.009901][T14085] device syz_tun entered promiscuous mode 10:12:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x6000}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2596.052538][T27016] usb 2-1: USB disconnect, device number 59 10:12:09 executing program 2: [ 2596.115551][T14085] device syz_tun left promiscuous mode 10:12:09 executing program 5: 10:12:09 executing program 2: 10:12:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x6558}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10:12:09 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 2596.468766][T27016] usb 2-1: new high-speed USB device number 60 using dummy_hcd 10:12:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:09 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe7240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2596.711883][T14137] device syz_tun entered promiscuous mode [ 2596.721969][T14137] device syz_tun left promiscuous mode [ 2596.728650][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2596.859301][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2596.879555][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2596.894212][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2596.935960][T14137] device ip6gretap0 entered promiscuous mode [ 2596.944795][T14137] device ip6gretap0 left promiscuous mode [ 2597.099273][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2597.108446][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2597.116654][T27016] usb 2-1: Product: syz [ 2597.120975][T27016] usb 2-1: Manufacturer: syz [ 2597.125637][T27016] usb 2-1: SerialNumber: syz [ 2597.448837][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2597.485458][T27016] usb 2-1: USB disconnect, device number 60 10:12:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @private2}}) 10:12:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x8100}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:10 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe8030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:10 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d400000010003b0e80ffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="030000050000000008000a00", @ANYRES32=0x0, @ANYBLOB="ac0012000800010067726500a000020008000700e0000000060011ae4e24000005001600020000000500170000000000050008000000000008000600ac"], 0xd4}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 10:12:10 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x54, r1, 0x2b308e15f760ed3d, 0x0, 0x0, {0x33}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x880}, 0x40880) 10:12:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xe915}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2597.993658][T14191] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.5'. 10:12:10 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="15794d4d035f6e2b3aeaddc454739e78655942999c2d3466", 0x18}], 0x1, 0x0) 10:12:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xf000}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2598.085092][T14192] device syz_tun entered promiscuous mode [ 2598.107003][T14192] device syz_tun left promiscuous mode 10:12:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2598.278887][ T7960] usb 2-1: new high-speed USB device number 61 using dummy_hcd 10:12:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2598.499983][T14191] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2598.528793][ T7960] usb 2-1: Using ep0 maxpacket: 8 10:12:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0xc, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_INACTIVITY_TOUT={0x8}]}}}]}, 0x3c}}, 0x0) [ 2598.644099][T14192] device syz_tun entered promiscuous mode [ 2598.648757][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2598.662105][T14192] device syz_tun left promiscuous mode 10:12:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2598.686672][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2598.711326][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2598.882903][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2598.892300][T14236] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops [ 2598.904549][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2598.947809][ T7960] usb 2-1: Product: syz [ 2598.955513][ T7960] usb 2-1: Manufacturer: syz [ 2598.961136][ T7960] usb 2-1: SerialNumber: syz 10:12:11 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe8240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 2599.125182][T14249] device syz_tun entered promiscuous mode [ 2599.141653][T14249] device syz_tun left promiscuous mode [ 2599.288947][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2599.341186][ T7960] usb 2-1: USB disconnect, device number 61 [ 2599.419844][T14249] device syz_tun entered promiscuous mode [ 2599.443210][T14249] device syz_tun left promiscuous mode [ 2599.988659][ T7960] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2600.228645][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2600.349645][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2600.361225][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2600.371503][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2600.539392][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2600.549016][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.557801][ T7960] usb 2-1: Product: syz [ 2600.563544][ T7960] usb 2-1: Manufacturer: syz [ 2600.568165][ T7960] usb 2-1: SerialNumber: syz 10:12:13 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = accept4(r0, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80, 0x800) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) 10:12:13 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:13 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001540)=""/11, 0xb}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/69, 0x45}], 0x1, 0x0, 0x0) 10:12:13 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f6}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0xe8ba, 0x0) 10:12:13 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xe9240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:13 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2600.918827][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2600.935331][T14297] device syz_tun entered promiscuous mode [ 2600.982825][ T7960] usb 2-1: USB disconnect, device number 62 [ 2600.994768][T14297] device syz_tun left promiscuous mode 10:12:13 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000001580)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x400000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) 10:12:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf2, 0xf2, 0x9, [@datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], "cb"}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @typedef, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}]}, @typedef, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "01"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x115}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2601.438844][ T7960] usb 2-1: new high-speed USB device number 63 using dummy_hcd 10:12:14 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2601.678716][ T7960] usb 2-1: Using ep0 maxpacket: 8 10:12:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2601.799501][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2601.824250][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2601.861665][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2602.069349][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2602.088669][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2602.096685][ T7960] usb 2-1: Product: syz [ 2602.118581][ T7960] usb 2-1: Manufacturer: syz [ 2602.123372][ T7960] usb 2-1: SerialNumber: syz [ 2602.499034][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2602.551507][ T7960] usb 2-1: USB disconnect, device number 63 [ 2603.198602][T19515] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2603.442713][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2603.579317][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2603.596403][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2603.622794][T19515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2603.809544][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2603.828928][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.836941][T19515] usb 2-1: Product: syz [ 2603.858578][T19515] usb 2-1: Manufacturer: syz [ 2603.863208][T19515] usb 2-1: SerialNumber: syz 10:12:16 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="2f10f08750373abfee037fcdff0ec6950044ad94ee4fbb19b47eefe80bf3ec4cf71de27e94d0bbfeca8e3b3c842cab719967df5f996676e5ddef6a8b067479872ded51521e58a42bb1368f5bb86fcc79c649a8a36d942b3ad3f16b0c7551c8019522d94b5d5bed5268a5383067fb01d88058d4c8242cb14de8c1295e9a758336f27470e887da7d6ec8e99215e8f82e700020224a4748fcd85a35b20f40d93e2949378c68859eba5c7f03f3f59ea6f6980a7b9cc20c10bb2e42f103a071bccf71e62fc1d9c2a6d5a29d81fa069c0a83d7ad99b07450bdf2f11252c7bd096cffd68974328e8cd9e93bd1cdbca3f5", 0xed) 10:12:16 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xea240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2603.959014][T19515] usb 2-1: can't set config #1, error -71 [ 2603.975531][T19515] usb 2-1: USB disconnect, device number 64 [ 2604.067069][T14402] device syz_tun entered promiscuous mode [ 2604.109348][T14402] device syz_tun left promiscuous mode [ 2604.428905][T19515] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2604.668414][T14402] device syz_tun entered promiscuous mode [ 2604.680326][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2604.694629][T14402] device syz_tun left promiscuous mode [ 2604.821525][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2604.849624][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2604.884553][T19515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2605.075882][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2605.097540][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2605.127578][T19515] usb 2-1: Product: syz [ 2605.146153][T19515] usb 2-1: Manufacturer: syz [ 2605.161308][T19515] usb 2-1: SerialNumber: syz [ 2605.499124][T19515] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2605.563689][T19515] usb 2-1: USB disconnect, device number 65 [ 2606.198743][T19515] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2606.449837][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2606.579490][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2606.597728][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2606.622910][T19515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2606.809419][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2606.825123][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.845696][T19515] usb 2-1: Product: syz [ 2606.857395][T19515] usb 2-1: Manufacturer: syz [ 2606.868902][T19515] usb 2-1: SerialNumber: syz [ 2607.124139][T19515] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2607.172538][T19515] usb 2-1: USB disconnect, device number 66 10:12:21 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$packet(0xffffffffffffffff, &(0x7f0000000000), 0x14) syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 10:12:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x4}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:21 executing program 5: sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="ee002e39566f18963f0ea364516ee9", 0xf}], 0x1}, 0x40000) 10:12:21 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xeb240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:21 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x400) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) [ 2608.390157][T14481] device syz_tun entered promiscuous mode [ 2608.409767][T14481] device syz_tun left promiscuous mode [ 2608.548734][T11232] usb 2-1: new high-speed USB device number 67 using dummy_hcd 10:12:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2608.798770][T11232] usb 2-1: Using ep0 maxpacket: 8 10:12:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2608.919617][T11232] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2608.931672][T11232] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2608.944738][T11232] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2608.999717][T14481] device syz_tun entered promiscuous mode [ 2609.015491][T14481] device syz_tun left promiscuous mode [ 2609.109476][T11232] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2609.135668][T11232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2609.159029][T11232] usb 2-1: Product: syz [ 2609.165986][T11232] usb 2-1: Manufacturer: syz [ 2609.181068][T11232] usb 2-1: SerialNumber: syz 10:12:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, 0x0, 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x141040, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffff}) 10:12:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73de7d558e6cc11702073", 0xbc}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xee01}}}, 0x78) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 10:12:22 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xec240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2609.306175][T14530] ptrace attach of "/root/syz-executor.5"[14528] was attempted by "/root/syz-executor.5"[14530] [ 2609.394412][T14534] device syz_tun entered promiscuous mode [ 2609.412541][T14534] device syz_tun left promiscuous mode [ 2609.669426][T14477] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2609.693055][T14539] batman_adv: batadv0: Adding interface: veth77 [ 2609.699603][T14539] batman_adv: batadv0: The MTU of interface veth77 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2609.727206][T14539] batman_adv: batadv0: Not using interface veth77 (retrying later): interface not active [ 2609.818800][T11232] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2609.853388][T11232] usb 2-1: USB disconnect, device number 67 [ 2609.901381][T14534] device syz_tun entered promiscuous mode [ 2609.918049][T14534] device syz_tun left promiscuous mode [ 2610.538619][T27016] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2610.798641][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2610.929411][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2610.940296][T27016] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2610.951760][T27016] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2611.138762][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2611.148101][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2611.157579][T27016] usb 2-1: Product: syz [ 2611.162470][T27016] usb 2-1: Manufacturer: syz [ 2611.167153][T27016] usb 2-1: SerialNumber: syz 10:12:24 executing program 1: ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x3) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/508], 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x8, 0x3]}, 0x8) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000440)=r5) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:12:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080), 0x0, 0x0) 10:12:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:24 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2282, &(0x7f0000002000)=ANY=[]) 10:12:24 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xed240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2611.338862][T27016] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2611.346949][T14594] device syz_tun entered promiscuous mode 10:12:24 executing program 5: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x400) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) [ 2611.407580][T27016] usb 2-1: USB disconnect, device number 68 [ 2611.422539][T14594] device syz_tun left promiscuous mode 10:12:24 executing program 2: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = accept4(r0, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80, 0x800) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) 10:12:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 10:12:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) [ 2611.879334][T19515] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2611.920657][T27016] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2611.958730][T21525] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2612.021947][T14594] device syz_tun entered promiscuous mode [ 2612.031059][T14594] device syz_tun left promiscuous mode [ 2612.138668][T19515] usb 6-1: Using ep0 maxpacket: 8 [ 2612.218724][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2612.238850][T21525] usb 3-1: Using ep0 maxpacket: 8 [ 2612.259008][T19515] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2612.270382][T19515] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2612.283069][T19515] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2612.359107][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2612.370018][T27016] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2612.380524][T27016] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 2612.395880][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2612.406522][T21525] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2612.468867][T19515] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2612.478174][T19515] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2612.487574][T19515] usb 6-1: Product: syz [ 2612.492950][T19515] usb 6-1: Manufacturer: syz [ 2612.497637][T19515] usb 6-1: SerialNumber: syz [ 2612.589071][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2612.598457][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2612.608640][T27016] usb 2-1: Product: syz [ 2612.612892][T27016] usb 2-1: Manufacturer: syz [ 2612.617528][T27016] usb 2-1: SerialNumber: syz [ 2612.624223][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2612.633487][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2612.643074][T21525] usb 3-1: Product: syz [ 2612.647856][T21525] usb 3-1: Manufacturer: syz [ 2612.660210][T21525] usb 3-1: SerialNumber: syz [ 2612.760223][T14641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2612.791754][T14641] batman_adv: batadv0: Adding interface: veth71 [ 2612.798154][T14641] batman_adv: batadv0: The MTU of interface veth71 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2612.825548][T14641] batman_adv: batadv0: Not using interface veth71 (retrying later): interface not active [ 2612.882433][T14620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2612.928850][T19515] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2612.958212][T19515] usb 6-1: USB disconnect, device number 110 [ 2613.039888][T27016] usb 2-1: USB disconnect, device number 69 [ 2613.118996][T21525] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2613.177888][T21525] usb 3-1: USB disconnect, device number 33 [ 2613.441603][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 10:12:26 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028c0003010000000904000000010100000a24010000000201020a240800000000ee423b0c24020000020000000000080f2406000004000000000000000007090401000001021cdfc08816216b6351adc117b1f5b3780000090401010109050109000000020007250100000000090402000001020000090402010101020000082402010000000009058209040000000007250100ff0000"], 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f00000000c0)={0x0, @data}) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000140)={0x1, 0x2, [{0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xe9a97fca82181e8c, 0x100000000}]}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:12:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 10:12:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x9}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:26 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xee240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:26 executing program 5: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x54, r1, 0x2b308e15f760ed3d, 0x0, 0x0, {0x33}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x880}, 0x40880) 10:12:26 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xdb240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 2613.624923][T14773] device syz_tun entered promiscuous mode [ 2613.645099][T14773] device syz_tun left promiscuous mode 10:12:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 10:12:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 2613.828664][T21525] usb 6-1: new high-speed USB device number 111 using dummy_hcd 10:12:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 10:12:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 10:12:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 2613.958769][T27016] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2614.078653][T21525] usb 6-1: Using ep0 maxpacket: 8 [ 2614.199330][T21525] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2614.210200][T27016] usb 2-1: Using ep0 maxpacket: 8 [ 2614.229310][T21525] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2614.248611][T21525] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2614.285437][T14773] device syz_tun entered promiscuous mode [ 2614.293319][T14773] device syz_tun left promiscuous mode [ 2614.339459][T27016] usb 2-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 2614.358611][T27016] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2614.439808][T21525] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2614.458571][T21525] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.466557][T21525] usb 6-1: Product: syz [ 2614.489240][T21525] usb 6-1: Manufacturer: syz [ 2614.493877][T21525] usb 6-1: SerialNumber: syz [ 2614.549338][T27016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2614.560875][T27016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.570621][T27016] usb 2-1: Product: syz [ 2614.577247][T27016] usb 2-1: Manufacturer: syz [ 2614.591499][T27016] usb 2-1: SerialNumber: syz [ 2614.865158][T21525] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2614.937505][T21525] usb 6-1: USB disconnect, device number 111 [ 2614.978857][T27016] usb 2-1: 0:2 : does not exist [ 2615.063670][T27016] usb 2-1: USB disconnect, device number 70 [ 2615.630363][ T7960] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2615.868658][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2615.989046][ T7960] usb 2-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 2615.999556][ T7960] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2616.168730][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2616.177978][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2616.186104][ T7960] usb 2-1: Product: syz [ 2616.191475][ T7960] usb 2-1: Manufacturer: syz [ 2616.196125][ T7960] usb 2-1: SerialNumber: syz 10:12:29 executing program 1: syz_usb_connect$uac1(0x0, 0x9d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028b0003010000debd5e000904000000010100000a24010000000201020a240800000000d7423b0c24020000020000000000080f2406000004000000000000000007dc040100000102000009040101010102000009050109000000020007250100000000090402000001020000090402010101020000072401af40010009058209040000000007250100ff0000de24a4be04e092ad"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:12:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:29 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xf0030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:29 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xdb240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:29 executing program 5: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) [ 2616.528815][ T7960] usb 2-1: 0:2 : does not exist 10:12:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2616.596469][ T7960] usb 2-1: USB disconnect, device number 71 10:12:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2616.798702][ T8172] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2616.998791][ T7960] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2617.058807][ T8172] usb 6-1: Using ep0 maxpacket: 8 [ 2617.105478][T14872] device syz_tun entered promiscuous mode [ 2617.122164][T14872] device syz_tun left promiscuous mode [ 2617.189671][ T8172] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2617.209049][ T8172] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2617.227534][ T8172] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2617.238630][ T7960] usb 2-1: Using ep0 maxpacket: 8 10:12:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2617.358857][ T7960] usb 2-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 2617.373243][ T7960] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 10:12:30 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xdb240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2617.428730][ T8172] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2617.437946][ T8172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 10:12:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2617.476595][ T8172] usb 6-1: Product: syz [ 2617.484955][ T8172] usb 6-1: Manufacturer: syz [ 2617.496066][ T8172] usb 6-1: SerialNumber: syz [ 2617.549852][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2617.574275][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2617.603310][ T7960] usb 2-1: Product: syz [ 2617.607518][ T7960] usb 2-1: Manufacturer: syz [ 2617.613874][ T7960] usb 2-1: SerialNumber: syz [ 2617.888922][ T8172] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2617.892741][T11232] usb 2-1: USB disconnect, device number 72 [ 2617.942292][ T8172] usb 6-1: USB disconnect, device number 112 [ 2618.698714][ T8172] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2618.948721][ T8172] usb 2-1: Using ep0 maxpacket: 8 [ 2619.078816][ T8172] usb 2-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 2619.092818][ T8172] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 2619.298851][ T8172] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2619.308053][ T8172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2619.316355][ T8172] usb 2-1: Product: syz [ 2619.320758][ T8172] usb 2-1: Manufacturer: syz [ 2619.325376][ T8172] usb 2-1: SerialNumber: syz 10:12:32 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x4, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x9) syz_usb_connect$uac1(0x6, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x2, 0x4, [0x0, 0x0, 0x5, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0xc1, 0xc}, @timestamp], 0x2) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00') setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000140), 0x4) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022bbd7020ffdbdf250400000009010000000000000000000085d9defc1bc9b1ae86e30cc7327a5c93b7955fae7b3a7629ac8868343465ace83734ef1fce0dab6edc8000a2c2671027eefdf3c208e5c189e2db"], 0x20}}, 0x4046) 10:12:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:32 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:32 executing program 2: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) 10:12:32 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xcf240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2619.580645][ T8172] usb 2-1: USB disconnect, device number 73 10:12:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 2619.895103][T14977] device syz_tun entered promiscuous mode [ 2619.918438][T14977] device syz_tun left promiscuous mode [ 2619.928852][T21525] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2620.178729][T21525] usb 3-1: Using ep0 maxpacket: 8 10:12:33 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000000)={0xff, 0x3, 0x3}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:12:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) 10:12:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010402508000000000000000000000000567946e532febe96e59729c03250b6ebf45609f1833791e997438d263190e1bbd21d14ddec594e57", @ANYRES32=r8, @ANYBLOB="000000000000000008000a0014000000"], 0x28}}, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYRES64, @ANYRESOCT=r4, @ANYRESHEX=r7, @ANYRES16=r8, @ANYBLOB="dc560bca1d6efa332e09c6b23cff54b61a269647cb0ee0e395ef2a143ec0a9f4afcf3985fcab36c9694a0fbca63d986571a931fff44002fe06a9df37c42751be243b1088700bd86290572a092aa83903e114f3c21aef70f76f746828d3a064e530faeac8bfff87419a74eb27ae5f3a80b7dba41e20fa79daa97c6f6fe40c0f119996d110d7c00ce950c4c2268362cbb8ce56d0db9c8f5e0d04f710fdd7689461be38b4493dec359ef306a8b5b575844d4c4b7815c070fae739642c1b06aa28ec3f8ff6aaa3d47977863fd79d3a1f", @ANYRESHEX=r7, @ANYRESHEX, @ANYRESOCT=r9], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x82, 0x2000) [ 2620.320445][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2620.342645][T21525] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 10:12:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 2620.378208][T21525] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2620.478948][T15002] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2620.505532][T15005] batman_adv: batadv0: Adding interface: veth73 10:12:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) [ 2620.513622][T15005] batman_adv: batadv0: The MTU of interface veth73 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2620.538692][ T7960] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2620.558412][T15005] batman_adv: batadv0: Not using interface veth73 (retrying later): interface not active [ 2620.592264][T21525] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2620.608694][T21525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2620.616796][T21525] usb 3-1: Product: syz [ 2620.629454][T21525] usb 3-1: Manufacturer: syz [ 2620.630348][T15006] device ip6gretap0 entered promiscuous mode [ 2620.634191][T21525] usb 3-1: SerialNumber: syz [ 2620.656793][T15006] device ip6gretap0 left promiscuous mode [ 2620.778618][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2620.848670][T19515] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2620.898828][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2620.910553][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2620.924218][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 10:12:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x10}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2620.959009][T15012] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2620.996334][T21525] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2621.045444][T21525] usb 3-1: USB disconnect, device number 34 [ 2621.089603][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2621.109150][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2621.130901][ T7960] usb 2-1: Product: syz [ 2621.135102][ T7960] usb 2-1: Manufacturer: syz [ 2621.141442][ T7960] usb 2-1: SerialNumber: syz [ 2621.158741][T19515] usb 6-1: device descriptor read/64, error 18 10:12:34 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xf2030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) [ 2621.323762][T15061] device syz_tun entered promiscuous mode [ 2621.331758][T15061] device syz_tun left promiscuous mode 10:12:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) 10:12:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x11}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) [ 2621.518789][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2621.558804][T19515] usb 6-1: device descriptor read/64, error 18 [ 2621.593200][ T7960] usb 2-1: USB disconnect, device number 74 [ 2621.756306][T15061] device syz_tun entered promiscuous mode [ 2621.789853][T15061] device syz_tun left promiscuous mode [ 2621.848682][T19515] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2622.158727][T19515] usb 6-1: device descriptor read/64, error 18 [ 2622.238646][T21525] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2622.518777][T21525] usb 2-1: Using ep0 maxpacket: 8 [ 2622.568840][T19515] usb 6-1: device descriptor read/64, error 18 [ 2622.648871][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2622.659721][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2622.671200][T21525] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2622.688843][T19515] usb usb6-port1: attempt power cycle [ 2622.849368][T21525] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2622.858677][T21525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2622.866735][T21525] usb 2-1: Product: syz [ 2622.873490][T21525] usb 2-1: Manufacturer: syz [ 2622.878136][T21525] usb 2-1: SerialNumber: syz 10:12:36 executing program 1: ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='(%^\x00') 10:12:36 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)=ANY=[@ANYBLOB="12015002000000086b1d010140000102030109028400030144000009040000000101000000ee423b0c24020100000000010000000f24060000040000000000000000070904010000010200000904010101010200000905010900020002ef0725010000000009040200000102000009040201010102000009058209040008000007250100ea693c"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) 10:12:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x12}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2623.235530][T21525] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2623.282523][T21525] usb 2-1: USB disconnect, device number 75 10:12:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010402508000000000000000000000000567946e532febe96e59729c03250b6ebf45609f1833791e997438d263190e1bbd21d14ddec594e57", @ANYRES32=r8, @ANYBLOB="000000000000000008000a0014000000"], 0x28}}, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYRES64, @ANYRESOCT=r4, @ANYRESHEX=r7, @ANYRES16=r8, @ANYBLOB="dc560bca1d6efa332e09c6b23cff54b61a269647cb0ee0e395ef2a143ec0a9f4afcf3985fcab36c9694a0fbca63d986571a931fff44002fe06a9df37c42751be243b1088700bd86290572a092aa83903e114f3c21aef70f76f746828d3a064e530faeac8bfff87419a74eb27ae5f3a80b7dba41e20fa79daa97c6f6fe40c0f119996d110d7c00ce950c4c2268362cbb8ce56d0db9c8f5e0d04f710fdd7689461be38b4493dec359ef306a8b5b575844d4c4b7815c070fae739642c1b06aa28ec3f8ff6aaa3d47977863fd79d3a1f", @ANYRESHEX=r7, @ANYRESHEX, @ANYRESOCT=r9], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x82, 0x2000) 10:12:36 executing program 3: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)=ANY=[@ANYBLOB="12015002000000086b1d01014000010203010902840003014400000904000000010100000a24010071848753780dc41204000000ee423b0c24020100000080000000000f24060000040000000000000000070904010000010200000904010101010200000905010900020002ef0725010000000009040200000102000009040201010102000009058209040a8d0f6bed0815a400f014"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) 10:12:36 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xf5ffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x13}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2623.418862][T19515] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2623.464827][T27016] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2623.531328][T15144] device syz_tun entered promiscuous mode [ 2623.553749][T15144] device syz_tun left promiscuous mode 10:12:36 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$qrtrtun(0xffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x14480) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x22, &(0x7f0000000040)={r0, r1+60000000}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8932, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f00000002c0)) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x48, r4, 0x100, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x400}, 0x0) sendmmsg$inet6(r2, &(0x7f00000021c0)=[{{&(0x7f0000000300)={0xa, 0x4e22, 0x7fffffff, @private2, 0x800}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000340)="7fb4886abae2a4401f9848f69413e1f4982c6abb5ee5fdbfbb32e8030896951ba7a41c2786ca8934c58678be3028c63f1d9e69a693ba64d230c499fb3a8d71bdb14abe31bfc76d7babea8aa6390a81f54ba108d56f477e1484e8c2a503fb613223a3c6a99a830f7fb1406a306c195bf83b19f6955359049524047e64d00aa7b87e6c9e45da32b1f11ddca1caeb43bf10567122b3e3373e3b5f422efbebc1cbec47ff6bdf1b03ead6cd91a169c635405c9e9d5b4cf3de60bfe71dff93", 0xbc}, {&(0x7f0000000400)="c49337a9e5248aff97b204375e92a924be3b43b3c62cfaec137da9efb0f62068138e3acb0705094707b378698a86c67889e4d2dcbca38a6f326053977c97a65876aaca1759861d4e0dda74e353dc61332b8a3f1dd9a106feb45c264a217d657866b177f45f4fe6bdec3ecbacb878d3d647dfe7ebca87bc20ae5c28d2b5d7a56809294e671e1cef0c58c90eed505675562616c75656f4068f18f6fe43dd276818f88ed31b13bfd55c0cc9fec8fe879b9ba4e4f4b02707d46832dd97e4b9d8a7aef236022eede364f7d8ca2eca0cc2a12f0f6b789835d7e1", 0xd7}, {&(0x7f0000000500)="9f6b1dd5b837d5215f2e265c8a7a33c125f2cfaf7ee19930fbf6d215a7038c693bc76250dad56977407f5790147e04e69cd512e26a2c75440f956f644156ef22a00e9fe9760282b468ab1ea5683acdab096fdb829cd2f00ad02e4e0b59149c7b33ab1e6a0f6058e4a2fc8f02e361f73fa9535c9e05b24c87f8307f751e15b13170107b1fd4f020cccda7e8b760fb92da43b8e46521b8a8bed1875ff2bab146cd92b29037ab1cc0675c7cffed045387f778a1adedb1f8c436ee0f3bfe119c714cb3aea6498a31d6db9f3111389847aeb13ef5d8f1095db124f98e79f8bd94173eb101d0951db64249011b37f190082db8565614e19fe7", 0xf6}], 0x3, &(0x7f0000000700)=[@flowinfo={{0x10, 0x29, 0xb, 0x3}}], 0x10}}, {{&(0x7f0000000780)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000007c0)="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", 0xff}, {&(0x7f00000008c0)="5f6e0e3f4e3c57923df472c9e768fee382", 0x11}, {&(0x7f0000000900)="b596faed1fac65be58034cb18d44da2b9d0914b05bb936a96d74d1d471c2474c9a8e227a182c51dcf9291338e140b21a7fa8b722fd7719d01764bf02aab5da7ee7b915e647c6f155839a1df580ed4b2913e33e75977f03eb6789e5e9511f37e1eb0e55189f42", 0x66}], 0x3, &(0x7f00000009c0)=[@tclass={{0x10, 0x29, 0x43, 0x1}}, @pktinfo={{0x20, 0x29, 0x32, {@private1, r6}}}, @hopopts={{0x24, 0x29, 0x36, {0x41, 0x1, [], [@enc_lim={0x4, 0x1, 0xa7}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x3}]}}}, @rthdr={{0x34, 0x29, 0x39, {0x67, 0x4, 0x2, 0x7, 0x0, [@loopback, @private0={0xfc, 0x0, [], 0x1}]}}}, @hopopts_2292={{0x19c, 0x29, 0x36, {0x2b, 0x30, [], [@calipso={0x7, 0x48, {0x0, 0x10, 0x1, 0x8000, [0x3, 0x0, 0x1, 0x0, 0x9, 0x4, 0x80, 0x3db644f6]}}, @generic={0x80, 0x50, "776bf17335e50c35b107e1251900b3186f47a9fe981625113d6deb1059a2c66fe3c1f72fa9bc7202016dd10ad8fad90cf5a62ef4b8ccd11570aec2c7ab5add0897609ef6d2ecbf6a52b8d033e88af875"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x28}}, @generic={0x3f, 0x96, "5114484913ad8f71eee68e6ea9598ccdf2aa874057c9d4319cd2beeb62a07fbb1eaf9df31edfb881fa880742c3d3f1adb4c75b2bda175f055b35dba932b4b5fe59927e407ea63668b49afaa109084c15df7913d8326936b5bab799cf6af12302021d8fc4d5a78e05f1db3ce592ca3cf4b9b83ce1855a77bbae84ced3505cc1be110bc7bf16defb74c6d12f8c3e07559c2d47bf8d0af5"}, @calipso={0x7, 0x38, {0x3, 0xc, 0x4, 0xff, [0xff, 0x0, 0x9, 0x100000000, 0x3, 0x1]}}, @pad1, @pad1]}}}, @flowinfo={{0x10, 0x29, 0xb, 0xffffffff}}, @rthdr={{0x34, 0x29, 0x39, {0x16, 0x4, 0x0, 0x2, 0x0, [@private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}]}}}, @hopopts_2292={{0x84, 0x29, 0x36, {0x87, 0xd, [], [@enc_lim={0x4, 0x1, 0x7f}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x40}, @jumbo={0xc2, 0x4, 0x401}, @enc_lim={0x4, 0x1, 0xff}, @generic={0xb2, 0x47, "0ad6d91d51f3e8697d137106e14837dd1b27b7c435447884a43de1c1aa8d0694fc8d4d805db17dfadb2326d34597f374f111822ce62f1b5106b93183f416a22d7ebca93997419d"}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x9}}], 0x2fc}}, {{&(0x7f0000000cc0)={0xa, 0x4e21, 0x2, @mcast1, 0xe8de}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000000d00)="26030c178a5976644de427cbab6b5458", 0x10}, {&(0x7f0000000d40)="6e93d0b6f15bfb0573fc0945ae02c7e1ce311944f2980ec0e2f0b8ac309ceab6e31ccb165ac905da5c7fe9d3415a8d24a217b0a1d07a681d6060beb5b038d35eae32c86bd13a5d255872dd8e22eec58b8400c38532b268f1a2d5dddc9382c15b3f573959", 0x64}, {&(0x7f0000000dc0)="44923a165f3acfca834cd1857abb9537e1a44a475475f8c86bb1c41f65d10bbaafceecc48bfa5b1f6c9f7ce938a07b18204787e0189e424686abd1a4d81a249d86796f95692c027d19036d45ce3ec00b9a79648aae1f0723d7bb450edce807bc3a2430bb571e02e074638b0fc1084cb5bf14730ec8dd7038aed35376ec5866af9575aa9ac8c19ab8d8145badfdbe1b61be773abf62f2", 0x96}, {&(0x7f0000000e80)="3ecb4057d0f6cc25a571e1d309f29c546d76dfe5956b6ed437dc32beff659c974cc0551c470f28d395897ebe9d0bd9d048ad59bfd01306e760b6f6a582c5296075fed96eb2db4127333f5b327c82685f9cb688649819faeb2f4d37e9abdd5efe0745689fb3c16044e0271fece785d0e81527d253e6619e0331ee14db70bd4a210720af59ae1e4e5005221e88f0dac748253d96308d3a8dde67705acd1f88d57369ef99c1ded9e748c2158987f1", 0xad}, {&(0x7f0000000f40)="ce916e99612904cfbbb390647f97df07f57f90c4e00f27e8f5bd80e0b01bd525fff16d5d2395d53a2da5521c9d7eacb630a7", 0x32}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="6471e146eeee71ab859766a529770bbbc181dda9d0bfc8febe42156b60fcba332b5ddc35e5acd1e6d9f8949b0a0d2d935f5d0df97bcbc66a2d4120f21580534c7cb12221bec757e8c564b368cc017128bb441143df4b7a6d0a94339c88e6447bb452aaad91787dfbbe708c05dcc84a469891d81de850d25734fc6a73cafd619d42f0c06ac743745a928f0b4d3bb93a1c3f158b125883b92ea3f5f61c60aa0dd2d76f70175153797efb085983f9e31cbc873f8a8fe9fa8f13c2e826e6fe492907d29b30e325812b3da310c404f8a1471b90e896f246e5fab00726cc91b3259055ee5ec4d5b5f305b0e454c3c317232f", 0xef}], 0x7, &(0x7f00000020c0)=[@rthdr_2292={{0x34, 0x29, 0x39, {0x6, 0x4, 0x2, 0x20, 0x0, [@dev={0xfe, 0x80, [], 0x19}, @remote]}}}, @rthdr_2292={{0x84, 0x29, 0x39, {0x3c, 0xe, 0x1, 0x8, 0x0, [@mcast2, @private2, @ipv4={[], [], @private=0xa010100}, @dev={0xfe, 0x80, [], 0x2c}, @empty, @ipv4={[], [], @loopback}, @mcast2]}}}, @flowinfo={{0x10}}], 0xc8}}], 0x3, 0x891) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x90, r4, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_logind_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sshd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x90}}, 0x40) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:bin_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000841}, 0x4000000) [ 2623.728617][T27016] usb 3-1: Using ep0 maxpacket: 8 [ 2623.800005][ T8172] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2623.908900][T19515] usb 6-1: device not accepting address 115, error -71 [ 2623.916517][T27016] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2623.959582][T15152] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2623.969153][T21525] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2623.992235][T15153] batman_adv: batadv0: Adding interface: veth77 [ 2623.998853][T15153] batman_adv: batadv0: The MTU of interface veth77 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2624.024511][T15153] batman_adv: batadv0: Not using interface veth77 (retrying later): interface not active [ 2624.030440][T27016] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2624.036687][T15156] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2624.066377][T27016] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2624.075862][ T8172] usb 4-1: Using ep0 maxpacket: 8 10:12:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x60}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:37 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xf6030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2624.258744][T21525] usb 2-1: Using ep0 maxpacket: 8 [ 2624.276814][T15176] device syz_tun entered promiscuous mode [ 2624.284154][ T8172] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2624.293852][T27016] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2624.303102][T19515] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 2624.311764][T27016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2624.322930][T27016] usb 3-1: Product: syz [ 2624.327278][T27016] usb 3-1: Manufacturer: syz [ 2624.332683][T15176] device syz_tun left promiscuous mode [ 2624.335147][T27016] usb 3-1: SerialNumber: syz [ 2624.399635][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2624.411385][ T8172] usb 4-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 2624.429228][ T8172] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2624.443218][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2624.470681][T21525] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2624.519590][T19515] usb 6-1: device descriptor read/8, error -61 10:12:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xf0}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2624.664523][ T8172] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2624.678833][T21525] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2624.691732][T21525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2624.713629][ T8172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2624.722885][T21525] usb 2-1: Product: syz [ 2624.727244][ T8172] usb 4-1: Product: syz [ 2624.734153][T21525] usb 2-1: Manufacturer: syz [ 2624.739806][ T8172] usb 4-1: Manufacturer: syz [ 2624.744582][T21525] usb 2-1: SerialNumber: syz [ 2624.751123][T27016] usb 3-1: cannot find UAC_HEADER [ 2624.756418][T27016] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 2624.770446][ T8172] usb 4-1: SerialNumber: syz [ 2624.784929][T27016] usb 3-1: USB disconnect, device number 35 [ 2624.799292][T19515] usb 6-1: device descriptor read/8, error -61 10:12:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x300}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2624.916524][T15176] device syz_tun entered promiscuous mode [ 2624.931046][T19515] usb usb6-port1: unable to enumerate USB device [ 2624.938286][T15176] device syz_tun left promiscuous mode 10:12:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x0, 0x29476b6546720fd1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x117}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f00000006c0)={{0x3, 0x100, 0xc55, 0x7, 0x8, 0x800000}, 0x164, [0x7, 0x0, 0x3, 0x3, 0x8, 0xfffffffa, 0x0, 0x10000, 0xa61, 0x3, 0x9, 0x8000, 0x6, 0x8, 0x3, 0x9, 0x4fa0, 0x5, 0x8001, 0x7, 0x20, 0x3, 0xff, 0x1, 0x2, 0xb8f, 0x0, 0x3f, 0x400, 0x2, 0x207b, 0xd7, 0x5, 0x80, 0x7, 0xf2, 0x6, 0x10001, 0x101, 0x4, 0x7ff, 0x20, 0x2, 0x80000001, 0x1, 0x22fc, 0x4, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x3, 0x3, 0x7fff, 0x5, 0x8, 0x1, 0x7f, 0x6, 0x400, 0x3f, 0x5, 0x0, 0x6, 0x5, 0x6, 0x0, 0x8, 0x5, 0x7fffffff, 0x3, 0x89, 0x7, 0xe6c8, 0x3, 0x80, 0xfffffff8, 0x20, 0x0, 0x0, 0x10000, 0x2, 0x8001, 0x7, 0x8, 0x9, 0x4137, 0x1, 0xffff, 0xffff, 0xff, 0xb5, 0x9, 0x1, 0x4, 0x5, 0x1, 0x3, 0x0, 0x40, 0x3, 0x0, 0x8, 0x7, 0x7fff, 0x10001, 0x43, 0x6, 0xfffffaf8, 0x8bf9, 0xfffffffa, 0x1, 0x1, 0x7, 0x2, 0xc9, 0x3, 0x1f, 0x7ab20eaf, 0xfffffff9, 0xfffffff8, 0xfffffff8, 0x0, 0x0, 0xffff, 0x8, 0xffffff00, 0x0, 0x1f, 0x9, 0x7ff, 0x0, 0x7, 0x704, 0x1, 0x4, 0x3f, 0x4, 0x401, 0x80000000, 0x76e, 0x0, 0x0, 0x800, 0x81, 0x3, 0x8, 0xff, 0x7eb, 0x400, 0x40, 0x401, 0x7ff, 0x3, 0x1, 0x2, 0x1ff, 0x55, 0x200, 0xd0, 0xffffffff, 0x8001, 0x6, 0x8, 0x7fff, 0x223f, 0x6e800, 0x5, 0x80000000, 0xfffffff9, 0x1f, 0xfffff001, 0x5, 0x1, 0x2, 0x58, 0xfffff3fc, 0x10000, 0xf7d, 0xfffff801, 0x8, 0x0, 0x0, 0x6, 0x4, 0xa0a, 0x8001, 0x6, 0x7fffffff, 0x48, 0x39f, 0x7f, 0xfffffffa, 0x7, 0x2, 0x2, 0x265, 0x5, 0x3, 0x3f, 0x4, 0x5, 0x6465, 0xfffffff9, 0x7, 0x4, 0x67, 0x7ff, 0x8, 0x7, 0xff, 0x9d1, 0xffffffc0, 0x800, 0x0, 0x335, 0x400000, 0x5, 0xfffff801, 0x5, 0x1, 0x400, 0x6, 0x5, 0x20, 0x9, 0x3f, 0x8, 0x3ff, 0x8001, 0x9, 0x100, 0x3, 0x1, 0x5, 0x9, 0x53ca, 0x9, 0x1, 0x3, 0x7fffffff, 0x9, 0x7, 0x200, 0xffff, 0x0, 0x3ff, 0x8, 0x0, 0x2, 0xffff, 0x10000000, 0x2, 0x800, 0x7, 0x9, 0xffffffff, 0x1000, 0x6, 0x3, 0x56f7, 0x81, 0x80000001, 0xb9e, 0x2, 0x80000001, 0xffffffff, 0x8001, 0x12d8, 0x7fffffff, 0x9, 0x2, 0x5, 0x86e2, 0x2, 0x1, 0x6, 0x1, 0x2, 0x1, 0x5, 0x9, 0x5, 0x65000000, 0x9, 0x9, 0x6, 0x20, 0x4, 0x47, 0xffffffff, 0x7ff, 0x3, 0x1f, 0x0, 0x20, 0x4, 0x1, 0x1, 0x3, 0xff, 0x22a, 0x40, 0xffffffff, 0x2, 0x8, 0x2, 0x2832, 0x1ff, 0x16, 0xfffffffa, 0xffff, 0x80000000, 0xfffffff7, 0x8, 0x10a, 0x6d3, 0x7, 0x8, 0x6, 0x1, 0x800, 0x1ff, 0xffff, 0x8000, 0x1f, 0xe9c5, 0x1, 0x1, 0x200, 0x7, 0x2, 0x6, 0x3, 0x9, 0xd50a, 0x8, 0x2, 0x1, 0x5, 0x6, 0x8, 0x400, 0x9, 0x4, 0x74e, 0xffff, 0x2f5, 0x8000, 0x1, 0x4d, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0x8001, 0x8, 0xfffffffa, 0x117b, 0xfff, 0x0, 0x8, 0x7296, 0x87a, 0x8, 0x5, 0x3, 0x4, 0x5, 0x3f, 0x6, 0x3, 0x8, 0x1, 0x9, 0x5, 0x5, 0x8, 0xffffc052, 0x6, 0x7, 0x100, 0x7, 0x100, 0x89ae, 0x400, 0x3f, 0x1, 0x125, 0x7, 0x1de, 0x6, 0x2, 0x8, 0xfffffff9, 0x3, 0x7f, 0x9, 0x94, 0x2, 0x6, 0x3ff, 0x0, 0x1000, 0x4, 0x80, 0x8423, 0x8, 0x101, 0x10001, 0x7, 0x9, 0x1, 0x4, 0x81, 0x3, 0x7, 0xb2db, 0x1, 0x1f, 0x20, 0x63b, 0x401, 0x80000000, 0xffffffff, 0x294, 0xda45, 0x10001, 0x4, 0xf8, 0x7, 0xffff, 0x80000000, 0x10001, 0x0, 0x0, 0x7, 0x4, 0xfff, 0x7, 0xca, 0xf6d, 0x5, 0x401, 0xc7, 0x8fae, 0x0, 0x101, 0x20, 0xfe, 0x80000000, 0x2, 0x400, 0x3, 0x80000000, 0xfffffff8, 0x7, 0xffffffe1, 0x2, 0x20, 0x4, 0x4217, 0x5d, 0x8, 0x7, 0x1, 0x5, 0x9, 0x9, 0x0, 0xe76, 0x6, 0x9, 0x3, 0x80, 0x6ef53efd, 0x81, 0x3, 0x7, 0x80, 0xd4, 0x1, 0x0, 0x1, 0x7f, 0x400, 0x5, 0xffff, 0x2, 0x1, 0xf4, 0x5, 0x1, 0x7, 0x2, 0x80000000, 0x800, 0x9, 0x0, 0x3, 0x100, 0x8, 0x5, 0x1, 0x81, 0x8, 0x9, 0x40, 0xfffffc01, 0x3, 0x9, 0x2dc00, 0x3ff, 0x3f, 0x80, 0x0, 0x6, 0x7f, 0x7, 0x1, 0xff, 0x31a, 0x649, 0x1, 0x3, 0x9, 0x5, 0x0, 0x10001, 0x3, 0x10001, 0x5, 0xf5a, 0x8, 0x1152, 0x1, 0x8, 0x80000001, 0xff, 0x1b6, 0x20, 0xffffeeba, 0x8, 0xfff, 0x2, 0xffffffff, 0x8807, 0x800, 0x4, 0x2, 0x6, 0x79ee, 0x21, 0x7, 0x0, 0xffff, 0x8, 0x3ea00000, 0x3, 0x7, 0x7, 0x10001, 0x800, 0x3, 0x4, 0x3000000, 0x8d09, 0x81, 0x7, 0x2, 0x80000000, 0x100, 0xffff, 0x7, 0x4, 0x6, 0x9, 0x5, 0x6, 0x80, 0x2a08, 0x7, 0x9, 0x0, 0x5, 0x72e21e3a, 0xd31a, 0x6, 0x5, 0x10000, 0x9, 0x660, 0x8, 0x401, 0x2571, 0x4, 0x0, 0x8, 0xfa8, 0x0, 0xfff, 0x19e4, 0xff, 0x4, 0x4, 0x0, 0x6, 0x9, 0x3, 0xffff, 0x9, 0xc2, 0x80000000, 0x6, 0x6, 0x70, 0x0, 0x1400000, 0x4, 0x9, 0x3, 0x9, 0xffff, 0x7, 0x0, 0x900000, 0x4fc, 0x80000000, 0x6, 0x0, 0x9, 0x4800, 0xc9ff, 0x53210f6a, 0x0, 0x1, 0x6, 0x6, 0x2, 0xff, 0x77ed, 0x3, 0x0, 0x1, 0x2, 0x4, 0x3f, 0xfff, 0xdc, 0x9, 0x2, 0x8, 0x3ff, 0x8, 0x3, 0x1, 0x2, 0x4, 0x3, 0x2307, 0x1f, 0x28, 0x3, 0xaf, 0xe4, 0x80000000, 0xd8ce, 0x8, 0x2, 0x4, 0x8d6a, 0xec51, 0x9, 0x5, 0x2, 0x7, 0x3, 0x4, 0x3ff, 0x0, 0xfffffffc, 0xad, 0x1, 0x81, 0x5, 0x3, 0x4, 0xff, 0xff, 0xfffffffa, 0x6, 0x800, 0x7, 0xc8a, 0x2, 0x10000, 0x5, 0x2a, 0xffffff93, 0x44c4, 0x20, 0x5, 0xb6, 0x0, 0x80, 0x1cc, 0x6, 0x0, 0x2, 0x87, 0x9, 0x6, 0x1, 0x7, 0x2, 0x2, 0x3f, 0xa1e, 0xffff6573, 0x8, 0xffffffff, 0xb0ab, 0x9bc, 0xa7b5, 0x101, 0x5, 0xbe3, 0x8, 0x7fff, 0xffff, 0x4, 0x1, 0x0, 0x1ff, 0x0, 0x100, 0x7, 0xfa94, 0x5, 0xa4, 0x3, 0x80000001, 0x3, 0x80000000, 0x8, 0x1ff, 0x7, 0x9, 0x400, 0xc0, 0x2, 0x3, 0x7fffffff, 0x9, 0x401, 0x4, 0x812, 0x100, 0x3, 0x2, 0x400, 0x6, 0x7fffffff, 0x2, 0x101, 0x3, 0x5, 0x3, 0x1000, 0x6, 0x3ff, 0x1e1, 0x5, 0x2, 0x400, 0x0, 0x8000, 0x8, 0x3, 0x5, 0x1f, 0x249, 0x7f, 0x0, 0x75, 0x101, 0x4, 0x45, 0xffff7fff, 0x2, 0x8, 0x8000000, 0x401, 0xc, 0x926, 0x3cdc3696, 0x8, 0x7d, 0x20, 0x80000001, 0x7, 0x2, 0x8, 0x3ff, 0x1ff, 0x1f, 0x6, 0x42, 0x81, 0x1ff, 0x2, 0x0, 0xff, 0x7, 0x8001, 0x1, 0x3, 0xff, 0x6d3b, 0x3, 0x0, 0x1a, 0x5, 0x8, 0x2, 0xffffffff, 0x3, 0x5, 0x2e, 0x8, 0x5, 0xbc, 0x397, 0x3, 0x5, 0x4, 0x81, 0x1000000, 0xfffffff7, 0x6, 0x8, 0x8000, 0x401, 0xbdda, 0x7fffffff, 0x9, 0x1, 0x80000000, 0x9, 0xffffff2c, 0x9, 0x6, 0x7, 0x4, 0xfff, 0x80000000, 0xffffffff, 0x401, 0x5, 0x8, 0x8, 0x9, 0x8, 0x0, 0x8, 0xffff, 0xb3d1, 0xe0, 0x80000001, 0x8, 0x1, 0x7, 0x27e5, 0x2, 0x2, 0x2, 0x3, 0x6, 0x1, 0x0, 0x5, 0x9, 0x1ff, 0x7, 0x7b4, 0x5, 0x1ff, 0xd6, 0x7fff, 0x3f, 0x0, 0x401, 0x4, 0x5, 0x3, 0x3, 0xa5d, 0x3, 0x3f, 0x32, 0x20, 0xfa, 0x3, 0x87, 0xfb57, 0xd06, 0x5, 0x7fffffff, 0x2, 0x3, 0x20, 0x1, 0xd83, 0x7ff, 0x1, 0x1000, 0x0, 0x8000, 0x4, 0x4, 0x8000, 0x6, 0x2ab1, 0x105, 0x4, 0xcd, 0x2, 0x7, 0x7ec, 0xfffffffe, 0x6, 0x9, 0x3ff, 0x0, 0x7f, 0x1, 0xffffffd4, 0x2, 0x6, 0x9, 0x7, 0x400, 0x7ff, 0x7ff, 0x80, 0x5, 0x4, 0x1, 0x1, 0x7f, 0xb23, 0x78, 0x0, 0x1000, 0x80, 0xff, 0x0, 0x9, 0xfffffff7, 0x1ff, 0x7, 0x3, 0x4, 0xffffffff, 0x7, 0x59, 0x8, 0x5, 0x0, 0x10000, 0x9fd1, 0xabc, 0x4, 0x3, 0xffff, 0x5, 0x2, 0x3, 0x8001, 0x7, 0x1, 0x80000001, 0xb58, 0x80000000, 0x6, 0xf3e7, 0x4, 0x5, 0xfffffff9, 0x1, 0x6, 0x9, 0x0, 0x2, 0x3, 0x3, 0x9, 0x7a, 0x10000, 0xa8, 0x7ff, 0x9, 0xffe0, 0x101, 0x0, 0x7ea8, 0x4, 0xe2, 0x2, 0x1, 0x885, 0x3d, 0x2, 0x8, 0x2, 0x80000000, 0x5, 0x7fffffff, 0x8, 0x1, 0xfdeddfd, 0x80]}) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x14f0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) 10:12:38 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xf8030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x500}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2625.379974][T21525] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2625.394070][T15220] device syz_tun entered promiscuous mode [ 2625.405661][T15220] device syz_tun left promiscuous mode [ 2625.430208][T21525] usb 2-1: USB disconnect, device number 76 [ 2625.498739][T11232] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2625.516178][ T8172] usb 4-1: invalid UAC_HEADER (v1) [ 2625.537035][ T8172] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 2625.587172][ T8172] usb 4-1: USB disconnect, device number 83 [ 2625.742214][T11232] usb 3-1: Using ep0 maxpacket: 8 [ 2625.899392][T11232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2625.979512][T11232] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2625.997165][T15220] device syz_tun entered promiscuous mode [ 2626.010099][T15220] device syz_tun left promiscuous mode [ 2626.088639][ T8093] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2626.160790][T11232] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2626.174329][T11232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2626.191049][T11232] usb 3-1: Product: syz [ 2626.199814][T11232] usb 3-1: Manufacturer: syz [ 2626.212196][T11232] usb 3-1: SerialNumber: syz [ 2626.328729][ T8093] usb 2-1: Using ep0 maxpacket: 8 [ 2626.448854][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2626.468607][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2626.478273][ T8093] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 10:12:39 executing program 5: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x14f0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f0000000000)=0x8) 10:12:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000001c0)) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:12:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x600}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:39 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfa030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2626.608951][T11232] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2626.650311][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2626.668367][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2626.680956][T11232] usb 3-1: USB disconnect, device number 36 [ 2626.689631][T15272] device syz_tun entered promiscuous mode [ 2626.694081][ T8093] usb 2-1: Product: syz [ 2626.732606][ T8093] usb 2-1: Manufacturer: syz [ 2626.746874][ T8093] usb 2-1: SerialNumber: syz [ 2626.761310][T15272] device syz_tun left promiscuous mode 10:12:39 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) [ 2626.981970][ T8093] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2627.034015][ T8093] usb 2-1: USB disconnect, device number 77 [ 2627.040464][T11238] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2627.118837][ T7960] usb 6-1: new high-speed USB device number 117 using dummy_hcd 10:12:40 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x14f0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) [ 2627.300954][T11238] usb 4-1: Using ep0 maxpacket: 8 [ 2627.379421][ T7960] usb 6-1: Using ep0 maxpacket: 8 [ 2627.418932][T11238] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2627.430810][T11238] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 10:12:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x612}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2627.459351][ T8093] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2627.548872][ T7960] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2627.556709][T11232] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2627.598851][T11238] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2627.608441][T11238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2627.618207][T11238] usb 4-1: Product: syz [ 2627.624340][T11238] usb 4-1: Manufacturer: syz [ 2627.629717][T11238] usb 4-1: SerialNumber: syz [ 2627.644876][ T7960] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 10:12:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x900}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2627.698652][ T8093] usb 2-1: Using ep0 maxpacket: 8 10:12:40 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfc030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2627.798754][T11232] usb 3-1: Using ep0 maxpacket: 8 [ 2627.818844][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2627.831375][T15349] device syz_tun entered promiscuous mode [ 2627.831391][ T7960] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2627.831420][ T7960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2627.854647][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2627.865147][T15349] device syz_tun left promiscuous mode [ 2627.865803][ T8093] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2627.898731][ T7960] usb 6-1: Product: syz [ 2627.902930][ T7960] usb 6-1: Manufacturer: syz [ 2627.907662][ T7960] usb 6-1: SerialNumber: syz [ 2627.969796][T11232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2627.989957][T11238] usb 4-1: 0:2 : does not exist [ 2628.015017][T11238] usb 4-1: USB disconnect, device number 84 [ 2628.069465][T11232] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2628.081533][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2628.091929][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2628.103426][ T8093] usb 2-1: Product: syz [ 2628.107767][ T8093] usb 2-1: Manufacturer: syz [ 2628.114454][ T8093] usb 2-1: SerialNumber: syz [ 2628.260949][T11232] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2628.285521][T11232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2628.314053][T11232] usb 3-1: Product: syz [ 2628.328071][T11232] usb 3-1: Manufacturer: syz [ 2628.333758][T11232] usb 3-1: SerialNumber: syz [ 2628.439238][ T8093] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found 10:12:41 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) mknodat(r1, &(0x7f0000000140)='./file0\x00', 0x40, 0x10001) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x803f00, 0x0, 0x0, 0x0, 0x2) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)=""/245, &(0x7f0000000100)=0xf5) [ 2628.493171][ T8093] usb 2-1: USB disconnect, device number 78 [ 2628.558897][ T7960] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2628.578783][T15349] device syz_tun entered promiscuous mode 10:12:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xa00}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2628.620218][ T7960] usb 6-1: USB disconnect, device number 117 [ 2628.657284][T15349] device syz_tun left promiscuous mode [ 2628.829950][T11232] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2628.904818][T11232] usb 3-1: USB disconnect, device number 37 10:12:41 executing program 5: syz_usb_connect$uac1(0x0, 0x96, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0x90, [], 0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/144}, &(0x7f0000000240)=0x50) 10:12:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb00}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2629.278682][ T7960] usb 2-1: new high-speed USB device number 79 using dummy_hcd 10:12:42 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xac240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2629.408752][ T8093] usb 6-1: new high-speed USB device number 118 using dummy_hcd 10:12:42 executing program 3: r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x521000, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000180)) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000086b1d01014000010203010902840003014400000904000000010100000a24010000000201020a240804000000ee423b0c24020100000000000000000f24060000040000000000000000070904010000010200000904010101010200000905010900020002ef072501000000000904020000010200000904020101010200000905820904000800000725010000f014e160e1791d6522ed2723971b7d779ae7da3237243d914ac649c8a887e305059c3d27c56e6ae6acac439022ab995d71ab978ba1b45f09bcd8904e5762c92814a3173b80a834ee7471f4ad9af0754f770e661c84b8eb2b7b8e2c1df35491afc7456359793428aa28e2588ecd79c651dbdba79970444140961e9d646e1eafcc427044321e4d8fa9204a1724cc1851f3c711e3a53aa06bc1129f5ccb"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) [ 2629.525403][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2629.649637][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2629.660771][ T8093] usb 6-1: Using ep0 maxpacket: 8 [ 2629.676449][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 10:12:42 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfeff0000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2629.698201][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2629.829483][ T8093] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2629.868778][T11238] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2629.879590][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2629.887717][T15475] device syz_tun entered promiscuous mode [ 2629.899363][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2629.914337][T15475] device syz_tun left promiscuous mode [ 2629.926602][ T7960] usb 2-1: Product: syz [ 2629.932083][ T8093] usb 6-1: too many endpoints for config 1 interface 0 altsetting 81: 218, using maximum allowed: 30 [ 2629.957359][ T7960] usb 2-1: Manufacturer: syz [ 2629.965568][ T8093] usb 6-1: config 1 interface 0 altsetting 81 has 0 endpoint descriptors, different from the interface descriptor's value: 218 10:12:42 executing program 1: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) 10:12:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xb00}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2629.984877][ T7960] usb 2-1: SerialNumber: syz 10:12:42 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x9b240500, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2630.030453][ T8093] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2630.043353][ T7960] usb 2-1: can't set config #1, error -71 [ 2630.064161][ T7960] usb 2-1: USB disconnect, device number 79 [ 2630.090439][ T8093] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2630.149778][T11238] usb 4-1: Using ep0 maxpacket: 8 [ 2630.269667][ T8093] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2630.280252][ T8093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2630.288894][ T8093] usb 6-1: Product: syz [ 2630.293592][ T8093] usb 6-1: Manufacturer: syz [ 2630.300234][ T8093] usb 6-1: SerialNumber: syz [ 2630.319378][T11238] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2630.418855][T11238] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2630.498686][ T7960] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2630.589466][T11238] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2630.613496][T11238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2630.638719][T11238] usb 4-1: Product: syz [ 2630.642913][T11238] usb 4-1: Manufacturer: syz [ 2630.647512][T11238] usb 4-1: SerialNumber: syz [ 2630.729449][ T8093] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2630.738897][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2630.780245][ T8093] usb 6-1: USB disconnect, device number 118 [ 2630.858806][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2630.873788][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 10:12:43 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfeffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2630.899571][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 10:12:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xc00}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2631.037935][T15533] device syz_tun entered promiscuous mode [ 2631.051777][T15533] device syz_tun left promiscuous mode [ 2631.089640][T11238] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2631.114518][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2631.147154][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2631.177010][T11238] usb 4-1: USB disconnect, device number 85 [ 2631.208014][ T7960] usb 2-1: Product: syz [ 2631.236019][ T7960] usb 2-1: Manufacturer: syz [ 2631.279837][ T7960] usb 2-1: SerialNumber: syz 10:12:44 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000000080)={0x7fffffff, 0x7, 0x4, 0x4000, 0x1, {r1, r2/1000+60000}, {0x2, 0x1, 0x8, 0x3, 0x40, 0x20, "690325c6"}, 0x9, 0x1, @planes=&(0x7f0000000040)={0x1ff, 0x400, @userptr=0x7, 0x8}}) socket$bt_cmtp(0x1f, 0x3, 0x5) syz_usb_connect$uac1(0x0, 0x96, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) 10:12:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xb, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2631.628877][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2631.668780][ T8093] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2631.689373][T15533] device syz_tun entered promiscuous mode [ 2631.697575][ T7960] usb 2-1: USB disconnect, device number 80 [ 2631.757018][T15533] device syz_tun left promiscuous mode 10:12:44 executing program 2: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)=ANY=[@ANYBLOB="12015002000000086b1d01014000010203010902840003014400000904000000010100000a24010000000201020a240824000000ee423b0c24020100000000000000000f24060000040000000000000000070904010000010200000904010101010200000905010900020002ef072501000000000904020000010200000904020101010200000905820904000800000725010000f014"], &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @private=0xa010101}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) getpeername$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) [ 2631.908782][ T8093] usb 6-1: Using ep0 maxpacket: 8 [ 2632.069484][ T8093] usb 6-1: unable to get BOS descriptor or descriptor too short 10:12:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xe00}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2632.149831][ T8093] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2632.169007][ T8093] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 10:12:45 executing program 3: ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x44, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x4, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xef, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x14f0}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x3b, 0x0}) [ 2632.199975][T11232] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2632.328712][ T7960] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2632.339377][ T8093] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2632.348450][ T8093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2632.364829][ T8093] usb 6-1: Product: syz [ 2632.370430][ T8093] usb 6-1: Manufacturer: syz [ 2632.375026][ T8093] usb 6-1: SerialNumber: syz 10:12:45 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xff0f0000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2632.438903][T11232] usb 3-1: Using ep0 maxpacket: 8 [ 2632.485375][T15616] device syz_tun entered promiscuous mode [ 2632.495160][T15616] device syz_tun left promiscuous mode [ 2632.528680][T11238] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2632.588687][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2632.600341][T11232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2632.679380][T11232] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2632.705110][T15564] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2632.709990][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2632.726647][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2632.756432][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2632.778961][T11238] usb 4-1: Using ep0 maxpacket: 8 [ 2632.785604][T15616] device syz_tun entered promiscuous mode [ 2632.815334][T15616] device syz_tun left promiscuous mode [ 2632.869088][T11232] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2632.878150][T11232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2632.888401][ T8093] usb 6-1: 0:2 : does not exist [ 2632.896826][T11232] usb 3-1: Product: syz [ 2632.913852][ T8093] usb 6-1: USB disconnect, device number 119 [ 2632.923832][T11232] usb 3-1: Manufacturer: syz [ 2632.939354][T11238] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2632.948872][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2632.971923][T11232] usb 3-1: SerialNumber: syz [ 2632.984571][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2633.019523][T11238] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2633.030807][ T7960] usb 2-1: Product: syz [ 2633.046835][ T7960] usb 2-1: Manufacturer: syz [ 2633.058890][ T7960] usb 2-1: SerialNumber: syz 10:12:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x1100}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:46 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028c0003010000002904000000010100000a24010000000201020a241200000000ee423b0c24020000020000000000080f240600000400000000000000000709040100000102000009040101010102000009050109000000020007250100000000090402000001020000090402010101020000082402010000000009058209040000000007250100ff0000"], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f00000001c0)=""/241, 0xf1}], 0x4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x3ff, 0x1ff, {"652c8c7f9cffac1e37de75a5ca2aa296"}, 0xc, 0x3ff, 0x8b}}}, 0x90) [ 2633.158884][ T7960] usb 2-1: can't set config #1, error -71 [ 2633.175163][ T7960] usb 2-1: USB disconnect, device number 81 [ 2633.209604][T11238] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2633.233834][T11238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2633.278801][T11238] usb 4-1: Product: syz [ 2633.291777][T11238] usb 4-1: Manufacturer: syz [ 2633.321383][T11238] usb 4-1: SerialNumber: syz 10:12:46 executing program 5 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:46 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xff7f0000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2633.439420][T11232] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2633.454795][T15671] FAULT_INJECTION: forcing a failure. [ 2633.454795][T15671] name failslab, interval 1, probability 0, space 0, times 0 [ 2633.499374][T11232] usb 3-1: USB disconnect, device number 38 [ 2633.518430][T15671] CPU: 0 PID: 15671 Comm: syz-executor.5 Not tainted 5.9.0-rc2-syzkaller #0 [ 2633.527136][T15671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2633.537299][T15671] Call Trace: [ 2633.540607][T15671] dump_stack+0x18f/0x20d [ 2633.544949][T15671] should_fail.cold+0x5/0x14 [ 2633.549563][T15671] should_failslab+0x5/0xf [ 2633.553998][T15671] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2633.560076][T15671] kmem_cache_alloc_node+0x53/0x3f0 [ 2633.565291][T15671] __alloc_skb+0x71/0x550 [ 2633.569637][T15671] netlink_sendmsg+0x94f/0xd90 [ 2633.574415][T15671] ? netlink_unicast+0x7d0/0x7d0 [ 2633.579370][T15671] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2633.584665][T15671] ? netlink_unicast+0x7d0/0x7d0 [ 2633.589614][T15671] sock_sendmsg+0xcf/0x120 [ 2633.594045][T15671] ____sys_sendmsg+0x6e8/0x810 [ 2633.598850][T15671] ? kernel_sendmsg+0x50/0x50 [ 2633.603540][T15671] ? do_recvmmsg+0x6d0/0x6d0 [ 2633.608143][T15671] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2633.614127][T15671] ? lock_downgrade+0x830/0x830 [ 2633.618985][T15671] ? _parse_integer+0x132/0x180 [ 2633.623849][T15671] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2633.629839][T15671] ___sys_sendmsg+0xf3/0x170 [ 2633.634447][T15671] ? sendmsg_copy_msghdr+0x160/0x160 [ 2633.639732][T15671] ? __fget_files+0x272/0x400 [ 2633.644397][T15671] ? lock_downgrade+0x830/0x830 [ 2633.649254][T15671] ? find_held_lock+0x2d/0x110 [ 2633.654040][T15671] ? ksys_write+0x212/0x250 [ 2633.658568][T15671] ? __fget_files+0x294/0x400 [ 2633.663258][T15671] ? __fget_light+0xea/0x280 [ 2633.667848][T15671] __sys_sendmsg+0xe5/0x1b0 [ 2633.670097][ T7960] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2633.672339][T15671] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2633.672374][T15671] ? trace_hardirqs_on+0x5f/0x220 [ 2633.689927][T15671] ? lockdep_hardirqs_on+0x76/0xf0 [ 2633.695051][T15671] __do_fast_syscall_32+0x57/0x80 [ 2633.700079][T15671] do_fast_syscall_32+0x2f/0x70 [ 2633.704935][T15671] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2633.711264][T15671] RIP: 0023:0xf7f43549 [ 2633.715340][T15671] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2633.734947][T15671] RSP: 002b:00000000f553d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 10:12:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x1200}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2633.743371][T15671] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 2633.751352][T15671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2633.759331][T15671] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2633.767332][T15671] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2633.775332][T15671] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:12:46 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xffff0300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:46 executing program 5 (fault-call:3 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2633.878963][T11238] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2633.948808][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2633.959710][T11238] usb 4-1: USB disconnect, device number 86 10:12:46 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2633.996193][T15714] FAULT_INJECTION: forcing a failure. [ 2633.996193][T15714] name failslab, interval 1, probability 0, space 0, times 0 [ 2634.063902][T15713] device syz_tun entered promiscuous mode [ 2634.070546][ T7960] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2634.085908][T15714] CPU: 0 PID: 15714 Comm: syz-executor.5 Not tainted 5.9.0-rc2-syzkaller #0 [ 2634.094607][T15714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2634.098665][ T7960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2634.104661][T15714] Call Trace: [ 2634.104689][T15714] dump_stack+0x18f/0x20d [ 2634.104723][T15714] should_fail.cold+0x5/0x14 [ 2634.125717][T15714] should_failslab+0x5/0xf [ 2634.130142][T15714] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2634.136214][T15714] kmem_cache_alloc_node_trace+0x59/0x400 [ 2634.141944][T15714] ? __alloc_skb+0x71/0x550 [ 2634.146482][T15714] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2634.146668][T15728] FAULT_INJECTION: forcing a failure. [ 2634.146668][T15728] name failslab, interval 1, probability 0, space 0, times 0 [ 2634.152028][T15714] __kmalloc_node_track_caller+0x38/0x60 [ 2634.152046][T15714] __alloc_skb+0xae/0x550 [ 2634.152071][T15714] netlink_sendmsg+0x94f/0xd90 [ 2634.152091][T15714] ? netlink_unicast+0x7d0/0x7d0 [ 2634.152113][T15714] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2634.152128][T15714] ? netlink_unicast+0x7d0/0x7d0 [ 2634.152145][T15714] sock_sendmsg+0xcf/0x120 [ 2634.152162][T15714] ____sys_sendmsg+0x6e8/0x810 [ 2634.152183][T15714] ? kernel_sendmsg+0x50/0x50 [ 2634.208310][T15714] ? do_recvmmsg+0x6d0/0x6d0 [ 2634.212910][T15714] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2634.218920][T15714] ? lock_downgrade+0x830/0x830 [ 2634.223773][T15714] ? _parse_integer+0x132/0x180 [ 2634.228623][T15714] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2634.234607][T15714] ___sys_sendmsg+0xf3/0x170 [ 2634.239199][T15714] ? sendmsg_copy_msghdr+0x160/0x160 [ 2634.244485][T15714] ? __fget_files+0x272/0x400 [ 2634.249166][T15714] ? lock_downgrade+0x830/0x830 [ 2634.254022][T15714] ? find_held_lock+0x2d/0x110 [ 2634.258799][T15714] ? ksys_write+0x212/0x250 [ 2634.263306][T15714] ? __fget_files+0x294/0x400 [ 2634.267987][T15714] ? __fget_light+0xea/0x280 [ 2634.272584][T15714] __sys_sendmsg+0xe5/0x1b0 [ 2634.277090][T15714] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2634.282124][T15714] ? trace_hardirqs_on+0x5f/0x220 [ 2634.287152][T15714] ? lockdep_hardirqs_on+0x76/0xf0 [ 2634.292272][T15714] __do_fast_syscall_32+0x57/0x80 [ 2634.297301][T15714] do_fast_syscall_32+0x2f/0x70 [ 2634.302158][T15714] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2634.308486][T15714] RIP: 0023:0xf7f43549 [ 2634.312557][T15714] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2634.329379][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2634.332161][T15714] RSP: 002b:00000000f553d0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2634.332179][T15714] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 10:12:47 executing program 5 (fault-call:3 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x1206}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2634.332188][T15714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2634.332198][T15714] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2634.332206][T15714] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2634.332215][T15714] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2634.391403][T15728] CPU: 1 PID: 15728 Comm: syz-executor.2 Not tainted 5.9.0-rc2-syzkaller #0 [ 2634.400088][T15728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2634.410172][T15728] Call Trace: [ 2634.413475][T15728] dump_stack+0x18f/0x20d [ 2634.417816][T15728] should_fail.cold+0x5/0x14 [ 2634.422420][T15728] should_failslab+0x5/0xf [ 2634.426864][T15728] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2634.432958][T15728] kmem_cache_alloc_node+0x53/0x3f0 [ 2634.438168][T15728] __alloc_skb+0x71/0x550 [ 2634.442510][T15728] netlink_sendmsg+0x94f/0xd90 [ 2634.447313][T15728] ? netlink_unicast+0x7d0/0x7d0 [ 2634.452268][T15728] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2634.457568][T15728] ? netlink_unicast+0x7d0/0x7d0 10:12:47 executing program 3 (fault-call:0 fault-nth:0): mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) [ 2634.462517][T15728] sock_sendmsg+0xcf/0x120 [ 2634.466945][T15728] ____sys_sendmsg+0x6e8/0x810 [ 2634.471721][T15728] ? kernel_sendmsg+0x50/0x50 [ 2634.476403][T15728] ? do_recvmmsg+0x6d0/0x6d0 [ 2634.481004][T15728] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2634.486993][T15728] ? lock_downgrade+0x830/0x830 [ 2634.491851][T15728] ? _parse_integer+0x132/0x180 [ 2634.496713][T15728] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2634.502701][T15728] ___sys_sendmsg+0xf3/0x170 [ 2634.507297][T15728] ? sendmsg_copy_msghdr+0x160/0x160 [ 2634.512594][T15728] ? __fget_files+0x272/0x400 [ 2634.517283][T15728] ? lock_downgrade+0x830/0x830 [ 2634.517553][T15733] FAULT_INJECTION: forcing a failure. [ 2634.517553][T15733] name failslab, interval 1, probability 0, space 0, times 0 [ 2634.522153][T15728] ? find_held_lock+0x2d/0x110 [ 2634.522171][T15728] ? ksys_write+0x212/0x250 [ 2634.522191][T15728] ? __fget_files+0x294/0x400 [ 2634.522212][T15728] ? __fget_light+0xea/0x280 [ 2634.522233][T15728] __sys_sendmsg+0xe5/0x1b0 [ 2634.522247][T15728] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2634.522273][T15728] ? trace_hardirqs_on+0x5f/0x220 [ 2634.522291][T15728] ? lockdep_hardirqs_on+0x76/0xf0 [ 2634.522311][T15728] __do_fast_syscall_32+0x57/0x80 [ 2634.577952][T15728] do_fast_syscall_32+0x2f/0x70 [ 2634.582814][T15728] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2634.589161][T15728] RIP: 0023:0xf7f01549 [ 2634.593234][T15728] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2634.612839][T15728] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2634.621262][T15728] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 2634.629238][T15728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2634.637215][T15728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2634.645212][T15728] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2634.653193][T15728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2634.661189][T15733] CPU: 0 PID: 15733 Comm: syz-executor.3 Not tainted 5.9.0-rc2-syzkaller #0 [ 2634.669871][T15733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2634.679936][T15733] Call Trace: [ 2634.683235][T15733] dump_stack+0x18f/0x20d [ 2634.687572][T15733] should_fail.cold+0x5/0x14 [ 2634.692175][T15733] should_failslab+0x5/0xf [ 2634.696621][T15733] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2634.702691][T15733] kmem_cache_alloc+0x46/0x3a0 [ 2634.707456][T15733] ? find_held_lock+0x2d/0x110 [ 2634.710587][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2634.712229][T15733] getname_flags.part.0+0x50/0x4f0 [ 2634.712254][T15733] getname+0x8e/0xd0 [ 2634.724357][ T7960] usb 2-1: Product: syz [ 2634.725336][T15733] do_mq_open+0x19e/0x900 [ 2634.731382][ T7960] usb 2-1: Manufacturer: syz [ 2634.733345][T15733] ? vfs_write+0x397/0x730 [ 2634.733366][T15733] ? init_once+0x20/0x20 [ 2634.733390][T15733] __ia32_compat_sys_mq_open+0x138/0x240 [ 2634.748115][ T7960] usb 2-1: SerialNumber: syz [ 2634.750908][T15733] ? __ia32_sys_mq_getsetattr+0xb0/0xb0 [ 2634.750927][T15733] ? lock_is_held_type+0xbb/0xf0 [ 2634.750946][T15733] ? lock_is_held_type+0xbb/0xf0 [ 2634.750964][T15733] ? syscall_enter_from_user_mode+0x20/0x290 [ 2634.750982][T15733] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 2634.750997][T15733] ? trace_hardirqs_on+0x5f/0x220 [ 2634.751012][T15733] ? lockdep_hardirqs_on+0x76/0xf0 [ 2634.751031][T15733] __do_fast_syscall_32+0x57/0x80 [ 2634.751050][T15733] do_fast_syscall_32+0x2f/0x70 [ 2634.808552][T15733] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2634.814888][T15733] RIP: 0023:0xf7fc2549 [ 2634.818956][T15733] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2634.838562][T15733] RSP: 002b:00000000f55bc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000115 [ 2634.846983][T15733] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000000043 [ 2634.854981][T15733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2634.862957][T15733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2634.870932][T15733] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2634.878903][T15733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2634.898772][T15713] device syz_tun left promiscuous mode 10:12:47 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:12:47 executing program 3 (fault-call:0 fault-nth:1): mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) [ 2635.040777][T15746] FAULT_INJECTION: forcing a failure. [ 2635.040777][T15746] name failslab, interval 1, probability 0, space 0, times 0 [ 2635.079845][T15746] CPU: 0 PID: 15746 Comm: syz-executor.2 Not tainted 5.9.0-rc2-syzkaller #0 [ 2635.088554][T15746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2635.098618][T15746] Call Trace: [ 2635.098822][ T7960] usb 2-1: cannot find UAC_HEADER [ 2635.101917][T15746] dump_stack+0x18f/0x20d [ 2635.107196][ T7960] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 2635.111237][T15746] should_fail.cold+0x5/0x14 [ 2635.111257][T15746] should_failslab+0x5/0xf [ 2635.111271][T15746] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2635.111287][T15746] kmem_cache_alloc_node_trace+0x59/0x400 [ 2635.111300][T15746] ? __alloc_skb+0x71/0x550 [ 2635.111315][T15746] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2635.111332][T15746] __kmalloc_node_track_caller+0x38/0x60 [ 2635.111345][T15746] __alloc_skb+0xae/0x550 [ 2635.111365][T15746] netlink_sendmsg+0x94f/0xd90 [ 2635.111385][T15746] ? netlink_unicast+0x7d0/0x7d0 [ 2635.111405][T15746] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2635.111419][T15746] ? netlink_unicast+0x7d0/0x7d0 [ 2635.111435][T15746] sock_sendmsg+0xcf/0x120 [ 2635.111459][T15746] ____sys_sendmsg+0x6e8/0x810 [ 2635.164962][ T7960] usb 2-1: USB disconnect, device number 82 [ 2635.168726][T15746] ? kernel_sendmsg+0x50/0x50 [ 2635.168740][T15746] ? do_recvmmsg+0x6d0/0x6d0 [ 2635.168778][T15746] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2635.168794][T15746] ? lock_downgrade+0x830/0x830 [ 2635.168809][T15746] ? _parse_integer+0x132/0x180 [ 2635.168826][T15746] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2635.168848][T15746] ___sys_sendmsg+0xf3/0x170 [ 2635.229450][T15746] ? sendmsg_copy_msghdr+0x160/0x160 [ 2635.234740][T15746] ? __fget_files+0x272/0x400 [ 2635.239425][T15746] ? lock_downgrade+0x830/0x830 [ 2635.244370][T15746] ? find_held_lock+0x2d/0x110 [ 2635.249134][T15746] ? ksys_write+0x212/0x250 [ 2635.253646][T15746] ? __fget_files+0x294/0x400 [ 2635.258328][T15746] ? __fget_light+0xea/0x280 [ 2635.262924][T15746] __sys_sendmsg+0xe5/0x1b0 [ 2635.267429][T15746] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2635.272465][T15746] ? trace_hardirqs_on+0x5f/0x220 [ 2635.277494][T15746] ? lockdep_hardirqs_on+0x76/0xf0 [ 2635.282610][T15746] __do_fast_syscall_32+0x57/0x80 [ 2635.287641][T15746] do_fast_syscall_32+0x2f/0x70 [ 2635.292497][T15746] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2635.298819][T15746] RIP: 0023:0xf7f01549 [ 2635.302890][T15746] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2635.322498][T15746] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2635.330916][T15746] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 2635.338916][T15746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2635.346891][T15746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2635.348490][T15757] FAULT_INJECTION: forcing a failure. [ 2635.348490][T15757] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2635.354868][T15746] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2635.376017][T15746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2635.384013][T15757] CPU: 1 PID: 15757 Comm: syz-executor.3 Not tainted 5.9.0-rc2-syzkaller #0 [ 2635.392685][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2635.402751][T15757] Call Trace: [ 2635.406040][T15757] dump_stack+0x18f/0x20d [ 2635.410377][T15757] should_fail.cold+0x5/0x14 [ 2635.414977][T15757] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2635.420953][T15757] __alloc_pages_nodemask+0x183/0x790 [ 2635.426336][T15757] ? lock_acquire+0x1f1/0xad0 [ 2635.431001][T15757] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 2635.437749][T15757] ? fs_reclaim_release+0x90/0xd0 [ 2635.442768][T15757] cache_grow_begin+0x71/0x430 [ 2635.447539][T15757] cache_alloc_refill+0x27b/0x340 [ 2635.452595][T15757] ? lockdep_hardirqs_off+0x89/0xc0 [ 2635.457785][T15757] kmem_cache_alloc+0x380/0x3a0 [ 2635.462632][T15757] ? find_held_lock+0x2d/0x110 [ 2635.467398][T15757] getname_flags.part.0+0x50/0x4f0 [ 2635.472505][T15757] getname+0x8e/0xd0 [ 2635.476405][T15757] do_mq_open+0x19e/0x900 [ 2635.480752][T15757] ? vfs_write+0x397/0x730 [ 2635.485185][T15757] ? init_once+0x20/0x20 [ 2635.489443][T15757] __ia32_compat_sys_mq_open+0x138/0x240 [ 2635.495072][T15757] ? __ia32_sys_mq_getsetattr+0xb0/0xb0 [ 2635.500623][T15757] ? lock_is_held_type+0xbb/0xf0 [ 2635.505553][T15757] ? lock_is_held_type+0xbb/0xf0 [ 2635.510485][T15757] ? syscall_enter_from_user_mode+0x20/0x290 [ 2635.516466][T15757] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 2635.522439][T15757] ? trace_hardirqs_on+0x5f/0x220 [ 2635.527454][T15757] ? lockdep_hardirqs_on+0x76/0xf0 [ 2635.532604][T15757] __do_fast_syscall_32+0x57/0x80 [ 2635.537623][T15757] do_fast_syscall_32+0x2f/0x70 [ 2635.542480][T15757] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2635.548808][T15757] RIP: 0023:0xf7fc2549 [ 2635.552877][T15757] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2635.572511][T15757] RSP: 002b:00000000f55bc0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000115 [ 2635.580933][T15757] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000000043 [ 2635.588901][T15757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2635.596853][T15757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2635.604843][T15757] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2635.612798][T15757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2635.635054][T15737] FAULT_INJECTION: forcing a failure. [ 2635.635054][T15737] name failslab, interval 1, probability 0, space 0, times 0 [ 2635.660103][T15737] CPU: 1 PID: 15737 Comm: syz-executor.5 Not tainted 5.9.0-rc2-syzkaller #0 [ 2635.668806][T15737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2635.678866][T15737] Call Trace: [ 2635.682197][T15737] dump_stack+0x18f/0x20d [ 2635.686537][T15737] should_fail.cold+0x5/0x14 [ 2635.691155][T15737] should_failslab+0x5/0xf [ 2635.695576][T15737] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2635.701663][T15737] kmem_cache_alloc_node+0x53/0x3f0 [ 2635.706907][T15737] ? lock_is_held_type+0xbb/0xf0 [ 2635.711859][T15737] __alloc_skb+0x71/0x550 [ 2635.716192][T15737] netlink_ack+0x331/0xa10 [ 2635.720608][T15737] ? netlink_sendmsg+0xd90/0xd90 [ 2635.725542][T15737] ? netlink_deliver_tap+0x146/0xb70 [ 2635.730817][T15737] netlink_rcv_skb+0x344/0x430 [ 2635.735565][T15737] ? rtnetlink_put_metrics+0x510/0x510 [ 2635.741014][T15737] ? netlink_ack+0xa10/0xa10 [ 2635.745614][T15737] ? lock_is_held_type+0xbb/0xf0 [ 2635.750555][T15737] netlink_unicast+0x533/0x7d0 [ 2635.755323][T15737] ? netlink_attachskb+0x810/0x810 [ 2635.760417][T15737] ? _copy_from_iter_full+0x247/0x890 [ 2635.765785][T15737] ? __phys_addr+0x9a/0x110 [ 2635.770269][T15737] ? __phys_addr_symbol+0x2c/0x70 [ 2635.775273][T15737] ? __check_object_size+0x171/0x3e4 [ 2635.780558][T15737] netlink_sendmsg+0x856/0xd90 [ 2635.785340][T15737] ? netlink_unicast+0x7d0/0x7d0 [ 2635.790279][T15737] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2635.795570][T15737] ? netlink_unicast+0x7d0/0x7d0 [ 2635.800527][T15737] sock_sendmsg+0xcf/0x120 [ 2635.804957][T15737] ____sys_sendmsg+0x6e8/0x810 [ 2635.809726][T15737] ? kernel_sendmsg+0x50/0x50 [ 2635.814401][T15737] ? do_recvmmsg+0x6d0/0x6d0 [ 2635.819014][T15737] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2635.824985][T15737] ? lock_downgrade+0x830/0x830 [ 2635.829816][T15737] ? _parse_integer+0x132/0x180 [ 2635.834669][T15737] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2635.840630][T15737] ___sys_sendmsg+0xf3/0x170 [ 2635.845235][T15737] ? sendmsg_copy_msghdr+0x160/0x160 [ 2635.850535][T15737] ? __fget_files+0x272/0x400 [ 2635.855202][T15737] ? lock_downgrade+0x830/0x830 [ 2635.860048][T15737] ? find_held_lock+0x2d/0x110 [ 2635.864810][T15737] ? ksys_write+0x212/0x250 [ 2635.869308][T15737] ? __fget_files+0x294/0x400 [ 2635.873965][T15737] ? __fget_light+0xea/0x280 [ 2635.878570][T15737] __sys_sendmsg+0xe5/0x1b0 [ 2635.883093][T15737] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2635.888115][T15737] ? trace_hardirqs_on+0x5f/0x220 [ 2635.893120][T15737] ? lockdep_hardirqs_on+0x76/0xf0 [ 2635.898229][T15737] __do_fast_syscall_32+0x57/0x80 [ 2635.903231][T15737] do_fast_syscall_32+0x2f/0x70 [ 2635.908073][T15737] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2635.914417][T15737] RIP: 0023:0xf7f43549 [ 2635.918473][T15737] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2635.938115][T15737] RSP: 002b:00000000f551c0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2635.946560][T15737] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 2635.954517][T15737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2635.962492][T15737] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2635.970491][T15737] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2635.978477][T15737] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2636.081781][T15742] device ip6gretap0 entered promiscuous mode [ 2636.091300][T15742] device ip6gretap0 left promiscuous mode [ 2636.328755][ T7960] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2636.568659][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2636.689152][ T7960] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2636.702890][ T7960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2636.868813][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2636.877861][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2636.890131][ T7960] usb 2-1: Product: syz [ 2636.894286][ T7960] usb 2-1: Manufacturer: syz [ 2636.901365][ T7960] usb 2-1: SerialNumber: syz 10:12:49 executing program 1: removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00') syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:12:49 executing program 2 (fault-call:1 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:12:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:49 executing program 3 (fault-call:0 fault-nth:2): mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:12:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x1300}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:49 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xffffa888, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2637.050331][T15779] FAULT_INJECTION: forcing a failure. [ 2637.050331][T15779] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2637.079319][ T7960] usb 2-1: cannot find UAC_HEADER [ 2637.084818][ T7960] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 2637.095517][T15782] device syz_tun entered promiscuous mode [ 2637.105974][T15779] CPU: 1 PID: 15779 Comm: syz-executor.3 Not tainted 5.9.0-rc2-syzkaller #0 [ 2637.114657][T15779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2637.124713][T15779] Call Trace: [ 2637.128013][T15779] dump_stack+0x18f/0x20d [ 2637.132353][T15779] should_fail.cold+0x5/0x14 [ 2637.136952][T15779] __alloc_pages_nodemask+0x183/0x790 [ 2637.142332][T15779] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 2637.149106][T15779] ? mark_lock+0xbc/0x1710 [ 2637.153521][T15779] ? putname+0xe1/0x120 [ 2637.157689][T15779] alloc_pages_vma+0xdd/0x720 [ 2637.162378][T15779] wp_page_copy+0x1fd/0x17d0 [ 2637.166979][T15779] ? do_wp_page+0x699/0x1950 [ 2637.171577][T15779] ? print_bad_pte+0x640/0x640 [ 2637.176346][T15779] ? lock_downgrade+0x830/0x830 [ 2637.181204][T15779] ? vm_normal_page+0x148/0x380 [ 2637.186066][T15779] ? handle_mm_fault+0x2112/0x4590 [ 2637.191233][T15779] do_wp_page+0x6a1/0x1950 [ 2637.195668][T15779] ? finish_mkwrite_fault+0x6b0/0x6b0 [ 2637.201037][T15779] ? rwlock_bug.part.0+0x90/0x90 [ 2637.205967][T15779] handle_mm_fault+0x3216/0x4590 [ 2637.210894][T15779] ? apply_to_existing_page_range+0x40/0x40 [ 2637.216787][T15779] ? vmacache_update+0xce/0x140 [ 2637.221683][T15779] do_user_addr_fault+0x598/0xbf0 [ 2637.226729][T15779] exc_page_fault+0xa8/0x160 [ 2637.231300][T15779] ? asm_exc_page_fault+0x8/0x30 [ 2637.236255][T15779] asm_exc_page_fault+0x1e/0x30 [ 2637.241116][T15779] RIP: 0023:0x804d6c9 [ 2637.245078][T15779] Code: 40 54 00 00 00 00 80 3d 8a 3a 0b 09 00 74 24 8b 7c 24 04 80 3d 80 90 15 08 00 8b 47 64 8b 00 0f 84 d6 01 00 00 3d ff ff 03 00 <89> 47 60 0f 87 85 03 00 00 80 3d 78 3a 0b 09 00 8b 44 24 04 c6 40 [ 2637.264714][T15779] RSP: 002b:00000000f55bc110 EFLAGS: 00010297 [ 2637.270787][T15779] RAX: 00000000000001bd RBX: 00000000ffffffff RCX: 0000000008b9bfa0 [ 2637.278753][T15779] RDX: 0000000000000000 RSI: 000000000001ae38 RDI: 0000000008b9bfa0 [ 2637.286703][T15779] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2637.294659][T15779] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2637.302613][T15779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2637.313731][ T7960] usb 2-1: USB disconnect, device number 83 [ 2637.332930][T15782] device syz_tun left promiscuous mode [ 2637.377825][T15779] syz-executor.3 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 2637.395839][T15779] CPU: 1 PID: 15779 Comm: syz-executor.3 Not tainted 5.9.0-rc2-syzkaller #0 [ 2637.404531][T15779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2637.414591][T15779] Call Trace: [ 2637.417903][T15779] dump_stack+0x18f/0x20d [ 2637.422237][T15779] dump_header+0x106/0x60f [ 2637.426658][T15779] oom_kill_process.cold+0x10/0x15 [ 2637.431770][T15779] out_of_memory+0x358/0x13f0 [ 2637.436445][T15779] ? rwlock_bug.part.0+0x90/0x90 [ 2637.441380][T15779] ? mem_cgroup_size+0x50/0x50 [ 2637.446143][T15779] ? oom_killer_disable+0x270/0x270 [ 2637.451345][T15779] ? mutex_trylock+0x246/0x2c0 [ 2637.456105][T15779] ? pagefault_out_of_memory+0xde/0x10d [ 2637.461653][T15779] pagefault_out_of_memory+0xfa/0x10d [ 2637.467050][T15779] ? out_of_memory+0x13f0/0x13f0 [ 2637.472000][T15779] mm_fault_error+0x123/0x380 [ 2637.476683][T15779] do_user_addr_fault+0x5f8/0xbf0 [ 2637.481718][T15779] exc_page_fault+0xa8/0x160 [ 2637.486307][T15779] ? asm_exc_page_fault+0x8/0x30 [ 2637.491244][T15779] asm_exc_page_fault+0x1e/0x30 [ 2637.496092][T15779] RIP: 0023:0x804d6c9 [ 2637.500070][T15779] Code: 40 54 00 00 00 00 80 3d 8a 3a 0b 09 00 74 24 8b 7c 24 04 80 3d 80 90 15 08 00 8b 47 64 8b 00 0f 84 d6 01 00 00 3d ff ff 03 00 <89> 47 60 0f 87 85 03 00 00 80 3d 78 3a 0b 09 00 8b 44 24 04 c6 40 [ 2637.519674][T15779] RSP: 002b:00000000f55bc110 EFLAGS: 00010297 [ 2637.525741][T15779] RAX: 00000000000001bd RBX: 00000000ffffffff RCX: 0000000008b9bfa0 [ 2637.533755][T15779] RDX: 0000000000000000 RSI: 000000000001ae38 RDI: 0000000008b9bfa0 [ 2637.541726][T15779] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2637.549714][T15779] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2637.557696][T15779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2637.596982][T15779] Mem-Info: [ 2637.600458][T15779] active_anon:336 inactive_anon:232697 isolated_anon:0 [ 2637.600458][T15779] active_file:6779 inactive_file:82592 isolated_file:0 [ 2637.600458][T15779] unevictable:0 dirty:179 writeback:0 [ 2637.600458][T15779] slab_reclaimable:21282 slab_unreclaimable:116754 [ 2637.600458][T15779] mapped:63574 shmem:12612 pagetables:8391 bounce:0 [ 2637.600458][T15779] free:1033637 free_pcp:465 free_cma:0 [ 2637.640379][T15779] Node 0 active_anon:1344kB inactive_anon:930788kB active_file:26976kB inactive_file:330368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:254296kB dirty:712kB writeback:0kB shmem:50448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 770048kB writeback_tmp:0kB kernel_stack:17504kB all_unreclaimable? no [ 2637.672306][T15779] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:32kB all_unreclaimable? no [ 2637.701106][T15779] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2637.730054][T15779] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 2637.736010][T15779] Node 0 DMA32 free:356700kB min:35916kB low:44892kB high:53868kB reserved_highatomic:0KB active_anon:1344kB inactive_anon:930788kB active_file:26976kB inactive_file:330368kB unevictable:0kB writepending:712kB present:3129332kB managed:2578224kB mlocked:0kB pagetables:33564kB bounce:0kB free_pcp:1852kB local_pcp:816kB free_cma:0kB [ 2637.768887][T15778] FAULT_INJECTION: forcing a failure. [ 2637.768887][T15778] name failslab, interval 1, probability 0, space 0, times 0 [ 2637.781732][T15779] lowmem_reserve[]: 0 0 0 0 0 [ 2637.786467][T15779] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2637.816047][T15778] CPU: 0 PID: 15778 Comm: syz-executor.2 Not tainted 5.9.0-rc2-syzkaller #0 [ 2637.818774][ T7960] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2637.824736][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2637.824743][T15778] Call Trace: [ 2637.824769][T15778] dump_stack+0x18f/0x20d [ 2637.824793][T15778] should_fail.cold+0x5/0x14 [ 2637.824816][T15778] should_failslab+0x5/0xf [ 2637.824833][T15778] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2637.824852][T15778] kmem_cache_alloc_trace+0x49/0x2c0 [ 2637.824875][T15778] rtnl_newlink+0x46/0xa0 [ 2637.875333][T15778] ? __rtnl_newlink+0x1740/0x1740 [ 2637.880349][T15778] rtnetlink_rcv_msg+0x44e/0xad0 [ 2637.885335][T15778] ? rtnetlink_put_metrics+0x510/0x510 [ 2637.890794][T15778] ? lock_acquire+0x1f1/0xad0 [ 2637.895471][T15778] ? netlink_deliver_tap+0x146/0xb70 [ 2637.900767][T15778] netlink_rcv_skb+0x15a/0x430 [ 2637.905554][T15778] ? rtnetlink_put_metrics+0x510/0x510 [ 2637.909971][T15779] lowmem_reserve[]: 0 0 0 0 0 [ 2637.911031][T15778] ? netlink_ack+0xa10/0xa10 [ 2637.911065][T15778] ? lock_is_held_type+0xbb/0xf0 [ 2637.911087][T15778] netlink_unicast+0x533/0x7d0 [ 2637.911115][T15778] ? netlink_attachskb+0x810/0x810 [ 2637.918084][T15779] Node 1 Normal free:3761732kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2637.920351][T15778] ? _copy_from_iter_full+0x247/0x890 [ 2637.920369][T15778] ? __phys_addr+0x9a/0x110 [ 2637.920384][T15778] ? __phys_addr_symbol+0x2c/0x70 [ 2637.920398][T15778] ? __check_object_size+0x171/0x3e4 [ 2637.920419][T15778] netlink_sendmsg+0x856/0xd90 [ 2637.920442][T15778] ? netlink_unicast+0x7d0/0x7d0 [ 2637.920465][T15778] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2637.920480][T15778] ? netlink_unicast+0x7d0/0x7d0 [ 2637.920498][T15778] sock_sendmsg+0xcf/0x120 [ 2637.920516][T15778] ____sys_sendmsg+0x6e8/0x810 [ 2637.920534][T15778] ? kernel_sendmsg+0x50/0x50 [ 2637.920546][T15778] ? do_recvmmsg+0x6d0/0x6d0 [ 2637.920566][T15778] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2637.920586][T15778] ? lock_downgrade+0x830/0x830 [ 2637.927792][T15779] lowmem_reserve[]: 0 0 0 0 0 [ 2637.930263][T15778] ? _parse_integer+0x132/0x180 10:12:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2637.930281][T15778] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2637.930299][T15778] ___sys_sendmsg+0xf3/0x170 [ 2637.930316][T15778] ? sendmsg_copy_msghdr+0x160/0x160 [ 2637.930333][T15778] ? __fget_files+0x272/0x400 [ 2637.930352][T15778] ? lock_downgrade+0x830/0x830 [ 2637.930369][T15778] ? find_held_lock+0x2d/0x110 [ 2637.930386][T15778] ? ksys_write+0x212/0x250 [ 2637.930406][T15778] ? __fget_files+0x294/0x400 [ 2637.930426][T15778] ? __fget_light+0xea/0x280 [ 2637.930444][T15778] __sys_sendmsg+0xe5/0x1b0 [ 2637.941519][T15779] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 2637.964459][T15778] ? __sys_sendmsg_sock+0xb0/0xb0 [ 2637.964487][T15778] ? trace_hardirqs_on+0x5f/0x220 [ 2637.964504][T15778] ? lockdep_hardirqs_on+0x76/0xf0 [ 2637.964523][T15778] __do_fast_syscall_32+0x57/0x80 [ 2637.964538][T15778] do_fast_syscall_32+0x2f/0x70 [ 2637.964555][T15778] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2637.964567][T15778] RIP: 0023:0xf7f01549 [ 2637.964584][T15778] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2637.964592][T15778] RSP: 002b:00000000f54fb0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2637.964606][T15778] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 2637.964614][T15778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2637.964622][T15778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2637.964630][T15778] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2637.964639][T15778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2638.213184][T15779] Node 0 DMA32: 85*4kB (UM) 55*8kB (UM) 70*16kB (E) 42*32kB (ME) 13*64kB (E) 2*128kB (UE) 2*256kB (UM) 1*512kB (M) 3*1024kB (ME) 4*2048kB (UME) 83*4096kB (M) = 356588kB [ 2638.230532][T15779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2638.242323][T15779] Node 1 Normal: 99*4kB (UME) 209*8kB (UME) 189*16kB (UM) 85*32kB (UM) 47*64kB (UM) 22*128kB (UME) 7*256kB (U) 3*512kB (U) 1*1024kB (M) 2*2048kB (ME) 913*4096kB (M) = 3761732kB [ 2638.261444][T15779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2638.272395][T15779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2638.282557][T15779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2638.294188][T15779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2638.304278][T15779] 61943 total pagecache pages [ 2638.309626][T15779] 0 pages in swap cache [ 2638.313791][T15779] Swap cache stats: add 0, delete 0, find 0/0 [ 2638.322053][T15779] Free swap = 0kB [ 2638.325857][T15779] Total swap = 0kB 10:12:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:12:51 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffff000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x15e9}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2638.368342][T15779] 1965979 pages RAM [ 2638.386131][T15779] 0 pages HighMem/MovableOnly [ 2638.398229][T15779] 349896 pages reserved [ 2638.408068][T15779] 0 pages cma reserved [ 2638.413102][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2638.426681][T15779] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=9807,uid=0 [ 2638.470205][T15779] Out of memory: Killed process 9807 (syz-executor.5) total-vm:93176kB, anon-rss:8368kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 2638.539444][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2638.547138][T15815] device syz_tun entered promiscuous mode [ 2638.558252][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2638.569331][T15815] device syz_tun left promiscuous mode [ 2638.588694][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2638.772456][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2638.781755][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2638.791477][ T7960] usb 2-1: Product: syz [ 2638.795744][ T7960] usb 2-1: Manufacturer: syz [ 2638.801561][ T7960] usb 2-1: SerialNumber: syz [ 2639.087968][T15815] device ip6gretap0 entered promiscuous mode [ 2639.096465][T15815] device ip6gretap0 left promiscuous mode [ 2639.129083][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2639.165641][ T7960] usb 2-1: USB disconnect, device number 84 10:12:52 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028c0003010000000904000000b752df0d0a2401000000020102020000000000080f240600000400000000000000000709040102000009050109000000020007250100000000290402000001020000090402010101020000082402010000000009058209040000000007250100ff00"/146], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:12:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:52 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:12:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x3f00}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:12:52 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:52 executing program 3: mq_open(&(0x7f0000000000)='.th0\x00', 0x43, 0x0, 0x0) 10:12:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:12:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x2194, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:52 executing program 3: mq_open(&(0x7f0000000000)='/th0\x00', 0x43, 0x0, 0x0) [ 2639.706618][T15865] device syz_tun entered promiscuous mode [ 2639.727640][T15865] device syz_tun left promiscuous mode 10:12:52 executing program 3: mq_open(&(0x7f0000000000)='e/h0\x00', 0x43, 0x0, 0x0) 10:12:52 executing program 3: mq_open(&(0x7f0000000000)='et/0\x00', 0x43, 0x0, 0x0) [ 2639.929917][ T8172] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2640.202765][ T8172] usb 2-1: Using ep0 maxpacket: 8 [ 2640.358889][ T8172] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2640.369104][ T8172] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2640.380779][T15865] device syz_tun entered promiscuous mode [ 2640.390430][T15865] device syz_tun left promiscuous mode [ 2640.558840][ T8172] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2640.567893][ T8172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2640.577327][ T8172] usb 2-1: Product: syz [ 2640.582220][ T8172] usb 2-1: Manufacturer: syz [ 2640.586815][ T8172] usb 2-1: SerialNumber: syz [ 2640.870698][ T8172] usb 2-1: USB disconnect, device number 85 [ 2641.628746][ T8172] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2641.898649][ T8172] usb 2-1: Using ep0 maxpacket: 8 [ 2642.039427][ T8172] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2642.049652][ T8172] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2642.269155][ T8172] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2642.278223][ T8172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2642.287358][ T8172] usb 2-1: Product: syz [ 2642.292101][ T8172] usb 2-1: Manufacturer: syz [ 2642.296686][ T8172] usb 2-1: SerialNumber: syz 10:12:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:12:55 executing program 3: mq_open(&(0x7f0000000000)='eth/\x00', 0x43, 0x0, 0x0) 10:12:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x5865}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x3f00, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:55 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2642.599608][ T8172] usb 2-1: USB disconnect, device number 86 10:12:55 executing program 3: mq_open(&(0x7f0000000000)='eth0\x02', 0x43, 0x0, 0x0) 10:12:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:12:55 executing program 3: mq_open(&(0x7f0000000000)='eth0\x03', 0x43, 0x0, 0x0) [ 2642.753693][T15921] device syz_tun entered promiscuous mode 10:12:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x9421, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2642.799717][T15921] device syz_tun left promiscuous mode 10:12:55 executing program 3: mq_open(&(0x7f0000000000)='eth0\x04', 0x43, 0x0, 0x0) 10:12:55 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000200)="d7", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={r1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000080)={r1, 0x60, &(0x7f0000000000)=""/96}) 10:12:55 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:12:55 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:12:56 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:12:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x6000}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:56 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) [ 2643.278798][ T7960] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2643.518709][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2643.529392][T15962] device syz_tun entered promiscuous mode [ 2643.545703][T15962] device syz_tun left promiscuous mode 10:12:56 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xffffffc3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:12:56 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:12:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x6558}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2643.639438][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2643.658749][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2643.668465][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 10:12:56 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) [ 2643.859396][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2643.868470][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2643.882394][ T7960] usb 2-1: Product: syz [ 2643.886549][ T7960] usb 2-1: Manufacturer: syz [ 2643.891648][ T7960] usb 2-1: SerialNumber: syz [ 2643.917148][T15978] device syz_tun entered promiscuous mode [ 2643.949000][T15978] device syz_tun left promiscuous mode [ 2644.208807][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2644.246790][ T7960] usb 2-1: USB disconnect, device number 87 [ 2644.908709][ T7960] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2645.148679][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2645.269701][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2645.283908][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2645.294009][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2645.470172][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2645.479426][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2645.487418][ T7960] usb 2-1: Product: syz [ 2645.493058][ T7960] usb 2-1: Manufacturer: syz [ 2645.497695][ T7960] usb 2-1: SerialNumber: syz 10:12:58 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:12:58 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:12:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:12:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x8100}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:12:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf0ffff, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:58 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xffffffe4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:12:58 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) [ 2645.819087][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2645.872223][ T7960] usb 2-1: USB disconnect, device number 88 [ 2645.889058][T16032] device syz_tun entered promiscuous mode [ 2645.923636][T16032] device syz_tun left promiscuous mode 10:12:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:12:58 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:12:58 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:12:59 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:12:59 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) [ 2646.308937][ T7960] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2646.443765][T16032] device syz_tun entered promiscuous mode [ 2646.489649][T16032] device syz_tun left promiscuous mode [ 2646.548720][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2646.668874][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2646.679870][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2646.692421][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2646.858804][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2646.867857][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2646.876278][ T7960] usb 2-1: Product: syz [ 2646.880592][ T7960] usb 2-1: Manufacturer: syz [ 2646.885237][ T7960] usb 2-1: SerialNumber: syz [ 2647.208814][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2647.235899][ T7960] usb 2-1: USB disconnect, device number 89 [ 2647.918686][T19515] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2648.178685][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2648.318924][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2648.329824][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2648.340013][T19515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2648.548738][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2648.557834][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2648.567317][T19515] usb 2-1: Product: syz [ 2648.572075][T19515] usb 2-1: Manufacturer: syz [ 2648.576684][T19515] usb 2-1: SerialNumber: syz 10:13:01 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r0, &(0x7f0000000080)=""/77, 0x4d) 10:13:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:01 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:13:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xe915}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:01 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2648.905419][T19515] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found 10:13:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xf000}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:01 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) [ 2648.973398][T16131] device syz_tun entered promiscuous mode [ 2648.990998][T19515] usb 2-1: USB disconnect, device number 90 10:13:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x3f000000, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2649.015571][T16131] device syz_tun left promiscuous mode 10:13:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa2, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:02 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:13:02 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) [ 2649.438808][T19515] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2649.728749][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2649.878864][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2649.889818][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2649.901211][T19515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2650.108834][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2650.117948][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2650.126967][T19515] usb 2-1: Product: syz [ 2650.131698][T19515] usb 2-1: Manufacturer: syz [ 2650.136407][T19515] usb 2-1: SerialNumber: syz [ 2650.498815][T19515] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2650.540164][T19515] usb 2-1: USB disconnect, device number 91 [ 2651.158678][T31813] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2651.399199][T31813] usb 2-1: Using ep0 maxpacket: 8 [ 2651.529476][T31813] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2651.540301][T31813] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2651.551969][T31813] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2651.719174][T31813] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2651.728220][T31813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2651.736670][T31813] usb 2-1: Product: syz [ 2651.741007][T31813] usb 2-1: Manufacturer: syz [ 2651.745613][T31813] usb 2-1: SerialNumber: syz 10:13:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:04 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:13:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x94210000, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa3, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:04 executing program 1: syz_usb_connect$uac1(0x0, 0xe9, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x0, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x2, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x1, 0x4, [0x0, 0x0, 0x0, 0x0], 0x30}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x3, 0xbb, 0xff, "6a96a410cb84c4"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x80, 0x9, 0xff, "88"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0x1, "501c"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x3, 0x5, 0x1, "c22e021026e8d0e24d"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, "", '\'($'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xf7, 0x4, 0x4, 0x9, "", ';'}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x2000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xac2, 0x85e, 0x7, "9192"}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:13:04 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffff5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:04 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x2, 0x0) [ 2652.008966][T31813] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2652.038504][T16220] device syz_tun entered promiscuous mode 10:13:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2652.081009][T31813] usb 2-1: USB disconnect, device number 92 10:13:05 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x3, 0x0) [ 2652.174221][T16220] device syz_tun left promiscuous mode 10:13:05 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x4, 0x0) 10:13:05 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x300, 0x0) 10:13:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x3, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:05 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x3f00, 0x0) 10:13:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2652.518846][T31813] usb 2-1: new high-speed USB device number 93 using dummy_hcd 10:13:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2652.600761][T16220] device syz_tun entered promiscuous mode [ 2652.622922][T16278] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2652.633437][T16220] device syz_tun left promiscuous mode [ 2652.768706][T31813] usb 2-1: Using ep0 maxpacket: 8 [ 2652.839373][T16287] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2652.888867][T31813] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2652.919174][T31813] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2652.930973][T31813] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2653.098841][T31813] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2653.108008][T31813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2653.116162][T31813] usb 2-1: Product: syz [ 2653.120463][T31813] usb 2-1: Manufacturer: syz [ 2653.125049][T31813] usb 2-1: SerialNumber: syz [ 2653.458842][T31813] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2653.487643][T31813] usb 2-1: USB disconnect, device number 93 [ 2654.158795][T19515] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2654.399639][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2654.549205][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2654.560164][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2654.571246][T19515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2654.759411][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2654.768506][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2654.776757][T19515] usb 2-1: Product: syz [ 2654.781111][T19515] usb 2-1: Manufacturer: syz [ 2654.785717][T19515] usb 2-1: SerialNumber: syz 10:13:07 executing program 1: syz_usb_connect$uac1(0x5, 0xa8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000086b1d01014000010203010902960003010010010100000a24010000000201020a240800000000ee423b0c24020000020000010400080f24060000040000060000000000070904010000010200000904010101010200000905010900000002000725010000000009040200000102000009040201010102000012240202040000003f755f49c99075cf510209058209040000000007250100ff0000000000000000bea1f0deb0e70e59a53d9cf01e39f142736ee643a33e25567d86409132be78322fe58ea3"], 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x0, 0x8, 0x8001}) 10:13:07 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x4000, 0x0) 10:13:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xfffff000, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x1c, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:07 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:08 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x1000000, 0x0) [ 2655.118871][T19515] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2655.156091][T16333] device syz_tun entered promiscuous mode 10:13:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2655.182516][T19515] usb 2-1: USB disconnect, device number 94 [ 2655.212093][T16333] device syz_tun left promiscuous mode 10:13:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x2, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:08 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x2000000, 0x0) 10:13:08 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x3000000, 0x0) 10:13:08 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x4000000, 0x0) [ 2655.638673][T19515] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2655.661259][T16333] device syz_tun entered promiscuous mode [ 2655.676049][T16333] device syz_tun left promiscuous mode [ 2655.878709][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2656.038977][T19515] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2656.118860][T19515] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2656.126620][T19515] usb 2-1: can't read configurations, error -71 [ 2656.808732][T19515] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2657.068696][T19515] usb 2-1: Using ep0 maxpacket: 8 10:13:10 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028c0003010200000904000000010100000a24010000000201020a240800000000ee423b0c24020000020000000000080f240600000400000000000000000709040100000102000009040101010102000009050109000000020007250100000000090402000001020000090402010101020000082402010000000009058209040000000007250100ff0000"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0xfffffffa) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="1000258223ce6f0000000100010067ab5e20"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 10:13:10 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x3f000000, 0x0) 10:13:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x3, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:10 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2657.208930][T19515] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2657.240169][T16399] device syz_tun entered promiscuous mode [ 2657.256240][T16399] device syz_tun left promiscuous mode 10:13:10 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x40000000, 0x0) [ 2657.279623][T19515] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2657.293429][T19515] usb 2-1: can't read configurations, error -71 [ 2657.319515][T19515] usb usb2-port1: attempt power cycle 10:13:10 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) 10:13:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x8, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2657.513142][T16414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2657.537280][T16415] batman_adv: batadv0: Adding interface: veth9 10:13:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2657.545263][T16415] batman_adv: batadv0: The MTU of interface veth9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2657.575051][T16415] batman_adv: batadv0: Not using interface veth9 (retrying later): interface not active [ 2657.607265][T16399] device syz_tun entered promiscuous mode [ 2657.625841][T16399] device syz_tun left promiscuous mode 10:13:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x1bc3, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2657.795244][T16415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2658.078675][T19515] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2658.170363][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2658.290378][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2658.301241][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2658.313027][T19515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2658.498835][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2658.507906][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2658.516426][T19515] usb 2-1: Product: syz [ 2658.520978][T19515] usb 2-1: Manufacturer: syz [ 2658.525604][T19515] usb 2-1: SerialNumber: syz [ 2658.909096][T19515] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2658.947786][T19515] usb 2-1: USB disconnect, device number 97 [ 2659.558720][ T7960] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2659.798716][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2659.919539][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2659.930375][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2659.940568][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2660.108898][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2660.117956][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2660.126608][ T7960] usb 2-1: Product: syz [ 2660.131138][ T7960] usb 2-1: Manufacturer: syz [ 2660.135748][ T7960] usb 2-1: SerialNumber: syz 10:13:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYBLOB="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"], 0x0) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:13:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0xf, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:13 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7, 0x1, [0x200]}, &(0x7f0000000180)=0xa) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000240)={0xa, {0x6, 0x3f, 0x6}}, 0xa) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000100)={0x29, &(0x7f00000000c0)=""/41}) r3 = mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x150, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:13:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2660.396688][T16484] device syz_tun entered promiscuous mode [ 2660.403093][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found 10:13:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x6000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0xf, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:13 executing program 3: mq_open(&(0x7f00000000c0)='e\x00', 0x2, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f0000000000)=@usbdevfs_connect={0xffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 2660.489450][ T7960] usb 2-1: USB disconnect, device number 98 [ 2660.560582][T16484] device syz_tun left promiscuous mode 10:13:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x10, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 10:13:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0xc0, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2660.929159][T16530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2660.938836][ T7960] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2660.965632][T16533] batman_adv: batadv0: Adding interface: veth11 [ 2660.972831][T16533] batman_adv: batadv0: The MTU of interface veth11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2661.000364][T16533] batman_adv: batadv0: Not using interface veth11 (retrying later): interface not active [ 2661.025912][T16484] device syz_tun entered promiscuous mode [ 2661.035706][T16484] device syz_tun left promiscuous mode [ 2661.184705][T16533] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2661.228734][ T7960] usb 2-1: device descriptor read/64, error 18 [ 2661.618676][ T7960] usb 2-1: device descriptor read/64, error 18 [ 2661.888707][ T7960] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2662.158692][ T7960] usb 2-1: device descriptor read/64, error 18 [ 2662.548764][ T7960] usb 2-1: device descriptor read/64, error 18 [ 2662.668895][ T7960] usb usb2-port1: attempt power cycle 10:13:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x300, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0xec0, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x8100, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:16 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = signalfd(r0, &(0x7f0000000080)={[0x7fff, 0x1]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a45321, &(0x7f0000000240)={{0x7, 0x3}, 'port0\x00', 0x80, 0x802, 0x2, 0xcd4, 0x1, 0x0, 0x1, 0x0, 0x4, 0x49}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) [ 2663.378652][ T7960] usb 2-1: new high-speed USB device number 101 using dummy_hcd 10:13:16 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:16 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x4, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x9, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r3 = dup3(r2, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x11, &(0x7f0000000580)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={r4, 0xf, 0x2, [0x2, 0x3]}, &(0x7f0000000380)=0xc) r5 = openat$vcsu(0xffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x4200, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x140c, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r7 = openat$cgroup_type(r6, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, &(0x7f0000000300)={0xffffffffffffff7f, 0xc9e, 0x0, 0xfffffff9, 0x0, [0xff, 0x2, 0x4, 0x5]}) r8 = openat$btrfs_control(0xffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0xa8082, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000280)={0xa5c96bc37309c299, &(0x7f0000000200), 0x8, r8, 0xa}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}]}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:13:16 executing program 3: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8d018001400010400006e7961fd7c38ecc50800020001fe7d040001"], 0x1d) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000040)={0x1, "2c411fdda8413bedad235f9cadccafde78bc888a8d3a30616fa64cac78489678ee610f79ff8026f0214196374717b833ba1b5c0ebc3cea7d9ba11c41bfbd99b2"}) mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) [ 2663.488866][ T7960] usb 2-1: device descriptor read/8, error -71 [ 2663.498504][T16555] device syz_tun entered promiscuous mode [ 2663.518228][T16555] device syz_tun left promiscuous mode 10:13:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x33fe0, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x200003a8, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:16 executing program 3: mq_open(&(0x7f0000000100)='eth0\x00\xed\xa8\xd0`qtQ;\'7\xee\xcb\xa1|\xdbs\x8e\xc9\x06\xfck\xff\x8e\x89\x81t\x9a\x87', 0x43, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = dup3(r3, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x11, &(0x7f0000000580)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0x80, 0x2}, &(0x7f0000000300)=0x8) mq_getsetattr(r0, &(0x7f0000000000)={0x6, 0x2, 0x4, 0x100}, &(0x7f0000000140)) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2537585ae65ff4f8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x5e4e091cf9a28185, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4004005) r6 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000080)={0x400, 0x0, 0x8, 0x2c2, 0x1, 0x80000001}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00'}) [ 2663.698833][ T7960] usb 2-1: device descriptor read/8, error -71 10:13:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x7ffff000, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0xf, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x3, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:16 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) 10:13:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa200, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x73, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2663.989348][T16555] device ip6gretap0 entered promiscuous mode [ 2664.016170][T16555] device ip6gretap0 left promiscuous mode [ 2664.032613][T16597] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2664.198828][ T7960] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2664.288801][ T7960] usb 2-1: Using ep0 maxpacket: 8 10:13:17 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2664.311666][T16604] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2664.394636][T16606] device syz_tun entered promiscuous mode [ 2664.409390][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2664.419976][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2664.431398][T16606] device syz_tun left promiscuous mode [ 2664.561524][T16606] device syz_tun entered promiscuous mode [ 2664.573995][T16606] device syz_tun left promiscuous mode [ 2664.589661][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2664.598893][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2664.606875][ T7960] usb 2-1: Product: syz [ 2664.613029][ T7960] usb 2-1: Manufacturer: syz [ 2664.617631][ T7960] usb 2-1: SerialNumber: syz [ 2664.979414][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2665.016354][ T7960] usb 2-1: USB disconnect, device number 102 [ 2665.648677][T19515] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2665.898756][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2666.041118][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2666.050853][T19515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2666.259750][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2666.268882][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2666.276866][T19515] usb 2-1: Product: syz [ 2666.281501][T19515] usb 2-1: Manufacturer: syz [ 2666.286108][T19515] usb 2-1: SerialNumber: syz 10:13:19 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0xee00, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r2, r0) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0xa6}, 0x16, 0x3) 10:13:19 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/25) 10:13:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa300, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0xf, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:19 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x2, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:19 executing program 3: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x24000001) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0245629, &(0x7f0000000140)={0x0, 0x5, 0x2, [], &(0x7f0000000100)=0x7f}) 10:13:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xc31b, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2666.658927][T19515] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2666.720228][T19515] usb 2-1: USB disconnect, device number 103 [ 2666.728154][T16662] device syz_tun entered promiscuous mode [ 2666.774214][T16662] device syz_tun left promiscuous mode 10:13:19 executing program 3: r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0xc000, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:13:19 executing program 3: ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000040)=0x6) r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000001c0)) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x240000, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x40}, 0x3}}, @qipcrtr={0x2a, 0x4, 0x2}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x1}}, 0x6, 0x0, 0x0, 0x0, 0x8000, &(0x7f00000004c0)='nr0\x00', 0x9, 0x8, 0xd0e}) r2 = openat$dlm_control(0xffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x21c000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x1b}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000380)={r3, 0x12e6}, 0x8) r4 = dup(r2) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000003c0)=0x1, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000e40)=@assoc_value={r3, 0x6}, &(0x7f0000000e80)=0x8) fspick(r2, &(0x7f00000002c0)='./file0\x00', 0x1) mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x18, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/dsp1\x00', 0x0, 0x0) r6 = dup(r5) r7 = openat$tun(0xffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x180, 0x0) write$binfmt_aout(r7, &(0x7f0000000580)={{0x0, 0x0, 0x59, 0x85, 0x182, 0x1, 0x79, 0x7}, "f43c545f402d5e1a2cb213a314fae22fe765f42209cd5ec88bb8ed646221f422dacef48259707b2620214a07421853451caf82faba713058074042879c879bd7d9a344250054b1905a230b9469f9cb89ae1f4720022243e0da5a478a", [[], [], [], [], [], [], []]}, 0x77c) ioctl$SNDCTL_DSP_SETFMT(r6, 0x8010500d, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) [ 2667.158731][T19515] usb 2-1: new high-speed USB device number 104 using dummy_hcd 10:13:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x3}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2667.338813][T16711] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2667.428701][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2667.438939][T16712] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2667.485720][T16713] device syz_tun entered promiscuous mode [ 2667.500583][T16713] device syz_tun left promiscuous mode [ 2667.569449][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2667.586148][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2667.603983][T19515] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2667.798958][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2667.808005][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2667.816238][T19515] usb 2-1: Product: syz [ 2667.820759][T19515] usb 2-1: Manufacturer: syz [ 2667.825351][T19515] usb 2-1: SerialNumber: syz [ 2668.168854][T19515] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2668.214739][T19515] usb 2-1: USB disconnect, device number 104 [ 2668.858675][ T8093] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2669.108711][ T8093] usb 2-1: Using ep0 maxpacket: 8 [ 2669.238883][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2669.249756][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2669.260836][ T8093] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2669.428847][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2669.437941][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2669.447038][ T8093] usb 2-1: Product: syz [ 2669.451792][ T8093] usb 2-1: Manufacturer: syz [ 2669.456414][ T8093] usb 2-1: SerialNumber: syz 10:13:22 executing program 1: syz_usb_connect$uac1(0x4, 0x9e, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES64, @ANYRES16], 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="d55269b04b1d9fc734e2eb49a3eb76bfce1fef756a5173883b654a3872b662bae8e85b6a6a26da5ff479e1ca9fc67b38123e4fa7", 0x34, 0x4048450, &(0x7f00000000c0)=@nfc={0x27, 0x1, 0x1, 0x2}, 0x80) set_mempolicy(0x3, &(0x7f0000000040), 0x6) 10:13:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:22 executing program 3: r0 = msgget$private(0x0, 0x0) msgctl$MSG_INFO(r0, 0xc, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000140)=""/4096) mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000040)=""/205, 0xcd) 10:13:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0xf0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x1c}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:22 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x5, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2669.738905][ T8093] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2669.753303][T16758] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:13:22 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000580)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r1, 0x3}, &(0x7f00000003c0)=0x8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffd5f, &(0x7f0000000240)={0x0}}, 0x20000080) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000340)='FREEZING\x00', 0x9) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='5\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25030000000500050005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x81) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r8, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc04c565d, &(0x7f00000002c0)={0x9, 0x1, 0x4, 0x70000, 0x7fff, {}, {0x4, 0xc, 0x4, 0x3, 0x4, 0x1, "76e6ceda"}, 0x3, 0x3, @fd=r8, 0x1}) [ 2669.779742][ T8093] usb 2-1: USB disconnect, device number 105 [ 2669.844124][T16760] device syz_tun entered promiscuous mode [ 2669.876316][T16760] device syz_tun left promiscuous mode 10:13:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x2194, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2670.178926][T16783] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2670.214940][T16793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:13:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x3}]}}]}, 0x40}}, 0x0) [ 2670.270691][T16794] batman_adv: batadv0: Adding interface: veth13 [ 2670.281511][T16794] batman_adv: batadv0: The MTU of interface veth13 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2670.388657][T16794] batman_adv: batadv0: Not using interface veth13 (retrying later): interface not active 10:13:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x3f00, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2670.479493][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2670.559337][T16793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:13:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x6, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:23 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) umount2(&(0x7f0000000040)='./file0\x00', 0xf) 10:13:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x9421, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2670.690211][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:13:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x1c}]}}]}, 0x40}}, 0x0) [ 2670.780437][T16828] device syz_tun entered promiscuous mode 10:13:23 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) [ 2670.827814][T16828] device syz_tun left promiscuous mode 10:13:23 executing program 3: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000000c0)=""/248) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/59, 0x3b) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x9, 0x1, 0x8}, 0x10) 10:13:24 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c894}, 0x800) mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180)='wireguard\x00') 10:13:24 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r0 = gettid() wait4(r0, &(0x7f00000000c0), 0x40000000, &(0x7f0000000100)) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x800) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r3, @ANYBLOB="ddffff020000000008000a0058"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000dc06b7b00280012000c00010008000000"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r7, @ANYBLOB="000000000000000008000a00140000c00c7c9881bb1163553fbd7e00"], 0x28}}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, r1, &(0x7f00000000c0)={0xffffffffffffffff, r4}) r8 = openat$proc_capi20(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r8, 0x80045113, &(0x7f0000000080)) 10:13:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0xf000, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2671.309707][T16840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:13:24 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2671.372167][T16853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:13:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0xf0ffff, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2671.448939][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:13:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x10}]}}]}, 0x40}}, 0x0) 10:13:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2671.522428][T16866] device syz_tun entered promiscuous mode [ 2671.559109][T16866] device syz_tun left promiscuous mode [ 2671.880779][T16867] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:13:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x1000000, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:24 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000100)=0x200) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) open$dir(&(0x7f00000000c0)='./file1\x00', 0x10000, 0x261) [ 2672.017482][T16866] device syz_tun entered promiscuous mode [ 2672.027631][T16866] device syz_tun left promiscuous mode 10:13:25 executing program 3: write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x80000001, 0x6, '9P2000'}, 0x13) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/83, 0x53}, {&(0x7f0000000140)=""/157, 0x9d}], 0x2, &(0x7f0000000240)=""/4096, 0x1000}, 0x5}], 0x1, 0x40010000, &(0x7f0000001280)={0x0, 0x989680}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000012c0)={'batadv0\x00', r1}) 10:13:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000280)={'security\x00', 0x95, "329bbfb9c0de2f1e8b6ac0966a1383866500edfbfd9508b7e7e793fc201652970aaf156bd83dc97f7dffd83f15761511371c664e78fcad52116ccfd36fad0313ae0d416646e0811a603fda5c02b4d16af66b1e4991c44279a2604fba871ce4984171d1e638d8e74bf22268b53b910c2d979d80382a96c0f3d9674d8b8f94426a7f26f8178f43b7dd6cca23eed2c9e0dd310726c264"}, &(0x7f0000000340)=0xb9) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000081000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000006c0)={0x0, "4322c3c6181bf2d5c800d127cd25576f"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000016c0)={{r3}, 0x0, 0x0, @unused=[0x2c840000000000, 0x8000, 0x99, 0x973], @devid=r4}) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x20, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) epoll_wait(r5, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x8f) getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000140)=""/5, &(0x7f0000000240)=0x5) 10:13:25 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000980)=&(0x7f0000000940)={&(0x7f0000000880)={&(0x7f0000000840)}, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)}}, &(0x7f00000009c0)=0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000250800"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00X'], 0x28}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xa9, 0x23, 0xc1, 0x897, 0x2, 0x0, 0xffffffff, 0x2ed, 0x40, 0xfd, 0xfa, 0xffff, 0x38, 0x1, 0x8, 0x3, 0x401}, [{0x1474e551, 0xfff, 0x6, 0x6b5, 0x40, 0x10000, 0x5, 0xabb}], "645f95a541668fdd3dc36f8f77193ef72b1d9778279d2a1d14b1e53490ec2f61adcd5887e4353cef642748f19e62187cf55ee6b49bce83c789ef74464a1223fedec0f43f5dc71b0f4eb99ae0b270acf58d190f", [[], [], [], [], [], [], []]}, 0x7cb) 10:13:25 executing program 3: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1404, 0x2, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040000}, 0x8) mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) 10:13:25 executing program 3: io_uring_setup(0x4a84, &(0x7f0000000000)={0x0, 0xd597, 0x2, 0x3, 0x26e}) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0x10001, 0x4) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000240)=""/91) 10:13:25 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) semget(0x0, 0x1, 0xc0) 10:13:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x2000000, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:25 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x8, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2672.528734][ T8172] usb 2-1: new high-speed USB device number 106 using dummy_hcd 10:13:25 executing program 3: r0 = mq_open(&(0x7f0000000040)='eth0\x00', 0x43, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000002c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000000200000000000000", @ANYRESDEC, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0xffff, 0x10242) r7 = signalfd(r0, &(0x7f0000000400)={[0x8, 0x101]}, 0x8) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={0x8000, 0x81, 0x8, 0x0, 0x0, [{{r4}, 0x3ff}, {{r6}, 0xfffffffffffff294}, {{}, 0x101}, {{r1}}, {{r7}, 0x90000000000}, {{r1}, 0x3c52}, {{r8}, 0x4}, {{r3}, 0x6}]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x3f, 0x2, 0x0, 0x0, @irqchip={0x6, 0x6299}}]}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x68}}, 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)={0x8, 0x7f}) 10:13:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x3f000000, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2672.725693][T16921] device syz_tun entered promiscuous mode [ 2672.735078][T16921] device syz_tun left promiscuous mode [ 2672.793163][ T8172] usb 2-1: Using ep0 maxpacket: 8 [ 2672.949812][ T8172] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2672.961488][ T8172] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2672.973746][ T8172] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2673.169321][ T8172] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2673.178394][ T8172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2673.191345][ T8172] usb 2-1: Product: syz [ 2673.195493][ T8172] usb 2-1: Manufacturer: syz [ 2673.202273][ T8172] usb 2-1: SerialNumber: syz [ 2673.309000][T16921] device syz_tun entered promiscuous mode [ 2673.316274][T16921] device syz_tun left promiscuous mode [ 2673.528914][ T8172] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2673.568168][ T8172] usb 2-1: USB disconnect, device number 106 [ 2674.218724][ T8093] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2674.458688][ T8093] usb 2-1: Using ep0 maxpacket: 8 [ 2674.579244][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2674.590574][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2674.602195][ T8093] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2674.768847][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2674.777997][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2674.790228][ T8093] usb 2-1: Product: syz [ 2674.794383][ T8093] usb 2-1: Manufacturer: syz [ 2674.801415][ T8093] usb 2-1: SerialNumber: syz 10:13:27 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee421b"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x2, {0x4, 0xffff, 0x4, 0x24e4a728}}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000240)=0x3) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:13:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x94210000, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x40}}, 0x0) 10:13:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x40000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:27 executing program 3: sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x200000c0) r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x10000, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000380)={r1, 0x7f, 0x7, 0x8}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) r3 = getuid() r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r0, r2, 0x4, r4}, 0x10) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) setresuid(0x0, r3, 0xffffffffffffffff) r5 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x8000, 0x0) connect$unix(r5, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 10:13:27 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x9, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2675.119030][ T8093] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found 10:13:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2675.185321][ T8093] usb 2-1: USB disconnect, device number 107 [ 2675.200575][T16992] device syz_tun entered promiscuous mode [ 2675.245284][T16992] device syz_tun left promiscuous mode 10:13:28 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) r0 = socket(0x1a, 0x6, 0x7ffffffe) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r2, 0x2f, 0xff, 0x2, 0x1, 0xd, @mcast1, @private2, 0x40, 0x1, 0x80, 0xfffffc00}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', r3, 0x2f, 0x4, 0x6, 0x8, 0x8, @mcast1, @remote, 0x7, 0x8, 0x6, 0x6b4}}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r4 = openat$hwrng(0xffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x105000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40186417, &(0x7f00000002c0)={0x0, 0x3, 0x8, 0x9, 0x3, 0x6}) getsockopt$packet_buf(r0, 0x107, 0xb, &(0x7f0000000040)=""/143, &(0x7f0000000100)=0x8f) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000480)=0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) 10:13:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x9effffff, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000100)={0x80, 0x0, 0xfffffff7}) setregid(0x0, r1) setgid(r1) r3 = mq_open(&(0x7f0000000080)='eth0\x00\xb0\x83\xa1 \xb7\xa6\xed\xe5\xfa%\b\x87\t~r\xa1\f\xfe/\xd6\xcfG0\x8b\xdd\x00\x00\x00\x00\x00', 0x1, 0x10b, 0x0) r4 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x400, 0x0) faccessat2(r3, &(0x7f00000000c0)='./file0\x00', 0x34, 0x300) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x2000000, 0x10, r4, 0x0) openat$vsock(0xffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400000, 0x0) 10:13:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0x40}}, 0x0) 10:13:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0xbb}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xd, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mq_open(&(0x7f0000000040)='\a\x00h0\x00\xe3\xde\x99\xd8*\xf6\xe1\x1c\xc1jp4\f\xcc\xf3\xaew\b{\xb3\xd6o\xbf\xca\nht\xa8\xa0x[\xc0\x18K(pEJ\x06\xe6\xf0\xa9\x854\x15\xc0,X\x88P\xb2G\xfb\xd2RtA\xefv\xc3\xac@z\x1bC\xdbBIEF\xde\x19\xa8!?Go\xb21\xcf\x1b\xaa\xfc\xd8\x86\xbaaSLW6_e-,\x05\xa6S\xec{\xad\x16$\x86\xbcP\xd69\x16\xf3\xf1pD\x9b&\xea\xca\x06\x19V\xaa\xf7\xae\x04\xd4\x95 \x98\r0\x95\v\xf4h\xbe\xf8', 0x43, 0x0, 0x0) [ 2675.648897][ T8093] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2675.888880][ T8093] usb 2-1: Using ep0 maxpacket: 8 [ 2675.907997][T16992] device syz_tun entered promiscuous mode [ 2675.917148][T16992] device syz_tun left promiscuous mode [ 2676.009452][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2676.028711][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2676.038392][ T8093] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2676.228838][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2676.237963][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.247796][ T8093] usb 2-1: Product: syz [ 2676.252569][ T8093] usb 2-1: Manufacturer: syz [ 2676.257160][ T8093] usb 2-1: SerialNumber: syz [ 2676.579491][ T8093] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2676.626345][ T8093] usb 2-1: USB disconnect, device number 108 [ 2677.278772][ T8093] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2677.518680][ T8093] usb 2-1: Using ep0 maxpacket: 8 [ 2677.640378][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2677.651269][ T8093] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2677.662275][ T8093] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2677.828887][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2677.837978][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2677.847394][ T8093] usb 2-1: Product: syz [ 2677.852303][ T8093] usb 2-1: Manufacturer: syz [ 2677.856887][ T8093] usb 2-1: SerialNumber: syz 10:13:30 executing program 1: syz_usb_connect$uac1(0x0, 0x9b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x2, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x1, 0x0, 0x2, 0x0, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0xa, 0x0, {0x7, 0x25, 0x1, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:13:30 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0xa, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0xf0ffffff, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x81000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:30 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) 10:13:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x40}}, 0x0) 10:13:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2678.167102][T17087] device syz_tun entered promiscuous mode [ 2678.179048][ T8093] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2678.191173][T17087] device syz_tun left promiscuous mode [ 2678.237172][ T8093] usb 2-1: USB disconnect, device number 109 10:13:31 executing program 3: mq_open(&(0x7f0000000000)='eth0\x00', 0x43, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r0 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x202000, 0x81}, 0x18) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) sendmsg(r1, &(0x7f0000000480)={&(0x7f0000000340)=@isdn={0x22, 0xff, 0x3, 0x8, 0xba}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f00000003c0)="d2ac290a9deb2102ee66443d92a259d46e9fcf20e383f8d5b751d9e863dbab20136902bd13db5c4f704b291e29c1b092b6ef27a37f1b5425d0836c8c6f23c96a4c6262ffd332c0694b95336754a822bfb3e1b40a48f4bcc90abf9a60c509d8aa99e94585b2d1934dda898ee2cf28a9ca7f818d", 0x73}], 0x2, &(0x7f0000001640)=[{0x88, 0x110, 0x2, "41c7d9ffe208bb78c4d2c4af8bd401e77b9dc7511f0a5eb7914bf148455e3ed7a431d9ff51c6dc9162ea81fa29799025c8a24543a3c47a4e84126903992f94877617eb158feb6585a1cc4771070bac05bb749fa1283ffcc3cdf5d8d757fbb642e00a1e8513594035ef58319bdf6af11fca6c3d42a75d702654d2b9"}, {0xcc, 0xff, 0x6, "1d1f567745bddc078782177ce502d15a9e3aa278a832913eb19c2c8d66a264b23cd3760aaa86abff72757690684a13b007a128940e5cfd5b868057f1b0027a89c7e31ffa47d7cdf6da1cce8f873bd48f8bde5815612c1d74aa03d2078552a2b51d286ac39b1d3d83f89bca4d329fc97a57de800bfd05cbc941b72c75f4e60218f7b2ca023c6128451190075d85be8ac64d9f176d43d0e7d05b63bc5d1bcab0f1dba09cad7acd5d389ae4f0b65339f9e2cb1ccb6bcb1742649011b99295"}, {0xcc, 0x102, 0x4, "3f4c32caf3e1090e8ac7808ae41067f3603b0a640621c9c4af3e84f3052aa42779a81b3091a3343e1d0d20b9ba066be0d08b9a5747ba9e073b7586b9301495e8cf87caaa5610460790cd7b083e7cb6e34385c3b4760b2283d4739835904ad55aacae15b3f85e1af1f337f77453461664e8564405147a2de26d176fc2d05130750bd00cc414ef7ae14686e99e712fd209f11d4eee7ab991d9c0b18dcdbe5a9fbebfcd7e7171d7a53525aef3e0bb9c8381182e19ae334ff0b3a4d7a74ecb"}, {0x28, 0x109, 0xf247, "834e6ec9d04b0f7bdd6abf8591bc86b7ebada1ab2490f21b169d1126"}, {0x50, 0x10d, 0x100, "7ddafbd9ebca7519f655f9aee76a0e5b903a1f1bd0bdf563ef3515fb4ebccdc77392cce1eb16463f445da9c0f3c862238502cd72e8cf0ef5163ff673ea85b87fbf626aa3"}, {0xc0, 0x1, 0x10001, "62fa8cfd42cbb6c30acc99172e18640e41c14125d5f3f5521dd485eebeefef8b7e2916ad4bc3d037662b68222d5663f1f5bd16e42e4b336de6cd84e2f6ceda750e7152bcd43fdd3ec394894e12bb4e77c2f4f2e638ff65dd60e32e0cda907334cbd37c8bec78fa540675f1ebdd6f5cfa0cd8143b5771f924fd8b424883f38da5aa167e63a1ba45ff3b5d283376b50dd1c41d1e17212d018c17cb263cc0ab67dd0b65a594151c9bdfcc4dd9be20cf93c522"}, {0x6c, 0xff, 0x3f, "8c02dc91b079c45343a8f624f45bc57828213bd185202233c870c0652c973d41604dd424f95056a838b65dad872d90904e2c1f80a0cc7e64c46faba3910c54ac8469a835139b63855021c60a4fbc7e65256b1a44f7df64372877fb219e5457"}], 0x3c4}, 0x4000) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = dup3(r3, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000300)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x11, &(0x7f0000000580)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r5, 0x4, 0xf9, "721e54f458a56df13b1a989378238a22be3de2a84ac8e210341a136dcdfd9d9e3e9e0d561052b7213459b7588ff849851056f878d2b3a049b28cd2d5ba3d84ddb217ae53f2a37460597dd6c7753c89719543694a29a3f83d2cfd147d1662cc41b8ee201136417056247444d25cf93b4da1b9b877e287508bfde4c951fbd3f0fe19631ec3cf29d4865661837d2c207bfb6040aaef7080a05f7861bb034ad78bf0287b62d5b07a72a3af625c8cd3c911cebfebf55e5b04a9031a0ba6ee63c607780f927499d6171d3cb6ca3699e5c0f968fbf192541837366717a0077cc9a2c719a618178b6981c690691c675595c0d53deafdb222f332bae015"}, 0x101) 10:13:31 executing program 3: mq_open(&(0x7f0000000040)='\xc4\x1a\x01\x01\x00\x00\xf2AY\x89\x01\xc3', 0x40, 0x0, 0x0) 10:13:31 executing program 3: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) r0 = mq_open(&(0x7f0000000140)='\x00 \x00\x00\x00\xc5\xf7\x7fT\xc7\xaai\x9d&\xec\x98~\xeeM\x047\xfaB%\xd9\x8a$\xae\xd4\x04\xc9\xfb\x9e\x8e\xa5\xb0\x10\xe1\xa0,h+\xea\xe7\xc2Z\x10\x8aR\xf2\xfb\x8fWn\x1d\x86@\xa0\xe5\xf4\xff\xd3\xf6g\x89P\xdb*>\xe4\x7f\xe2\x13/\xef\xa2\vN2R!\x83jC\xbd\x92\xc7\xdf$\x13i\x1a\a\xff\a\x00\x00\x00\x00\x00\x001\xec\x87.\xfbj\x17\x1b\x04\xfd\xa4\xe8t\x81\xfcTd\x12\xb0\",\x8cg16\x9a\xa3\x14$B\xbe\xc1\xcd\x04\xb6f\xf5\xdc\xb7\xdd\xe0\xed/A\xb2\x1d\x7fV_\x12\xda\xa9k\x7f^\x024\x04\xba\x15TT0\xf6\xec\xea\xd1P\xc2\x83A\xc40\x97\x98u\vOF\x05\v\xe1\x19\xa0\xae\xf7\xec\x9cZ\xdb\x9fY\x8d\xbf\x84\xc6\xd8\x9a\xd0\xff\xc3\x85v\x83,Rx\xbf\xa0\x12\xc4*\xd4P\xe3\xf7O\x1b\xb0\xde\x8e\x12\xca\a\xda\xe8Z\xdcK5\x9a\x96\xd3\xaf\":\x17LL\xef,3O\xc7\x8eDA\xe7\xae*&T\xea\x8e\x87?_\xc4\xc0\xadv\x86?\xb3A,\xfc\xc05\x10\xb6\x12\xf1.\xe7\x8f\xe4x\x94\xfe\xbeg', 0x80, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, r1}) 10:13:31 executing program 3: mq_open(&(0x7f0000000040)='eth0a\xec\x8f\xc5\x7f\x1a\x1bR\xfb\x00', 0x43, 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4004b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @multicast, 'macvlan0\x00'}}) 10:13:31 executing program 3: mq_open(&(0x7f0000000000)='eq\xaa0\x00', 0x43, 0x52, 0x0) [ 2678.674556][ T8093] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2678.938768][ T8093] usb 2-1: Using ep0 maxpacket: 8 [ 2678.956069][T17137] device syz_tun entered promiscuous mode [ 2678.963899][T17137] device syz_tun left promiscuous mode [ 2679.058891][ T8093] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2679.074755][ T8093] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2679.238806][ T8093] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2679.247904][ T8093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2679.256329][ T8093] usb 2-1: Product: syz [ 2679.260911][ T8093] usb 2-1: Manufacturer: syz [ 2679.265501][ T8093] usb 2-1: SerialNumber: syz [ 2679.588840][ T8093] usb 2-1: 0:2 : does not exist [ 2679.599114][ T8093] usb 2-1: USB disconnect, device number 110 [ 2680.288770][T19515] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2680.538733][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2680.689711][T19515] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2680.699864][T19515] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2680.898820][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2680.907926][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2680.917383][T19515] usb 2-1: Product: syz [ 2680.922284][T19515] usb 2-1: Manufacturer: syz [ 2680.926943][T19515] usb 2-1: SerialNumber: syz 10:13:34 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028c0003010000000904000000010100000a24010000000201020a240800000000ee423b0c24020000020000000000070f24060000040000000000000000070904010000010200000904010101010100e508050109000000020007250100000000090402000001020000090402010101020000082402010000000009058209040015d00007250100ff00002bf70182984b13be34afe6755814ecfc3bf2f2a02faa265e7fc255310dadd21abe22d35f4a4335e91f7ffa940a776ddf868bf5fb4c09fab6a88b4649eb0deede"], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@hci, &(0x7f0000000180)=0x80, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x408001}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) socket$inet_udplite(0x2, 0x2, 0x88) 10:13:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa2000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:34 executing program 3: mq_open(&(0x7f0000000040)='\xe7\xca\xe0\x1eBZd=\x94\fG\x86\xad\x7f\x87\"\xd2\x1f-4\xa1\x01\xd5+}\x10Z\xd2o\xaa;\xf3\xcb\xc9u&\x81\xdc\xd4\xbb\xd0*\a\x04\xdc<7\xdb\xde\xbf^\xd8r^7*_\xb4\x00'/72, 0x2, 0x40, 0x0) 10:13:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0xfffff000, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}]}}]}, 0x40}}, 0x0) 10:13:34 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0xc, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2681.259062][T19515] usb 2-1: 0:2 : does not exist 10:13:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0xffffff7f, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:34 executing program 3: getpgrp(0x0) [ 2681.289468][T19515] usb 2-1: USB disconnect, device number 111 10:13:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xa3000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2681.349270][T17182] device syz_tun entered promiscuous mode [ 2681.403314][T17182] device syz_tun left promiscuous mode 10:13:34 executing program 3: mq_open(&(0x7f0000000000)='e\x1f\x000\x00', 0x43, 0x0, 0x0) [ 2681.728847][T19515] usb 2-1: new high-speed USB device number 112 using dummy_hcd 10:13:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}]}}]}, 0x40}}, 0x0) 10:13:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xc31b0000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2681.988749][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2682.119519][T19515] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2682.138694][T19515] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2682.147748][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2682.168677][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2682.329521][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2682.344014][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2682.354050][T19515] usb 2-1: Product: syz [ 2682.358326][T19515] usb 2-1: Manufacturer: syz [ 2682.371207][T19515] usb 2-1: SerialNumber: syz [ 2682.711988][T19515] usb 2-1: 0:2 : does not exist [ 2682.753936][T19515] usb 2-1: USB disconnect, device number 112 [ 2683.418755][T19515] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2683.668682][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2683.788888][T19515] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2683.805695][T19515] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2683.817107][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2683.835346][T19515] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2683.999471][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2684.012230][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2684.024964][T19515] usb 2-1: Product: syz [ 2684.033476][T19515] usb 2-1: Manufacturer: syz [ 2684.038167][T19515] usb 2-1: SerialNumber: syz 10:13:37 executing program 1: r0 = dup(0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x140a, 0x8, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x840) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000086b1d010140200102030109028c000301000000090400130000010100000a24010000000201020a240800000000ee423b0c24020000020000000000080f240600000400000000000000000709040100000102000009040101010102000009050109000000020007250100000000090402000001020000090402010101020000082402010000000009058209040000000007250100ff00"], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0xcfe4a7ac2305e944, 0x6e) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc53486bf69294804}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x54, 0x0, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_TUPLE={0x0, 0x2, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @empty}, {0x0, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x0, 0x4, @ipv4={[], [], @rand_addr=0x64010101}}}}, @CTA_TUPLE_ZONE, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @local}, {0x0, 0x4, @dev={0xfe, 0x80, [], 0x1d}}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @dev={0xfe, 0x80, [], 0x2d}}, {0x0, 0x4, @loopback}}}]}, @NFCTH_TUPLE={0x0, 0x2, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_PRIV_DATA_LEN={0x0, 0x5, 0x1, 0x0, 0xb}, @NFCTH_TUPLE={0x0, 0x2, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, {0x0, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @loopback}, {0x0, 0x2, @remote}}}]}, @NFCTH_PRIV_DATA_LEN={0x0, 0x5, 0x1, 0x0, 0xc}, @NFCTH_QUEUE_NUM={0x0, 0x3, 0x1, 0x0, 0x5}, @NFCTH_TUPLE={0x0, 0x2, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @ipv4={[], [], @private=0xa010101}}, {0x0, 0x4, @private2}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @multicast2}, {0x0, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @empty}, {0x0, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private2={0xfc, 0x2, [], 0x1}}, {0x0, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x88}}, @CTA_TUPLE_ZONE]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x814) 10:13:37 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0xe, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0xffffff9e, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xc3ffffff, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}]}}]}, 0x40}}, 0x0) [ 2684.378948][T19515] usb 2-1: 0:2 : does not exist [ 2684.426203][T17257] device syz_tun entered promiscuous mode [ 2684.450256][T19515] usb 2-1: USB disconnect, device number 113 [ 2684.464942][T17257] device syz_tun left promiscuous mode [ 2684.888778][T19515] usb 2-1: new high-speed USB device number 114 using dummy_hcd 10:13:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0xfffffff0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0xffffffff, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2685.143802][T19515] usb 2-1: Using ep0 maxpacket: 8 10:13:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x9}]}}]}, 0x40}}, 0x0) 10:13:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfcffffff, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2685.269607][T19515] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2685.282362][T19515] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2685.312489][T19515] usb 2-1: config 1 interface 0 has no altsetting 0 10:13:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x2, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2685.489525][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=20.40 [ 2685.499858][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2685.508366][T19515] usb 2-1: Product: syz [ 2685.513077][T19515] usb 2-1: Manufacturer: syz [ 2685.532144][T19515] usb 2-1: SerialNumber: syz [ 2685.816601][T19515] usb 2-1: USB disconnect, device number 114 [ 2686.603895][T19515] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2686.848772][T19515] usb 2-1: Using ep0 maxpacket: 8 [ 2686.969452][T19515] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2686.984296][T19515] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2686.995695][T19515] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2687.169354][T19515] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=20.40 [ 2687.182998][T19515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2687.193671][T19515] usb 2-1: Product: syz [ 2687.197921][T19515] usb 2-1: Manufacturer: syz [ 2687.207015][T19515] usb 2-1: SerialNumber: syz [ 2687.378560][T19515] usb 2-1: USB disconnect, device number 115 10:13:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0xf0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:40 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x10, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0xa}]}}]}, 0x40}}, 0x0) 10:13:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:40 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014092108ab12a190eb09000000010902240001000000000904410002ff5d810009050f1f0f0000000009058303e9"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r0, &(0x7f0000000280)={0x18, &(0x7f0000000000)={0x0, 0x11, 0xb7, {0xb7, 0x4, "586b27033d4d31977d86906c4569f5393947c8fed21ec178ded82f38de49597bc31203aa393403f346a8ad9effd4887ff2e6a3e33c6f1a1710ed22cc1b7dd11f97519749cbde9868d76993891ac7b2ca8ea19e98b3c8db01eccc3c13d98f8b808f461508e238fef754e9cd90caacd379d4d40c7de8a7e9f29186988765972bb3a05ca33d582771c1c68e4ef4e92e02ad1bf1233d3c8974e1dfb8f9f96d1b6d88e33593f0cb21f407c0caa416dbeefbd509a4c5e3ee"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000000100)={0x0, 0xf, 0xe7, {0x5, 0xf, 0xe7, 0x6, [@generic={0x94, 0x10, 0xb, "d6eb75655a51fe2c85e96440429587ed4bc78ef5daf5e9db951102e1822c3fec606f06f1107b4563fdf6ffc4ab08f387a1a7774b864bcf8b8a0fb03865f6d7023ce1c9093e2cc0b1e95cb6a22d8bc48a70de769b6f14280d6cdd43ba87f3e0ef61597379f96d3a1a19d2b442396f438c6a524e1739300eaa05950e43f379ef308547bdc3671b13b598c30d9088f2e63eaf"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x4c, 0x3b, 0x80, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0xfb, 0x3, 0x1, 0xf00, 0x3ff, [0xff0030, 0xfffe4f, 0x3f07]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd4, "a06dc8c9a055b7022327a5482d683167"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x2, 0xf000, 0x8, [0x30, 0xf]}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x10, 0x56, 0x20, "88ab9594", "f8e16642"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0xff, 0x9, 0x3f, 0xf5, 0x3f}}}, &(0x7f0000000840)={0x44, &(0x7f00000002c0)={0x40, 0xf, 0xcb, "076c742eeb9b964ad2f59ec33f1ed1bdd4381e8e374a9d8f82234286e24183ae5bb179bd478b14a21a0d764049f99dd224963fdc5bf135bc7ffca5f2feb30e7da861367d041463344d6b0eca53bc22d075b39e538f0b5f0d2237a97e8319fb97c7487de6be2c238f556285d97e5cde210b38f0998fc20c0dc8ade3d998657e35c7c0fcc53300a884a25bb96c76ac0ae4f14a5e08572c3de932a6168f752c876eb55ff0a9cd11c75dfdfe94c44c9b6f0d99496cc7d494736dbaa9965c1bc42ce202426f0bef8c112e622f1a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x100, 0x10}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x85c}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000540)={0x40, 0xb, 0x2, "ee84"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1f}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @random="4cf509c4cc62"}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "e7d7"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x2}}) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:13:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x2194, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2687.534952][T17345] device syz_tun entered promiscuous mode [ 2687.565662][T17345] device syz_tun left promiscuous mode [ 2687.958807][T19515] usb 2-1: new high-speed USB device number 116 using dummy_hcd 10:13:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x3f00, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0xb}]}}]}, 0x40}}, 0x0) [ 2688.209066][T19515] usb 2-1: Using ep0 maxpacket: 8 10:13:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x9421, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffc3, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2688.313239][T17345] device ip6gretap0 entered promiscuous mode [ 2688.329148][T19515] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 2688.338862][T19515] usb 2-1: config 0 has no interface number 0 [ 2688.346032][T17345] device ip6gretap0 left promiscuous mode [ 2688.358845][T19515] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2688.386703][T19515] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2688.406082][T19515] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2688.416879][T19515] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2688.445998][T19515] usb 2-1: config 0 descriptor?? 10:13:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:41 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0xf000, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0xc}]}}]}, 0x40}}, 0x0) [ 2688.945188][T17393] device syz_tun entered promiscuous mode [ 2689.001967][T17393] device syz_tun left promiscuous mode [ 2689.265563][T17401] udc-core: couldn't find an available UDC or it's busy [ 2689.290311][T17401] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2689.494766][T17393] device syz_tun entered promiscuous mode [ 2689.514456][T17393] device syz_tun left promiscuous mode 10:13:43 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109028c0003010000000904000000010100000a24010000000201020a240800000000ee423b0c24020000020000000000080f24060000040000000000000000070904010000010200000904010101010200000905010900462ae24bb9f80378978cd45627d7760000020007250100000000090402000001020000090402010101020000082402010000000009"], 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0xe8}}, 0x10005) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:13:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0xf0ffff, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffc, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0xe}]}}]}, 0x40}}, 0x0) 10:13:43 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x48, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2690.545832][ T7960] usb 2-1: USB disconnect, device number 116 [ 2690.558705][ C0] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2690.574335][ C0] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 10:13:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x1000000, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2690.717775][T17422] device syz_tun entered promiscuous mode 10:13:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2690.758975][T17422] device syz_tun left promiscuous mode [ 2691.050918][ T7960] usb 2-1: new high-speed USB device number 117 using dummy_hcd 10:13:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x10}]}}]}, 0x40}}, 0x0) 10:13:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0xf, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x2000000, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2691.096940][T17422] device syz_tun entered promiscuous mode [ 2691.134428][T17422] device syz_tun left promiscuous mode 10:13:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x10, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2691.308966][ T7960] usb 2-1: Using ep0 maxpacket: 8 10:13:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0xc0, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2691.439462][ T7960] usb 2-1: config 1 has an invalid descriptor of length 185, skipping remainder of the config [ 2691.465770][ T7960] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2691.499422][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 42, changing to 7 [ 2691.537391][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1536, setting to 1024 [ 2691.739392][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2691.766607][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2691.809108][ T7960] usb 2-1: Product: syz [ 2691.838676][ T7960] usb 2-1: Manufacturer: syz [ 2691.843358][ T7960] usb 2-1: SerialNumber: syz [ 2692.178939][ T7960] usb 2-1: 0:2 : does not exist [ 2692.213854][ T7960] usb 2-1: USB disconnect, device number 117 [ 2692.908759][ T7960] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2693.158710][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2693.279406][ T7960] usb 2-1: config 1 has an invalid descriptor of length 185, skipping remainder of the config [ 2693.318692][ T7960] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2693.327711][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 42, changing to 7 [ 2693.344608][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1536, setting to 1024 [ 2693.518905][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2693.527954][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2693.548880][ T7960] usb 2-1: Product: syz [ 2693.553063][ T7960] usb 2-1: Manufacturer: syz [ 2693.557680][ T7960] usb 2-1: SerialNumber: syz 10:13:46 executing program 1: syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/308], 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:13:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0xec0, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:46 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x4a, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x3f000000, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x11}]}}]}, 0x40}}, 0x0) [ 2693.772927][ T7960] usb 2-1: 0:2 : does not exist 10:13:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x33fe0, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2693.823708][ T7960] usb 2-1: USB disconnect, device number 118 [ 2693.825737][T17495] device syz_tun entered promiscuous mode [ 2693.888308][T17495] device syz_tun left promiscuous mode 10:13:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x200000a8, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x7ffff000, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0xfffffdef, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2694.248825][ T7960] usb 2-1: new high-speed USB device number 119 using dummy_hcd 10:13:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x94210000, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x12}]}}]}, 0x40}}, 0x0) [ 2694.448513][T17495] device syz_tun entered promiscuous mode [ 2694.493349][T17495] device syz_tun left promiscuous mode [ 2694.498889][ T7960] usb 2-1: Using ep0 maxpacket: 8 [ 2694.620840][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2694.646646][ T7960] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2694.680067][ T7960] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2694.869401][ T7960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2694.888918][ T7960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2694.897634][ T7960] usb 2-1: Product: syz [ 2694.905902][ T7960] usb 2-1: Manufacturer: syz [ 2694.911658][ T7960] usb 2-1: SerialNumber: syz [ 2695.238880][ T7960] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2695.268776][ T7960] usb 2-1: USB disconnect, device number 119 [ 2695.944556][T21525] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2696.218706][T21525] usb 2-1: Using ep0 maxpacket: 8 [ 2696.358964][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2696.378677][T21525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2696.388346][T21525] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2696.562672][T21525] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2696.577577][T21525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2696.596752][T21525] usb 2-1: Product: syz [ 2696.603440][T21525] usb 2-1: Manufacturer: syz [ 2696.608232][T21525] usb 2-1: SerialNumber: syz 10:13:49 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014092108ab12a190eb09000000010902240001000000000904410002ff5d810009050f1f0f0000000009058303e9"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r0, &(0x7f0000000280)={0x18, &(0x7f0000000000)={0x0, 0x11, 0xb7, {0xb7, 0x4, "586b27033d4d31977d86906c4569f5393947c8fed21ec178ded82f38de49597bc31203aa393403f346a8ad9effd4887ff2e6a3e33c6f1a1710ed22cc1b7dd11f97519749cbde9868d76993891ac7b2ca8ea19e98b3c8db01eccc3c13d98f8b808f461508e238fef754e9cd90caacd379d4d40c7de8a7e9f29186988765972bb3a05ca33d582771c1c68e4ef4e92e02ad1bf1233d3c8974e1dfb8f9f96d1b6d88e33593f0cb21f407c0caa416dbeefbd509a4c5e3ee"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000000100)={0x0, 0xf, 0xe7, {0x5, 0xf, 0xe7, 0x6, [@generic={0x94, 0x10, 0xb, "d6eb75655a51fe2c85e96440429587ed4bc78ef5daf5e9db951102e1822c3fec606f06f1107b4563fdf6ffc4ab08f387a1a7774b864bcf8b8a0fb03865f6d7023ce1c9093e2cc0b1e95cb6a22d8bc48a70de769b6f14280d6cdd43ba87f3e0ef61597379f96d3a1a19d2b442396f438c6a524e1739300eaa05950e43f379ef308547bdc3671b13b598c30d9088f2e63eaf"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x4c, 0x3b, 0x80, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0xfb, 0x3, 0x1, 0xf00, 0x3ff, [0xff0030, 0xfffe4f, 0x3f07]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd4, "a06dc8c9a055b7022327a5482d683167"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x2, 0xf000, 0x8, [0x30, 0xf]}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf8, 0x10, 0x56, 0x20, "88ab9594", "f8e16642"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0xff, 0x9, 0x3f, 0xf5, 0x3f}}}, &(0x7f0000000840)={0x44, &(0x7f00000002c0)={0x40, 0xf, 0xcb, "076c742eeb9b964ad2f59ec33f1ed1bdd4381e8e374a9d8f82234286e24183ae5bb179bd478b14a21a0d764049f99dd224963fdc5bf135bc7ffca5f2feb30e7da861367d041463344d6b0eca53bc22d075b39e538f0b5f0d2237a97e8319fb97c7487de6be2c238f556285d97e5cde210b38f0998fc20c0dc8ade3d998657e35c7c0fcc53300a884a25bb96c76ac0ae4f14a5e08572c3de932a6168f752c876eb55ff0a9cd11c75dfdfe94c44c9b6f0d99496cc7d494736dbaa9965c1bc42ce202426f0bef8c112e622f1a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x100, 0x10}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x85c}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000540)={0x40, 0xb, 0x2, "ee84"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1f}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @random="4cf509c4cc62"}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "e7d7"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x2}}) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "ee423b"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x2, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x4, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xff}}}}}}}]}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) 10:13:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x9effffff, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:49 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x4c, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x13}]}}]}, 0x40}}, 0x0) [ 2696.859006][T21525] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2696.899899][T21525] usb 2-1: USB disconnect, device number 120 [ 2696.911587][T17589] device syz_tun entered promiscuous mode 10:13:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0xf, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2696.999131][T17589] device syz_tun left promiscuous mode 10:13:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x25, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2697.318790][T21525] usb 2-1: new high-speed USB device number 121 using dummy_hcd 10:13:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0xf0ffffff, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2697.492782][T17623] __nla_validate_parse: 2 callbacks suppressed [ 2697.492806][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:13:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x60}]}}]}, 0x40}}, 0x0) [ 2697.568784][T21525] usb 2-1: Using ep0 maxpacket: 8 [ 2697.587532][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:13:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x73, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0xfffff000, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2697.705366][T21525] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 2697.738732][T21525] usb 2-1: config 0 has no interface number 0 [ 2697.744878][T21525] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 10:13:50 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x60, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 2697.789014][T21525] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2697.818755][T21525] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 2697.827849][T21525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2697.874125][T21525] usb 2-1: config 0 descriptor?? [ 2697.925201][T17645] device syz_tun entered promiscuous mode [ 2697.937434][T17645] device syz_tun left promiscuous mode [ 2698.271489][T17645] device syz_tun entered promiscuous mode [ 2698.306543][T17645] device syz_tun left promiscuous mode [ 2698.788875][T17660] udc-core: couldn't find an available UDC or it's busy [ 2698.796001][T17660] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:13:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x40}}, 0x0) [ 2699.904566][T19515] usb 2-1: USB disconnect, device number 121 [ 2699.918710][ C0] xpad 2-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2699.926945][ C0] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 10:13:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x802, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0xf0}]}}]}, 0x40}}, 0x0) 10:13:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0xffffff7f, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:52 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x68, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0xffffff9e, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x808, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x3, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) [ 2700.137723][T17677] device syz_tun entered promiscuous mode [ 2700.164672][T17677] device syz_tun left promiscuous mode 10:13:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2700.203487][T17689] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 10:13:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xe915}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x40}}, 0x0) 10:13:53 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xffffffc3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0xfffffff0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x300}]}}]}, 0x40}}, 0x0) 10:13:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0xffffffff, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:54 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x6c, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:54 executing program 1: mq_open(&(0x7f0000000000)='eth0\x02', 0x43, 0x0, 0x0) 10:13:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x500}]}}]}, 0x40}}, 0x0) 10:13:54 executing program 1: mq_open(&(0x7f0000000000)='eth0\x02', 0x43, 0x0, 0x0) [ 2701.371352][T17720] device syz_tun entered promiscuous mode [ 2701.391581][T17720] device syz_tun left promiscuous mode 10:13:54 executing program 1: mq_open(&(0x7f0000000000)='eth0\x02', 0x43, 0x0, 0x0) 10:13:54 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) [ 2701.560902][T17736] FAULT_INJECTION: forcing a failure. [ 2701.560902][T17736] name failslab, interval 1, probability 0, space 0, times 0 [ 2701.574087][T17736] CPU: 0 PID: 17736 Comm: syz-executor.1 Not tainted 5.9.0-rc2-syzkaller #0 [ 2701.582783][T17736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2701.592859][T17736] Call Trace: [ 2701.596182][T17736] dump_stack+0x18f/0x20d [ 2701.600616][T17736] should_fail.cold+0x5/0x14 [ 2701.605216][T17736] should_failslab+0x5/0xf [ 2701.609642][T17736] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2701.615748][T17736] kmem_cache_alloc_trace+0x49/0x2c0 [ 2701.621048][T17736] alloc_pipe_info+0x10a/0x590 [ 2701.625823][T17736] splice_direct_to_actor+0x779/0x980 [ 2701.631227][T17736] ? generic_splice_sendpage+0x140/0x140 [ 2701.636873][T17736] ? apparmor_file_permission+0x26e/0x4e0 [ 2701.642602][T17736] ? do_splice_to+0x170/0x170 [ 2701.647286][T17736] ? security_file_permission+0x248/0x560 [ 2701.653046][T17736] do_splice_direct+0x1b3/0x280 [ 2701.657907][T17736] ? splice_direct_to_actor+0x980/0x980 [ 2701.663464][T17736] ? security_file_permission+0x248/0x560 [ 2701.669195][T17736] do_sendfile+0x55f/0xd40 [ 2701.673622][T17736] ? do_compat_pwritev64+0x1b0/0x1b0 [ 2701.678913][T17736] ? wait_for_completion+0x260/0x260 [ 2701.684212][T17736] ? vfs_write+0x1b0/0x730 [ 2701.688645][T17736] __ia32_compat_sys_sendfile+0x1e0/0x220 [ 2701.694401][T17736] ? __ia32_sys_sendfile64+0x210/0x210 [ 2701.699868][T17736] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 2701.705853][T17736] ? trace_hardirqs_on+0x5f/0x220 [ 2701.710883][T17736] ? lockdep_hardirqs_on+0x76/0xf0 [ 2701.716001][T17736] __do_fast_syscall_32+0x57/0x80 [ 2701.721034][T17736] do_fast_syscall_32+0x2f/0x70 [ 2701.725894][T17736] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2701.732746][T17736] RIP: 0023:0xf7feb549 [ 2701.736822][T17736] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2701.764592][T17736] RSP: 002b:00000000f55e50cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2701.773011][T17736] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 2701.780986][T17736] RDX: 0000000000000000 RSI: 0000000080004103 RDI: 0000000000000000 [ 2701.789304][T17736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2701.797286][T17736] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 10:13:54 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) [ 2701.805258][T17736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2701.966477][T17738] FAULT_INJECTION: forcing a failure. [ 2701.966477][T17738] name failslab, interval 1, probability 0, space 0, times 0 [ 2701.979364][T17738] CPU: 0 PID: 17738 Comm: syz-executor.1 Not tainted 5.9.0-rc2-syzkaller #0 [ 2701.988036][T17738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2701.998114][T17738] Call Trace: [ 2702.001425][T17738] dump_stack+0x18f/0x20d [ 2702.005767][T17738] should_fail.cold+0x5/0x14 [ 2702.010371][T17738] ? alloc_pipe_info+0x1e5/0x590 [ 2702.015314][T17738] should_failslab+0x5/0xf [ 2702.019735][T17738] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2702.025808][T17738] __kmalloc+0x6f/0x320 [ 2702.029978][T17738] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 2702.035544][T17738] alloc_pipe_info+0x1e5/0x590 [ 2702.040755][T17738] splice_direct_to_actor+0x779/0x980 [ 2702.046169][T17738] ? generic_splice_sendpage+0x140/0x140 [ 2702.051811][T17738] ? apparmor_file_permission+0x26e/0x4e0 [ 2702.057549][T17738] ? do_splice_to+0x170/0x170 [ 2702.062245][T17738] ? security_file_permission+0x248/0x560 [ 2702.067990][T17738] do_splice_direct+0x1b3/0x280 [ 2702.072888][T17738] ? splice_direct_to_actor+0x980/0x980 [ 2702.078443][T17738] ? security_file_permission+0x248/0x560 [ 2702.084174][T17738] do_sendfile+0x55f/0xd40 [ 2702.088626][T17738] ? do_compat_pwritev64+0x1b0/0x1b0 [ 2702.093924][T17738] ? wait_for_completion+0x260/0x260 [ 2702.099215][T17738] ? vfs_write+0x1b0/0x730 [ 2702.103640][T17738] __ia32_compat_sys_sendfile+0x1e0/0x220 [ 2702.109553][T17738] ? __ia32_sys_sendfile64+0x210/0x210 [ 2702.115019][T17738] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 2702.121031][T17738] ? trace_hardirqs_on+0x5f/0x220 [ 2702.126085][T17738] ? lockdep_hardirqs_on+0x76/0xf0 [ 2702.131199][T17738] __do_fast_syscall_32+0x57/0x80 [ 2702.136226][T17738] do_fast_syscall_32+0x2f/0x70 [ 2702.141083][T17738] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2702.147415][T17738] RIP: 0023:0xf7feb549 [ 2702.151483][T17738] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2702.171097][T17738] RSP: 002b:00000000f55e50cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2702.179511][T17738] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 2702.187485][T17738] RDX: 0000000000000000 RSI: 0000000080004103 RDI: 0000000000000000 [ 2702.195459][T17738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2702.203429][T17738] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2702.211395][T17738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:13:55 executing program 1 (fault-call:2 fault-nth:2): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) 10:13:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x2, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2702.389744][T17755] FAULT_INJECTION: forcing a failure. [ 2702.389744][T17755] name failslab, interval 1, probability 0, space 0, times 0 [ 2702.402775][T17755] CPU: 0 PID: 17755 Comm: syz-executor.1 Not tainted 5.9.0-rc2-syzkaller #0 [ 2702.411445][T17755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2702.421492][T17755] Call Trace: [ 2702.424787][T17755] dump_stack+0x18f/0x20d [ 2702.429130][T17755] should_fail.cold+0x5/0x14 [ 2702.433732][T17755] should_failslab+0x5/0xf [ 2702.438153][T17755] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2702.444227][T17755] kmem_cache_alloc_node_trace+0x59/0x400 [ 2702.449953][T17755] ? __lock_acquire+0xbb5/0x5640 [ 2702.454898][T17755] __kmalloc_node+0x38/0x60 [ 2702.459405][T17755] kvmalloc_node+0x61/0xf0 [ 2702.463828][T17755] iov_iter_get_pages_alloc+0x82a/0x1440 [ 2702.469469][T17755] ? push_pipe+0x680/0x680 [ 2702.473892][T17755] ? lock_acquire+0x1f1/0xad0 [ 2702.478577][T17755] ? aa_file_perm+0x119/0x1100 [ 2702.483339][T17755] ? iov_iter_pipe+0xf1/0x2a0 [ 2702.488044][T17755] default_file_splice_read.constprop.0+0x1c9/0x9e0 [ 2702.494635][T17755] ? lock_downgrade+0x830/0x830 [ 2702.499484][T17755] ? __kmalloc+0x1a8/0x320 [ 2702.503904][T17755] ? do_splice_direct+0x1b3/0x280 [ 2702.508940][T17755] ? __ia32_compat_sys_sendfile+0x1e0/0x220 [ 2702.514836][T17755] ? iter_file_splice_write+0xbe0/0xbe0 [ 2702.520393][T17755] ? aa_file_perm+0x5e2/0x1100 [ 2702.525165][T17755] ? aa_path_link+0x2f0/0x2f0 [ 2702.529849][T17755] ? find_held_lock+0x2d/0x110 [ 2702.534620][T17755] ? fs_reclaim_release+0x90/0xd0 [ 2702.539646][T17755] ? __fsnotify_parent+0x48c/0x930 [ 2702.544758][T17755] ? fsnotify+0xf80/0xf80 [ 2702.549091][T17755] ? lock_downgrade+0x830/0x830 [ 2702.553949][T17755] ? lock_is_held_type+0xbb/0xf0 [ 2702.558892][T17755] ? lock_is_held_type+0xbb/0xf0 [ 2702.563837][T17755] ? security_file_permission+0x248/0x560 [ 2702.569576][T17755] do_splice_to+0x137/0x170 [ 2702.574092][T17755] splice_direct_to_actor+0x307/0x980 [ 2702.579475][T17755] ? generic_splice_sendpage+0x140/0x140 [ 2702.585110][T17755] ? do_splice_to+0x170/0x170 [ 2702.589785][T17755] ? security_file_permission+0x248/0x560 [ 2702.595512][T17755] do_splice_direct+0x1b3/0x280 [ 2702.600366][T17755] ? splice_direct_to_actor+0x980/0x980 [ 2702.605922][T17755] ? security_file_permission+0x248/0x560 [ 2702.611650][T17755] do_sendfile+0x55f/0xd40 [ 2702.616075][T17755] ? do_compat_pwritev64+0x1b0/0x1b0 [ 2702.621365][T17755] ? wait_for_completion+0x260/0x260 [ 2702.626650][T17755] ? vfs_write+0x1b0/0x730 [ 2702.631073][T17755] __ia32_compat_sys_sendfile+0x1e0/0x220 [ 2702.636815][T17755] ? __ia32_sys_sendfile64+0x210/0x210 [ 2702.642284][T17755] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 2702.648265][T17755] ? trace_hardirqs_on+0x5f/0x220 [ 2702.653306][T17755] ? lockdep_hardirqs_on+0x76/0xf0 [ 2702.658423][T17755] __do_fast_syscall_32+0x57/0x80 [ 2702.663445][T17755] do_fast_syscall_32+0x2f/0x70 [ 2702.668303][T17755] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2702.674626][T17755] RIP: 0023:0xf7feb549 [ 2702.678695][T17755] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2702.698306][T17755] RSP: 002b:00000000f55e50cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2702.706722][T17755] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 2702.714690][T17755] RDX: 0000000000000000 RSI: 0000000080004103 RDI: 0000000000000000 [ 2702.722655][T17755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2702.730638][T17755] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2702.738606][T17755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2702.769629][T17739] device ip6gretap0 entered promiscuous mode [ 2702.784914][T17739] device ip6gretap0 left promiscuous mode 10:13:56 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x74, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x600}]}}]}, 0x40}}, 0x0) 10:13:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:56 executing program 1 (fault-call:2 fault-nth:3): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) [ 2703.222299][T17774] FAULT_INJECTION: forcing a failure. [ 2703.222299][T17774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2703.236180][T17774] CPU: 0 PID: 17774 Comm: syz-executor.1 Not tainted 5.9.0-rc2-syzkaller #0 [ 2703.244860][T17774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2703.254918][T17774] Call Trace: [ 2703.258215][T17774] dump_stack+0x18f/0x20d [ 2703.262556][T17774] should_fail.cold+0x5/0x14 [ 2703.267154][T17774] __alloc_pages_nodemask+0x183/0x790 [ 2703.272554][T17774] ? lock_downgrade+0x830/0x830 [ 2703.277411][T17774] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 2703.284205][T17774] ? lock_is_held_type+0xbb/0xf0 [ 2703.289157][T17774] ? lock_is_held_type+0xbb/0xf0 [ 2703.294108][T17774] alloc_pages_current+0x187/0x280 [ 2703.299255][T17774] push_pipe+0x2a4/0x680 [ 2703.303517][T17774] iov_iter_get_pages_alloc+0x8b5/0x1440 [ 2703.309161][T17774] ? push_pipe+0x680/0x680 [ 2703.313585][T17774] ? lock_acquire+0x1f1/0xad0 [ 2703.318291][T17774] ? aa_file_perm+0x119/0x1100 [ 2703.323056][T17774] ? iov_iter_pipe+0xf1/0x2a0 [ 2703.327775][T17774] default_file_splice_read.constprop.0+0x1c9/0x9e0 [ 2703.334375][T17774] ? lock_downgrade+0x830/0x830 [ 2703.339229][T17774] ? __kmalloc+0x1a8/0x320 [ 2703.343660][T17774] ? do_splice_direct+0x1b3/0x280 [ 2703.348696][T17774] ? __ia32_compat_sys_sendfile+0x1e0/0x220 [ 2703.354612][T17774] ? iter_file_splice_write+0xbe0/0xbe0 [ 2703.360170][T17774] ? aa_file_perm+0x5e2/0x1100 [ 2703.364966][T17774] ? aa_path_link+0x2f0/0x2f0 [ 2703.369650][T17774] ? find_held_lock+0x2d/0x110 [ 2703.374420][T17774] ? fs_reclaim_release+0x90/0xd0 [ 2703.379444][T17774] ? __fsnotify_parent+0x48c/0x930 [ 2703.384558][T17774] ? fsnotify+0xf80/0xf80 [ 2703.388912][T17774] ? lock_downgrade+0x830/0x830 [ 2703.393764][T17774] ? lock_is_held_type+0xbb/0xf0 [ 2703.398701][T17774] ? lock_is_held_type+0xbb/0xf0 [ 2703.403648][T17774] ? security_file_permission+0x248/0x560 [ 2703.409376][T17774] do_splice_to+0x137/0x170 [ 2703.413887][T17774] splice_direct_to_actor+0x307/0x980 [ 2703.419271][T17774] ? generic_splice_sendpage+0x140/0x140 [ 2703.424905][T17774] ? do_splice_to+0x170/0x170 [ 2703.429583][T17774] ? security_file_permission+0x248/0x560 [ 2703.435308][T17774] do_splice_direct+0x1b3/0x280 [ 2703.440161][T17774] ? splice_direct_to_actor+0x980/0x980 [ 2703.445709][T17774] ? security_file_permission+0x248/0x560 [ 2703.451437][T17774] do_sendfile+0x55f/0xd40 [ 2703.455895][T17774] ? do_compat_pwritev64+0x1b0/0x1b0 [ 2703.461188][T17774] ? wait_for_completion+0x260/0x260 [ 2703.466478][T17774] ? vfs_write+0x1b0/0x730 [ 2703.470918][T17774] __ia32_compat_sys_sendfile+0x1e0/0x220 [ 2703.476670][T17774] ? __ia32_sys_sendfile64+0x210/0x210 [ 2703.482138][T17774] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 2703.488127][T17774] ? trace_hardirqs_on+0x5f/0x220 [ 2703.493185][T17774] ? lockdep_hardirqs_on+0x76/0xf0 [ 2703.498315][T17774] __do_fast_syscall_32+0x57/0x80 [ 2703.503350][T17774] do_fast_syscall_32+0x2f/0x70 [ 2703.508216][T17774] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2703.514544][T17774] RIP: 0023:0xf7feb549 [ 2703.518614][T17774] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2703.538226][T17774] RSP: 002b:00000000f55e50cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2703.546644][T17774] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 2703.554616][T17774] RDX: 0000000000000000 RSI: 0000000080004103 RDI: 0000000000000000 [ 2703.562588][T17774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2703.570559][T17774] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2703.578537][T17774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:13:56 executing program 1 (fault-call:2 fault-nth:4): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) [ 2703.621142][T17771] device syz_tun entered promiscuous mode [ 2703.653619][T17771] device syz_tun left promiscuous mode [ 2703.760890][T17781] FAULT_INJECTION: forcing a failure. [ 2703.760890][T17781] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2703.792147][T17781] CPU: 1 PID: 17781 Comm: syz-executor.1 Not tainted 5.9.0-rc2-syzkaller #0 [ 2703.800840][T17781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2703.810896][T17781] Call Trace: [ 2703.814194][T17781] dump_stack+0x18f/0x20d [ 2703.818535][T17781] should_fail.cold+0x5/0x14 [ 2703.823130][T17781] __alloc_pages_nodemask+0x183/0x790 [ 2703.828512][T17781] ? lock_downgrade+0x830/0x830 [ 2703.833369][T17781] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 2703.840146][T17781] ? lock_is_held_type+0xbb/0xf0 [ 2703.845097][T17781] ? lock_is_held_type+0xbb/0xf0 [ 2703.850043][T17781] alloc_pages_current+0x187/0x280 [ 2703.855162][T17781] push_pipe+0x2a4/0x680 [ 2703.859419][T17781] iov_iter_get_pages_alloc+0x8b5/0x1440 [ 2703.865078][T17781] ? push_pipe+0x680/0x680 [ 2703.869497][T17781] ? lock_acquire+0x1f1/0xad0 [ 2703.874173][T17781] ? aa_file_perm+0x119/0x1100 [ 2703.878935][T17781] ? iov_iter_pipe+0xf1/0x2a0 [ 2703.883638][T17781] default_file_splice_read.constprop.0+0x1c9/0x9e0 [ 2703.890230][T17781] ? lock_downgrade+0x830/0x830 [ 2703.895084][T17781] ? __kmalloc+0x1a8/0x320 [ 2703.899506][T17781] ? do_splice_direct+0x1b3/0x280 [ 2703.904540][T17781] ? __ia32_compat_sys_sendfile+0x1e0/0x220 [ 2703.910863][T17781] ? iter_file_splice_write+0xbe0/0xbe0 [ 2703.916416][T17781] ? aa_file_perm+0x5e2/0x1100 [ 2703.921189][T17781] ? aa_path_link+0x2f0/0x2f0 [ 2703.925877][T17781] ? find_held_lock+0x2d/0x110 [ 2703.930651][T17781] ? fs_reclaim_release+0x90/0xd0 [ 2703.935710][T17781] ? __fsnotify_parent+0x48c/0x930 [ 2703.940828][T17781] ? fsnotify+0xf80/0xf80 [ 2703.945170][T17781] ? lock_downgrade+0x830/0x830 [ 2703.950035][T17781] ? lock_is_held_type+0xbb/0xf0 [ 2703.954978][T17781] ? lock_is_held_type+0xbb/0xf0 [ 2703.959924][T17781] ? security_file_permission+0x248/0x560 [ 2703.965653][T17781] do_splice_to+0x137/0x170 [ 2703.970163][T17781] splice_direct_to_actor+0x307/0x980 [ 2703.975544][T17781] ? generic_splice_sendpage+0x140/0x140 [ 2703.981203][T17781] ? do_splice_to+0x170/0x170 [ 2703.985881][T17781] ? security_file_permission+0x248/0x560 [ 2703.991611][T17781] do_splice_direct+0x1b3/0x280 [ 2703.996464][T17781] ? splice_direct_to_actor+0x980/0x980 [ 2704.002016][T17781] ? security_file_permission+0x248/0x560 [ 2704.007743][T17781] do_sendfile+0x55f/0xd40 [ 2704.012172][T17781] ? do_compat_pwritev64+0x1b0/0x1b0 [ 2704.017461][T17781] ? wait_for_completion+0x260/0x260 [ 2704.022751][T17781] ? vfs_write+0x1b0/0x730 [ 2704.027177][T17781] __ia32_compat_sys_sendfile+0x1e0/0x220 [ 2704.032903][T17781] ? __ia32_sys_sendfile64+0x210/0x210 [ 2704.038369][T17781] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 2704.044353][T17781] ? trace_hardirqs_on+0x5f/0x220 [ 2704.049385][T17781] ? lockdep_hardirqs_on+0x76/0xf0 [ 2704.054592][T17781] __do_fast_syscall_32+0x57/0x80 [ 2704.059621][T17781] do_fast_syscall_32+0x2f/0x70 [ 2704.064483][T17781] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2704.070831][T17781] RIP: 0023:0xf7feb549 [ 2704.074900][T17781] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 2704.094519][T17781] RSP: 002b:00000000f55e50cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2704.102941][T17781] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 2704.110912][T17781] RDX: 0000000000000000 RSI: 0000000080004103 RDI: 0000000000000000 [ 2704.118884][T17781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2704.126852][T17781] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2704.134819][T17781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:13:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x2, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) [ 2704.254778][T17782] device syz_tun entered promiscuous mode 10:13:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x612}]}}]}, 0x40}}, 0x0) [ 2704.302016][T17782] device syz_tun left promiscuous mode 10:13:57 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) 10:13:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0xf0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:57 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x80004110) 10:13:57 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x7a, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x900}]}}]}, 0x40}}, 0x0) 10:13:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0xf, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x2194, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x60, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2705.176904][T17814] device syz_tun entered promiscuous mode [ 2705.188004][T17814] device syz_tun left promiscuous mode 10:13:58 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x8000413c) 10:13:58 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x80004143) 10:13:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0xa00}]}}]}, 0x40}}, 0x0) 10:13:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x3f00, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0xa2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 2705.699389][T17814] device syz_tun entered promiscuous mode [ 2705.724211][T17814] device syz_tun left promiscuous mode 10:13:58 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x80004147) 10:13:59 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000440)) dup(r0) socket$inet6(0xa, 0x3, 0x2c) pipe(&(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x86, {0x0, 0x0, 0x0, 0x0, 0x552e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 10:13:59 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x8000414d) 10:13:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x9421, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 10:13:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0xa3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 10:13:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0xb00}]}}]}, 0x40}}, 0x0) [ 2706.339753][T17848] device syz_tun entered promiscuous mode [ 2706.384188][T17848] device syz_tun left promiscuous mode [ 2706.568654][ C1] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 2706.576493][ C1] #PF: supervisor write access in kernel mode [ 2706.582541][ C1] #PF: error_code(0x0002) - not-present page [ 2706.588500][ C1] PGD 9eb30067 P4D 9eb30067 PUD a6bdd067 PMD 0 [ 2706.594741][ C1] Oops: 0002 [#1] PREEMPT SMP KASAN [ 2706.599925][ C1] CPU: 1 PID: 6825 Comm: syz-fuzzer Not tainted 5.9.0-rc2-syzkaller #0 [ 2706.608140][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2706.618193][ C1] RIP: 0010:pvclock_gtod_notify+0x104/0x570 [ 2706.624077][ C1] Code: 38 d0 7c 08 84 d2 0f 85 ab 03 00 00 8b 45 4c 48 8d 7b 10 48 89 fa 48 c1 ea 03 89 05 56 1a df 0a 48 b8 00 00 00 00 00 00 00 00 <00> 00 00 00 0f 85 23 04 00 00 48 8b 43 10 48 8d 7b 08 48 89 00 00 [ 2706.643688][ C1] RSP: 0000:ffffc90001627b28 EFLAGS: 00010802 [ 2706.649744][ C1] RAX: 0000000000000000 RBX: ffffffff8c973980 RCX: ffffffff815a14fb [ 2706.657711][ C1] RDX: 1ffffffff192e732 RSI: 0000000000000001 RDI: ffffffff8c973990 [ 2706.665667][ C1] RBP: ffffffff89b35820 R08: 0000000000000000 R09: ffffffff8c5f3a1f [ 2706.673625][ C1] R10: fffffbfff18be743 R11: 0000000000000000 R12: 0000000000000000 [ 2706.681581][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff89ae98e0 [ 2706.689542][ C1] FS: 000000c0000c1910(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 2706.698468][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2706.705036][ C1] CR2: 0000000000000000 CR3: 000000009ed5f000 CR4: 00000000001526e0 [ 2706.713013][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2706.720970][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2706.728924][ C1] Call Trace: [ 2706.732211][ C1] notifier_call_chain+0xb5/0x200 [ 2706.737225][ C1] timekeeping_update+0x28a/0x4a0 [ 2706.742237][ C1] timekeeping_advance+0x6ad/0xa40 [ 2706.747337][ C1] ? tick_do_update_jiffies64.part.0+0x1ec/0x330 [ 2706.753654][ C1] ? timekeeping_inject_offset+0x570/0x570 [ 2706.759448][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 2706.764374][ C1] ? trace_hardirqs_off+0x27/0x210 [ 2706.769476][ C1] tick_do_update_jiffies64.part.0+0x1ec/0x330 [ 2706.775620][ C1] tick_sched_timer+0x236/0x2a0 [ 2706.780462][ C1] __hrtimer_run_queues+0x1d5/0xfc0 [ 2706.785646][ C1] ? can_stop_idle_tick+0x290/0x290 [ 2706.790839][ C1] ? lockdep_hardirqs_off+0x71/0xc0 [ 2706.796032][ C1] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 2706.802019][ C1] ? ktime_get_update_offsets_now+0x1c4/0x250 [ 2706.808075][ C1] hrtimer_interrupt+0x32a/0x930 [ 2706.813026][ C1] __sysvec_apic_timer_interrupt+0x142/0x5e0 [ 2706.819001][ C1] sysvec_apic_timer_interrupt+0x4c/0xf0 [ 2706.824637][ C1] ? asm_sysvec_apic_timer_interrupt+0xa/0x20 [ 2706.830713][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20