[ OK ] Started Serial Getty on ttyS0. [ OK ] Started System Logging Service. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty4. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.246' (ECDSA) to the list of known hosts. 2020/12/29 23:54:17 fuzzer started 2020/12/29 23:54:19 dialing manager at 10.128.0.26:42331 2020/12/29 23:54:19 syscalls: 3441 2020/12/29 23:54:19 code coverage: enabled 2020/12/29 23:54:19 comparison tracing: enabled 2020/12/29 23:54:19 extra coverage: enabled 2020/12/29 23:54:19 setuid sandbox: enabled 2020/12/29 23:54:19 namespace sandbox: enabled 2020/12/29 23:54:19 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/29 23:54:19 fault injection: enabled 2020/12/29 23:54:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/29 23:54:19 net packet injection: enabled 2020/12/29 23:54:19 net device setup: enabled 2020/12/29 23:54:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/29 23:54:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/29 23:54:19 USB emulation: enabled 2020/12/29 23:54:19 hci packet injection: enabled 2020/12/29 23:54:19 wifi device emulation: enabled 23:57:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) sendmmsg$inet(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000000)="87153b2b458fe79eb1900544e4170ea532eb072f21caf1da3b22727f6d883527be067a39", 0x24}], 0x1}}], 0x1, 0x0) syzkaller login: [ 359.470909][ T8252] IPVS: ftp: loaded support on port[0] = 21 [ 360.021169][ T8252] chnl_net:caif_netlink_parms(): no params data found [ 360.173946][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.181477][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.191411][ T8252] device bridge_slave_0 entered promiscuous mode [ 360.203767][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.211254][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.220595][ T8252] device bridge_slave_1 entered promiscuous mode [ 360.266316][ T8252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.282342][ T8252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.328413][ T8252] team0: Port device team_slave_0 added [ 360.341187][ T8252] team0: Port device team_slave_1 added [ 360.386032][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.393157][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.419744][ T8252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.435276][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.442575][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.469116][ T8252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.533992][ T8252] device hsr_slave_0 entered promiscuous mode [ 360.543875][ T8252] device hsr_slave_1 entered promiscuous mode [ 360.838132][ T8252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 360.854741][ T8252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 360.885340][ T8252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 360.932035][ T8252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 361.218983][ T8252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.249315][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 361.259047][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 361.278513][ T8252] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.298089][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 361.307884][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 361.318260][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.325559][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.372465][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 361.381576][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 361.391618][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 361.401017][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.408423][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.417437][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 361.428282][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 361.456266][ T2969] Bluetooth: hci0: command 0x0409 tx timeout [ 361.462861][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 361.473225][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.484081][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 361.509355][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 361.519593][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.529771][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 361.539252][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.569163][ T8252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.582243][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 361.594072][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 361.603862][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.653287][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 361.662889][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 361.692583][ T8252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.746478][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 361.756534][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 361.806977][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 361.816594][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 361.837201][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 361.846450][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 361.859011][ T8252] device veth0_vlan entered promiscuous mode [ 361.891877][ T8252] device veth1_vlan entered promiscuous mode [ 361.919882][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 361.929351][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 361.988452][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 361.999143][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 362.019632][ T8252] device veth0_macvtap entered promiscuous mode [ 362.042352][ T8252] device veth1_macvtap entered promiscuous mode [ 362.093687][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.101839][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 362.111331][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 362.120694][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 362.130790][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 362.155781][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.175554][ T8252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.184546][ T8252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.193541][ T8252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.202604][ T8252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.217654][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 362.227961][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 362.564845][ T8342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.573801][ T8342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.596540][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.716223][ T443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.724282][ T443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.732827][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:57:51 executing program 0: io_setup(0x9891, &(0x7f0000000000)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0)={0x0, 0x989680}) 23:57:52 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) 23:57:52 executing program 0: io_setup(0x3, &(0x7f0000000240)=0x0) io_submit(r0, 0x0, 0x0) getresgid(&(0x7f0000001f00), &(0x7f0000001f40), &(0x7f0000001f80)) [ 363.527193][ T8485] Bluetooth: hci0: command 0x041b tx timeout 23:57:52 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000400)='\x00') 23:57:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 23:57:53 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semctl$SETALL(r0, 0x0, 0x10, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/47) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}, 0x33}], [], 0x6b}}) [ 364.585931][ C1] hrtimer: interrupt took 122308 ns [ 364.806523][ T8517] 9p: Unknown access argument 000000000000000000003k 23:57:53 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semctl$SETALL(r0, 0x0, 0x10, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/47) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}, 0x33}], [], 0x6b}}) [ 365.175636][ T8520] 9p: Unknown access argument 000000000000000000003k 23:57:54 executing program 0: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000100)=[{&(0x7f0000010000)="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", 0x1e6}, {&(0x7f0000000080)="06db6a55cf289d1b1d783e1a53293bd3c1e90f703b27932cd481b02e9b", 0x1d, 0xf6}, {0x0, 0x0, 0x80000000}], 0x0, &(0x7f0000000040)=ANY=[]) syz_mount_image$omfs(&(0x7f0000000040)='omfs\x00', &(0x7f0000000140)='.\x00', 0x7, 0x6, &(0x7f0000000540)=[{&(0x7f0000000180)="5f615ae76da1653012496ddf4f5458a666dc1781e9a45b5227428452ed258b2db08d916bc399dbacbacffb37981c203704376f95dcc6fedba0aa3bbdcdab63d8e2af", 0x42, 0x5}, {&(0x7f0000000200)="a109d98771e70d07081bf6add6089ba86b4ea1e01a90995b8405e20767498cb85ed47fe201cdb3df68e900cd93702eaf97196dc94c", 0x35, 0x80}, {&(0x7f0000000240)="2c0a723fa4befd2b0cc91979a893106247b3", 0x12, 0x7}, {&(0x7f0000000280)="b6effd89e0154dbbb5d66295344cc111c12099bdc7cc02be8df4aef41225dd3f531ade744187c9a002f09d607ab695ce5cb3f15b246a30d22e28277859433df07c78571f6020fb51aa0bb8b984ed9693446fb0b04ca8dc429ab83aeb9fc2c9c8cc0835f853aa9f270c0cf63e31324700e934c3c293b36b9b7c3a13a9f17f69ec83f322d48468219daefef65c56baf37411719413565ace32f2c2b9181f38402d17f707ead0d5490c575affb84cbbdd51800a0a3a28fd4a2c986e97e6b106c8ef", 0xc0, 0x2}, {&(0x7f0000000340)="8cfe47729d1ab05f687d8fc847d6b8e36fb6cdc7ffae7ded5c75bd21e37214eb4979ce024c118219b01934779c6dd7a88a21a19ffbc21d59f134d3d437c49c474c354cddfde257a7ea8457d755d1a3368f09b24634c3adff1b9c27bfe4c3786b4bbcbeadfdb9f0e7572f71d2dabd430d13c8f6a9df7c078ae74695002cc9d0eeeb7d285c04383ab11e203b935411e137b770610d5067841116a203bb67faa3bd9671284f781dbf9855f5f8cc2992235402967801929444cf0f98cc41309caa96adbaf705b0f7c4b4cb216f84d7c92a7d06838d3b71c781", 0xd7, 0x8}, {&(0x7f0000000440)="778c887f67e4bcf1dd72aa6c02eb3befd9c6a0c949a9a5f0befd3db3dbf278db8e2e5d75064ee63a09ad2ecb50147db3ef04fece82995fc3a5dd10f60ffa8ce0b2659d3eb105601ccfb5f294e553fdaa71ef8bf4b48bcff8745afc60e458a3c56cd8dd2c2a7b276caa2b60f94fc9810dcd37f0b883edbd1872f1036f8a39dfbd1a30eeeede3129369061df8485288c7834a61be3d62b7649d020f7f9919039a3d06f1786079b67dda7135400bf3e943c2b17a14dd9450136f0fa670e1dc574695e9dec8ed2f7419d2996d3373cc08233fc624a8b201d", 0xd6, 0x7}], 0x40800, &(0x7f00000005c0)={[{}, {'[{*/'}, {'$,%'}, {'squashfs\x00'}, {'squashfs\x00'}, {']!!{(*'}, {}, {'squashfs\x00'}, {}, {'squashfs\x00'}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@hash='hash'}, {@subj_role={'subj_role'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) [ 365.548763][ T8524] SQUASHFS error: zlib decompression failed, data probably corrupt [ 365.557093][ T8524] SQUASHFS error: Failed to read block 0x83: -5 [ 365.563538][ T8524] SQUASHFS error: Unable to read metadata cache entry [81] [ 365.571095][ T8524] SQUASHFS error: Unable to read inode 0x11a [ 365.609265][ T8485] Bluetooth: hci0: command 0x040f tx timeout [ 365.718266][ T8524] squashfs: Unknown parameter 'omfs' 23:57:54 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000006a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) ioctl$SG_IO(r2, 0x2285, &(0x7f0000002300)={0x53, 0xfffffffffffffffd, 0x11, 0x0, @buffer={0x0, 0x58, 0x0}, &(0x7f00000020c0)="7155640d559dcb778937fb86e0f8ded777", 0x0, 0x0, 0x0, 0x0, 0x0}) 23:57:55 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000006a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) ioctl$SG_IO(r2, 0x2285, &(0x7f0000002300)={0x53, 0xfffffffffffffffd, 0x11, 0x0, @buffer={0x0, 0x58, 0x0}, &(0x7f00000020c0)="7155640d559dcb778937fb86e0f8ded777", 0x0, 0x0, 0x0, 0x0, 0x0}) 23:57:55 executing program 0: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x400, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) dup(0xffffffffffffffff) sendmmsg$alg(r0, &(0x7f0000000140), 0x0, 0x8000) r1 = socket(0x2, 0x3, 0x100000001) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r3, 0x40, 0x0, 0x7fffffff, 0x1}, &(0x7f0000000400)=0x18) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r4, 0x0, [], r2}, 0x40) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r5, &(0x7f00000001c0), 0x0}, 0x20) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000000)) 23:57:55 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40008011) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0xc}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 23:57:56 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40008011) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0xc}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 23:57:56 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40008011) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0xc}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 367.689779][ T3126] Bluetooth: hci0: command 0x0419 tx timeout 23:57:56 executing program 0: mlockall(0x2) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmdt(r1) shmat(0x0, &(0x7f0000004000/0x4000)=nil, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) r2 = openat$dlm_control(0xffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000004c0)={[0xf000, 0x5000], 0xe0, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007188fd7291365e07000000000000000099100000020009fa8500008e4bb34c9dabb5c1350720350b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz0\x00', {0x894a, 0x3504, 0xff, 0x63}, 0x2c, [0x81, 0x3c, 0x5, 0x3, 0x5, 0xfffffff7, 0x8, 0x8, 0x7, 0x3ff, 0x7, 0x85, 0x3af9, 0x101, 0x80000000, 0x1ff, 0x200, 0x81, 0xffff, 0x8e6, 0xca01, 0x4, 0x44d, 0x401, 0x4, 0x80000001, 0x1, 0x9a, 0x7, 0x2, 0x80000000, 0x4, 0x5, 0x2, 0x9, 0x2, 0x8, 0x1f, 0xfff, 0xfff, 0xfff, 0x7, 0x26, 0x6, 0x9f, 0x10000, 0x0, 0xd92d, 0x7, 0x100, 0x3ff, 0xbe, 0x8, 0x7, 0x3, 0x2, 0x6, 0x0, 0x3, 0x2, 0x8, 0x1, 0x91, 0xffffff7d], [0x1, 0x590, 0x2, 0x3f, 0xdf2e, 0x5, 0x20, 0x6, 0x221, 0x8001, 0x2, 0x7, 0x6, 0x9, 0x4b7, 0x6, 0x40, 0xfff, 0x9, 0x1, 0x0, 0x81, 0x8, 0x5, 0xffffffff, 0x0, 0x1, 0x3, 0x8, 0x9, 0x6, 0x3, 0x7ff, 0x81, 0x7, 0x3, 0x5, 0x1, 0x0, 0x800, 0x10001, 0x2, 0x6, 0x3, 0x4, 0x2, 0x2, 0x1, 0x6, 0xfff, 0x0, 0x5, 0xffffffff, 0x13fd, 0x60feb3d3, 0x3, 0xed6, 0x8001, 0xffff, 0xfd, 0xc71b, 0xaa, 0xffffffff, 0x3], [0x80000001, 0x2, 0x800, 0x400, 0x4a, 0xa3d3, 0x4, 0x10001, 0x0, 0x9b, 0x7, 0x14c, 0x8, 0x80, 0x18, 0x6000000, 0x4, 0x8, 0x800, 0xffffffff, 0x8, 0x1, 0x5, 0x80, 0x0, 0x7ff, 0x1, 0xfffffffe, 0x737, 0x100, 0x5, 0x2, 0x741, 0x1, 0x0, 0x400, 0x9, 0x800, 0x4, 0x3, 0x8, 0x3, 0x6, 0x8, 0x0, 0x10001, 0xfffffff7, 0xe2e, 0x91, 0x97, 0x9, 0x3f, 0x3ff, 0x9, 0x65d0aabd, 0x9, 0xff, 0x6, 0x1ff, 0x1, 0x81, 0xa396, 0x1, 0x9], [0x6, 0xffff, 0x8, 0x2, 0x3c4, 0x6, 0x20, 0x7ff, 0x6, 0x4, 0x401, 0x8, 0x400, 0x81, 0x4, 0x0, 0x7, 0x1, 0x3, 0x7, 0x9, 0x1f, 0x3, 0x7fffffff, 0xe646, 0x65de, 0x5, 0x1, 0x200, 0x200, 0x5, 0xf3, 0xfff, 0x6, 0x7, 0x7fff, 0x5, 0x5, 0x6, 0x3, 0x9, 0x7f, 0x2, 0x6, 0x8, 0x9ce, 0xffffffff, 0x8, 0x7, 0xffff, 0x3, 0x800, 0x40, 0x7, 0x7, 0x9, 0xcda5, 0x8000, 0x4, 0x8001, 0x40, 0x78, 0x10000, 0x36ae0d94]}, 0x45c) 23:57:57 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000000)) [ 368.816262][ T8472] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 369.056158][ T8472] usb 1-1: Using ep0 maxpacket: 32 [ 369.176829][ T8472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 23:57:58 executing program 1: r0 = openat$cachefiles(0xffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0xe, 0x0, "d8bca632f916123fa7f84867be982342b6331152bf6dd229e0280a2bc49c3414b7325a4a935b1449c50aca85ed1a16557ebead5e1e058c9baa8302f03a4c5790a2f11ab748a9981166a2dfb5810a4f56"}, 0xd8) r1 = dup(r0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) futimesat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x0, 0xea60}, {0x77359400}}) timerfd_create(0x8, 0x80000) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0x15, 0x7, {0x116a, @struct={0x10000, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0xaf1000, 0x5, 0xa2, @struct={0xab2, 0x3f}, 0x4, 0x81, [0x3, 0x199c, 0x62, 0x7, 0x100000001, 0x3]}, {0x4, @struct={0x29, 0xfffffff8}, 0x0, 0x81, 0x900000000000, 0x9, 0xfffffffffffff000, 0x2, 0x40, @struct={0x0, 0x1ff}, 0x1, 0x0, [0x5ef, 0x9, 0x1a, 0x400, 0x100000000, 0x6]}, {0x2, @struct={0x4, 0x80000000}, 0x0, 0x0, 0xa871, 0x7f, 0x8, 0x8000, 0x0, @usage=0x8, 0x5f2, 0x9, [0x1, 0x4, 0x4, 0xfffffffffffffff9, 0x9, 0x8]}, {0xef, 0x4, 0x200}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000600)={r3, 0xf80000, 0x200, 0x1}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000a00)={'icmp\x00'}, &(0x7f0000000a40)=0x1e) r4 = syz_open_dev$vcsu(&(0x7f0000000a80)='/dev/vcsu#\x00', 0x1, 0x4c440) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000b80)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000c80)=0xe4) bind$can_j1939(r4, &(0x7f0000000cc0)={0x1d, r5, 0x0, {0x0, 0xff, 0x4}}, 0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000d00)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x800, 0x8780, 0x7, 0x9, 0x28, 0xffffff00, 0x46}, &(0x7f0000000dc0)=0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000e00)={r6, 0xfc, "2a53feb7220bf9908590475024dbc55ab76100770f0b933301df582b5ef1f9dbb49cb2dfec5345aaf6f77e8c123c04a40ee199da85f9dfbc184722a82a72110e46468513fbfefec0ff2045450e06dee0885e78746f8a6d9102ce21c1c71cbf0812f95fefbc3eea555696cf4ab1bfb2633b74b75b7fb083dd19d3aa4af5cddf07c981ef0439f0d3bf1814baca2dab33d5484ff78b346d3084c15102280d67d3780642514a1da407a2d2631a75e8f4359ce56c05fdae9e81343cb914d251f8a958ca3bf4ef7ee4ae5e2b305c06ef80f81bfb3c2bf7fd2432ae7be47a2e122be1d417127bad3418172dc84c7d725831e3d4788da9816712c8f913a89962"}, &(0x7f0000000f40)=0x104) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001140)={0x14, &(0x7f0000000f80)={0x0, 0x8, 0xe9, {0xe9, 0x5, "76f2de1f5b1e3f2595442f9f06250b6b9f089b2780f617b630486ba6b02886b361bd37163607a938fd6a0eacd8222ce565edfb499743d3484206a067e15d7c183483beef6ecd70ee27112757ec51c68794f9d414ceeee83d2657d8da10d121f8dc299e9e018ec989219d191b66f6354e4747b884b89ea649c8be8a9aabca12e549bd798029354be309fcd0a76625bf55adecc009fe6c9ae65c66eb76f4160b34cd4a0bdb756036be40d2752cd9f2435e101a09f1a3d25d1412a76c10a6d9a9d43d742c373c003c114fa77c4400005c4bce08109c4c2023ff7ec8eed646a93cebf8248eacfdeade"}}, &(0x7f0000001080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}, &(0x7f00000010c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xb, "9f"}]}}, &(0x7f0000001100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xbee2, 0x7, 0x1, {0x22, 0x9e7}}}}, &(0x7f00000013c0)={0x18, &(0x7f0000001180)={0x20, 0xb, 0xba, "21aa03c8b04bb919d9ac26ca4da7cdd54ae0730f949fae116ef53810f131c48ff8d8e0938468ab2241d63245c196d10064119af867edc368595e8349262e7165371dba8aed301fb2f3ebcdef828b9a1d13ab1e8506c8a085ee66a2430f6f6264a796f8d77f3d58f672b9ca92fee42b5dc3bd885babeb582a58c45761b193c45879863d3969f4e01674097f111166f9d518a5d5cc4bacda7f7e09bd3fb0d5ed19bf83f809f2c5eda805e8e8f86d544d194c973fd0beee649f6a1f"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0xdd}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0xfc}, &(0x7f00000012c0)={0x20, 0x1, 0x7d, "536374499c6df578180c5760e118c449e357e4274dd51ded308050966313e7dc8916ee7e1d685518b20966522a709317e2cbdaeca0f67a5239a4b163979e90f1aebe616b5339c23090fdc82b710a8ffa43db514e3d5ca86c223c3910f81a11dce3df881db10f7490a89ad6a8c52336a52e069db1b33c8b8d4fc064b646"}, &(0x7f0000001380)={0x20, 0x3, 0x1, 0xfa}}) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000001400)={'syzkaller0\x00', {0x2, 0x0, @multicast2}}) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001440), &(0x7f0000001480)=0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000014c0)='net/udp\x00') ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000001500)={0x3, 0x100, 0x4, {0x200, 0x28ec, 0x4, 0x80}}) getpeername$unix(0xffffffffffffffff, &(0x7f0000001580)=@abs, &(0x7f0000001600)=0x6e) [ 369.348498][ T8472] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 369.357776][ T8472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.366050][ T8472] usb 1-1: Product: syz [ 369.370293][ T8472] usb 1-1: Manufacturer: syz [ 369.374968][ T8472] usb 1-1: SerialNumber: syz [ 369.383424][ T8472] usb 1-1: config 0 descriptor?? [ 369.887970][ T8472] usb 1-1: USB disconnect, device number 2 [ 370.596261][ T8472] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 370.836933][ T8472] usb 1-1: Using ep0 maxpacket: 32 [ 370.957465][ T8472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 371.136447][ T8472] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 371.145625][ T8472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.153864][ T8472] usb 1-1: Product: syz [ 371.158218][ T8472] usb 1-1: Manufacturer: syz [ 371.162895][ T8472] usb 1-1: SerialNumber: syz [ 371.211659][ T8472] usb 1-1: config 0 descriptor?? 23:58:00 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000000)) [ 371.590770][ T8472] usb 1-1: USB disconnect, device number 3 [ 371.681297][ T8610] IPVS: ftp: loaded support on port[0] = 21 [ 372.317639][ T8472] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 372.406631][ T8610] chnl_net:caif_netlink_parms(): no params data found [ 372.587045][ T8472] usb 1-1: Using ep0 maxpacket: 32 [ 372.708680][ T8472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 372.881526][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.890030][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.899529][ T8610] device bridge_slave_0 entered promiscuous mode [ 372.928632][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.936752][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.946240][ T8610] device bridge_slave_1 entered promiscuous mode [ 372.962292][ T8472] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 372.971884][ T8472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.980163][ T8472] usb 1-1: Product: syz [ 372.984420][ T8472] usb 1-1: Manufacturer: syz [ 372.989163][ T8472] usb 1-1: SerialNumber: syz [ 373.046395][ T8610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.051048][ T8472] usb 1-1: config 0 descriptor?? [ 373.074903][ T8610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.203381][ T8610] team0: Port device team_slave_0 added [ 373.216576][ T8610] team0: Port device team_slave_1 added [ 373.277167][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.284375][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.310657][ T8610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.339286][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.346492][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.373307][ T8610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.535367][ T8610] device hsr_slave_0 entered promiscuous mode [ 373.569826][ T8610] device hsr_slave_1 entered promiscuous mode [ 373.600646][ T8610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.608827][ T8610] Cannot create hsr debugfs directory [ 373.615328][ T3126] Bluetooth: hci1: command 0x0409 tx timeout [ 373.683409][ T8472] usb 1-1: USB disconnect, device number 4 23:58:03 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000000)) [ 374.307905][ T8610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.349160][ T8610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.408252][ T8610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.435878][ T8610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.846882][ T8473] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 374.970650][ T8610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.011058][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.019938][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.040518][ T8610] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.063012][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 375.072753][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.082810][ T3126] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.090203][ T3126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.096189][ T8473] usb 1-1: Using ep0 maxpacket: 32 [ 375.147847][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 375.149231][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 375.165546][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.174976][ T3126] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.182362][ T3126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.192681][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 375.203407][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 375.214260][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 375.224585][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 375.239015][ T8473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 375.285788][ T8610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 375.296740][ T8610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.361563][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 375.371482][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 375.381764][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 375.392011][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 375.401607][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.411813][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 375.421337][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.430828][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 375.438589][ T8473] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 375.438613][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.456678][ T8473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.457546][ T8610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.464785][ T8473] usb 1-1: Product: syz [ 375.475849][ T8473] usb 1-1: Manufacturer: syz [ 375.480634][ T8473] usb 1-1: SerialNumber: syz [ 375.576985][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 375.584627][ T8473] usb 1-1: config 0 descriptor?? [ 375.585581][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 375.599874][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 375.696292][ T3126] Bluetooth: hci1: command 0x041b tx timeout [ 375.700248][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 375.711919][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 375.745269][ T8610] device veth0_vlan entered promiscuous mode [ 375.769359][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 375.778378][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 375.821359][ T8610] device veth1_vlan entered promiscuous mode [ 376.054125][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 376.063673][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 376.073139][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 376.083018][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 376.128933][ T8610] device veth0_macvtap entered promiscuous mode [ 376.138935][ T8473] usb 1-1: USB disconnect, device number 5 [ 376.167322][ T8610] device veth1_macvtap entered promiscuous mode [ 376.283398][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 376.294398][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.308230][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.323230][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 376.332549][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 376.341858][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 376.351642][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 376.425438][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 376.436925][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.451062][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.488394][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 376.498940][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 376.581670][ T8610] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.591315][ T8610] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.600288][ T8610] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.609203][ T8610] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 23:58:05 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000000)) [ 377.069877][ T8921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.078208][ T8921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.089678][ T8485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 377.187812][ T8921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.195735][ T8921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.205565][ T8472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 377.407289][ T8485] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 377.667634][ T8485] usb 1-1: Using ep0 maxpacket: 32 [ 377.768315][ T3126] Bluetooth: hci1: command 0x040f tx timeout [ 377.787201][ T8485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 377.956873][ T8485] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 377.966192][ T8485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.974275][ T8485] usb 1-1: Product: syz [ 377.979563][ T8485] usb 1-1: Manufacturer: syz [ 377.984250][ T8485] usb 1-1: SerialNumber: syz [ 377.993514][ T8485] usb 1-1: config 0 descriptor?? 23:58:06 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x150) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000004700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c7e66ac9454f31b6772b97333ebb114ad7b2bf80c81d07793f6edba1e087ad96c7a87eaf6506fa8e64e534e7cd9edd6727e0cc46b964d9bf3d5c644c209c554070070f957fa4bc58346d765630f6487476ae560989ed42b4f73a9d474e5b96bd40e06c3fcc9efe6b9cb9753f5158fdbb2d765a653e8f384af87e31d240112a436478b43982305d49b2b793a6c9259544305f2f3395b61c01ea47cc5b97859f9946ca0fccc78bc6e8ec9776bc0601bbc6a9e9e222bb3692b983880ef2b1c9e6bc914e0c92c42edf53ccd90e6704cfa291cc1d2b6ab64", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc7244620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb1dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1b8100c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da241c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd00", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000046c0)={0x53, 0xfffffffffffffffd, 0x1, 0x0, @buffer={0x67, 0x40000, &(0x7f0000004400)=""/142}, &(0x7f00000044c0)='g', &(0x7f0000004580)=""/197, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x1000000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 378.368546][ T8952] fuse: Unknown parameter '~f¬”Tógr¹s3ë±­{+ø Ðw“öíºzÙlz‡êöPo¨æNSN|ÙíÖr~ Äk–M›óÕÆD ÅT' [ 378.412161][ T8952] fuse: Unknown parameter '~f¬”Tógr¹s3ë±­{+ø Ðw“öíºzÙlz‡êöPo¨æNSN|ÙíÖr~ Äk–M›óÕÆD ÅT' [ 378.500877][ T8485] usb 1-1: USB disconnect, device number 6 23:58:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0xf801, 0x4, 0x3d4, 0x1f0, 0xe4, 0x0, 0x2f4, 0x2f4, 0x2f4, 0x4, 0x0, {[{{@arp={@broadcast, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'geneve0\x00', 'xfrm0\x00'}, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@arp={@empty, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_bond\x00', 'bond_slave_1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @empty}}}, {{@uncond, 0xbc, 0x104}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0xbc, 0xe0}, {0x24}}}}, 0x420) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, &(0x7f0000000040)='schedstat\x00') prctl$PR_SET_TSC(0x1a, 0x3) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x501801) [ 378.690814][ T8975] xt_NFQUEUE: number of total queues is 0 [ 378.711633][ T8975] xt_NFQUEUE: number of total queues is 0 23:58:07 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001080)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000002400)={0x1c, r4, 0x701, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000000c0)={0x650, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x5e4, 0x8, 0x0, 0x1, [{0x1a8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6d2ab74680aff0aaae7c5768334a12aa462f0340878bb9aa9b6307adf95e6b4e"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x178, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 379.847739][ T8484] Bluetooth: hci1: command 0x0419 tx timeout [ 379.926340][ T8473] usb 1-1: Using ep0 maxpacket: 32 [ 380.080003][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 380.098591][ T8473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 380.288447][ T8473] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 380.297757][ T8473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.305833][ T8473] usb 1-1: Product: syz [ 380.310307][ T8473] usb 1-1: Manufacturer: syz [ 380.314993][ T8473] usb 1-1: SerialNumber: syz [ 380.378612][ T8473] usb 1-1: config 0 descriptor?? [ 380.404984][ T8997] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 380.746513][ T8473] usb 1-1: USB disconnect, device number 7 [ 381.034305][ T9036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:10 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') 23:58:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 382.386537][ T8485] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 382.626276][ T8485] usb 1-1: Using ep0 maxpacket: 32 [ 382.746557][ T8485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 382.916680][ T8485] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 382.926223][ T8485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.934308][ T8485] usb 1-1: Product: syz [ 382.936379][ T9054] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 382.938736][ T8485] usb 1-1: Manufacturer: syz [ 382.938792][ T8485] usb 1-1: SerialNumber: syz [ 383.023145][ T8485] usb 1-1: config 0 descriptor?? [ 383.450308][ T8485] usb 1-1: USB disconnect, device number 8 23:58:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 383.918080][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:12 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) 23:58:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 384.916372][ T8485] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 385.176183][ T8485] usb 1-1: Using ep0 maxpacket: 32 [ 385.297072][ T8485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 385.330856][ T9103] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.479875][ T8485] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 385.489293][ T8485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.497606][ T8485] usb 1-1: Product: syz [ 385.501861][ T8485] usb 1-1: Manufacturer: syz [ 385.506684][ T8485] usb 1-1: SerialNumber: syz [ 385.645541][ T8485] usb 1-1: config 0 descriptor?? [ 385.659257][ T9103] device bridge_slave_1 left promiscuous mode [ 385.666466][ T9103] bridge0: port 2(bridge_slave_1) entered disabled state 23:58:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 386.008829][ T8485] usb 1-1: USB disconnect, device number 9 23:58:15 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 23:58:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 387.637427][ T8925] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 387.888345][ T8925] usb 1-1: Using ep0 maxpacket: 32 [ 388.009080][ T8925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 388.188659][ T8925] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 388.197941][ T8925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.206257][ T8925] usb 1-1: Product: syz [ 388.210507][ T8925] usb 1-1: Manufacturer: syz [ 388.215553][ T8925] usb 1-1: SerialNumber: syz [ 388.378425][ T8925] usb 1-1: config 0 descriptor?? [ 388.767345][ T8925] usb 1-1: USB disconnect, device number 10 [ 389.019078][ T9153] team0: Port device team_slave_0 removed 23:58:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:18 executing program 0: [ 389.581210][ T9186] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:18 executing program 0: 23:58:18 executing program 0: [ 390.221652][ T9196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:19 executing program 0: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 390.979644][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:20 executing program 0: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 391.500760][ T9217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 392.020467][ T9230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:21 executing program 0: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 392.659735][ T9238] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:22 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x0, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) [ 393.589305][ T9249] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 393.869526][ T8484] usb 1-1: new high-speed USB device number 11 using dummy_hcd 23:58:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 394.066360][ T8484] usb 1-1: device descriptor read/64, error 18 [ 394.298101][ T9264] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 394.437803][ T8484] usb 1-1: new high-speed USB device number 12 using dummy_hcd 23:58:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 394.627275][ T8484] usb 1-1: device descriptor read/64, error 18 [ 394.749786][ T8484] usb usb1-port1: attempt power cycle [ 394.843094][ T9272] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 395.518911][ T8484] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 395.519839][ T9283] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 395.623371][ T8484] usb 1-1: Invalid ep0 maxpacket: 0 [ 395.776375][ T8484] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 395.867017][ T8484] usb 1-1: Invalid ep0 maxpacket: 0 [ 395.872799][ T8484] usb usb1-port1: unable to enumerate USB device [ 396.299538][ T9280] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.422637][ T9273] IPVS: ftp: loaded support on port[0] = 21 23:58:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:25 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x0, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) [ 397.129108][ T9333] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 397.246662][ T8485] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 397.436532][ T8485] usb 1-1: device descriptor read/64, error 18 [ 397.466697][ T9273] chnl_net:caif_netlink_parms(): no params data found 23:58:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 397.706401][ T8485] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 397.897078][ T8485] usb 1-1: device descriptor read/64, error 18 [ 397.989373][ T9438] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 398.019205][ T8485] usb usb1-port1: attempt power cycle [ 398.340274][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.341986][ T8925] Bluetooth: hci2: command 0x0409 tx timeout [ 398.347674][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.364020][ T9273] device bridge_slave_0 entered promiscuous mode [ 398.482796][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.490514][ T9273] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.500158][ T9273] device bridge_slave_1 entered promiscuous mode [ 398.657504][ T9273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.728718][ T9273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.746287][ T8485] usb 1-1: new high-speed USB device number 17 using dummy_hcd 23:58:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 398.867503][ T8485] usb 1-1: Invalid ep0 maxpacket: 0 [ 398.949493][ T9273] team0: Port device team_slave_0 added [ 398.968283][ T9273] team0: Port device team_slave_1 added [ 399.016578][ T8485] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 399.104151][ T9273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.109703][ T8485] usb 1-1: Invalid ep0 maxpacket: 0 [ 399.111349][ T9273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.130091][ T8485] usb usb1-port1: unable to enumerate USB device [ 399.143247][ T9273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.362430][ T9486] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 399.500245][ T9273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.507812][ T9273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.534011][ T9273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 23:58:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 399.846625][ T9273] device hsr_slave_0 entered promiscuous mode [ 399.903511][ T9273] device hsr_slave_1 entered promiscuous mode [ 399.959208][ T9273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.967137][ T9273] Cannot create hsr debugfs directory [ 400.067494][ T9502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:28 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x0, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) [ 400.406385][ T8925] Bluetooth: hci2: command 0x041b tx timeout [ 400.997298][ T8472] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 401.192973][ T8472] usb 1-1: device descriptor read/64, error 18 [ 401.240534][ T9273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.279586][ T9273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.322762][ T9273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.369925][ T9273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.468082][ T8472] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 401.670392][ T8472] usb 1-1: device descriptor read/64, error 18 [ 401.802216][ T8472] usb usb1-port1: attempt power cycle [ 401.880045][ T9273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.920281][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 401.929167][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 401.952770][ T9273] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.979490][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 401.990215][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.999647][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.007032][ T8925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.053889][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.063313][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.073424][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.082962][ T8925] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.090367][ T8925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.100960][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 402.183683][ T9273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.194461][ T9273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.223263][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 402.234320][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 402.245076][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 402.255535][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 402.265969][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 402.276588][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 402.286296][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.296759][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.306466][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.379658][ T9273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.448346][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 402.458645][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 402.467700][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 402.475408][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 402.483207][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 402.493254][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 402.554062][ T9273] device veth0_vlan entered promiscuous mode [ 402.567448][ T8925] Bluetooth: hci2: command 0x040f tx timeout [ 402.586987][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 402.597214][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 402.617010][ T9273] device veth1_vlan entered promiscuous mode [ 402.626663][ T8472] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 402.635355][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 402.645266][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 402.654387][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 402.739198][ T8472] usb 1-1: Invalid ep0 maxpacket: 0 [ 402.765238][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 402.775616][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 402.785598][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 402.808480][ T9273] device veth0_macvtap entered promiscuous mode [ 402.831110][ T9273] device veth1_macvtap entered promiscuous mode [ 402.844145][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 402.854206][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 402.907141][ T8472] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 402.922848][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 402.935463][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.945559][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 402.956235][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.969955][ T9273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.978137][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 402.988370][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 403.020737][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 403.032028][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.042114][ T9273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 403.052749][ T9273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.066590][ T9273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.075123][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 403.085333][ T8473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 403.097951][ T8472] usb 1-1: Invalid ep0 maxpacket: 0 [ 403.103584][ T8472] usb usb1-port1: unable to enumerate USB device [ 403.133293][ T9273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.143958][ T9273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.153551][ T9273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.162533][ T9273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.460028][ T8342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.468323][ T8342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.476871][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 403.671974][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.681291][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.690858][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 404.234971][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 404.658009][ T2969] Bluetooth: hci2: command 0x0419 tx timeout 23:58:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:33 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x30, 0x1c, 0xfb}}]}}]}}, 0x0) [ 405.404758][ T9603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 405.545007][ T2969] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 405.626318][ T9602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:58:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 405.788272][ T2969] usb 1-1: Using ep0 maxpacket: 32 [ 406.129481][ T9613] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 406.159376][ T9610] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 406.167077][ T2969] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 406.178797][ T2969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.186983][ T2969] usb 1-1: Product: syz [ 406.191236][ T2969] usb 1-1: Manufacturer: syz [ 406.195920][ T2969] usb 1-1: SerialNumber: syz [ 406.321431][ T2969] usb 1-1: config 0 descriptor?? 23:58:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 406.379345][ T2969] snd-usb-audio: probe of 1-1:0.0 failed with error -22 23:58:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 406.575870][ T8484] usb 1-1: USB disconnect, device number 23 [ 406.849105][ T9633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 406.861262][ T9636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:36 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x30, 0x1c, 0xfb}}]}}]}}, 0x0) 23:58:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 408.179934][ T8473] usb 1-1: new high-speed USB device number 24 using dummy_hcd 23:58:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 408.445518][ T9656] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 408.446435][ T8473] usb 1-1: Using ep0 maxpacket: 32 23:58:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 408.695002][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 408.859388][ T8473] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 408.868666][ T8473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.876949][ T8473] usb 1-1: Product: syz [ 408.881202][ T8473] usb 1-1: Manufacturer: syz [ 408.885879][ T8473] usb 1-1: SerialNumber: syz [ 409.063341][ T8473] usb 1-1: config 0 descriptor?? [ 409.134718][ T8473] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 409.273109][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 409.329627][ T8473] usb 1-1: USB disconnect, device number 24 23:58:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:38 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x30, 0x1c, 0xfb}}]}}]}}, 0x0) [ 410.306849][ T9681] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 410.905690][ T9696] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 410.927652][ T8485] usb 1-1: new high-speed USB device number 25 using dummy_hcd 23:58:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 411.167398][ T8485] usb 1-1: Using ep0 maxpacket: 32 [ 411.253193][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.450859][ T8485] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 411.456661][ T9703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 411.461095][ T8485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.461154][ T8485] usb 1-1: Product: syz [ 411.461217][ T8485] usb 1-1: Manufacturer: syz [ 411.461273][ T8485] usb 1-1: SerialNumber: syz [ 411.500776][ T8485] usb 1-1: config 0 descriptor?? 23:58:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 411.692514][ T8485] snd-usb-audio: probe of 1-1:0.0 failed with error -22 23:58:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 411.809233][ T8485] usb 1-1: USB disconnect, device number 25 [ 412.240375][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 412.540672][ T9727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:41 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{}]}}]}}]}}, 0x0) 23:58:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 413.432484][ T9749] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 413.546541][ T8484] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 413.788573][ T8484] usb 1-1: Using ep0 maxpacket: 32 [ 413.910081][ T8484] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 414.087459][ T8484] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 414.096804][ T8484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.104872][ T8484] usb 1-1: Product: syz [ 414.109291][ T8484] usb 1-1: Manufacturer: syz [ 414.113984][ T8484] usb 1-1: SerialNumber: syz [ 414.363023][ T8484] usb 1-1: config 0 descriptor?? [ 414.418075][ T8484] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 414.612844][ T8484] usb 1-1: USB disconnect, device number 26 [ 414.761819][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.773904][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:44 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{}]}}]}}]}}, 0x0) [ 415.692359][ T9788] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 416.106229][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 416.306843][ T8484] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 416.566425][ T8484] usb 1-1: Using ep0 maxpacket: 32 [ 416.687499][ T8484] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 23:58:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 416.859811][ T8484] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 416.869086][ T8484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.877416][ T8484] usb 1-1: Product: syz [ 416.881685][ T8484] usb 1-1: Manufacturer: syz [ 416.886505][ T8484] usb 1-1: SerialNumber: syz [ 417.031106][ T8484] usb 1-1: config 0 descriptor?? [ 417.088821][ T8484] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 417.294265][ T8473] usb 1-1: USB disconnect, device number 27 [ 417.373248][ T9815] bond0: (slave bond_slave_0): Releasing backup interface [ 417.449828][ T9821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:46 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{}]}}]}}]}}, 0x0) [ 419.106768][ T8484] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 419.313188][ T9840] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 419.367979][ T8484] usb 1-1: Using ep0 maxpacket: 32 23:58:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 419.489658][ T8484] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 23:58:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 419.656730][ T8484] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 419.665981][ T8484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.674392][ T8484] usb 1-1: Product: syz [ 419.678770][ T8484] usb 1-1: Manufacturer: syz [ 419.683454][ T8484] usb 1-1: SerialNumber: syz [ 419.774493][ T8484] usb 1-1: config 0 descriptor?? [ 419.829151][ T8484] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 420.021817][ T17] usb 1-1: USB disconnect, device number 28 [ 420.441620][ T9865] team0: Port device team_slave_1 removed [ 420.498309][ T9867] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 421.303502][ T9886] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 422.369795][ T9905] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 423.145243][ T9920] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:52 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x400, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x3, 0x1, 0x0, 0x10, {0x9, 0x21, 0x1ff, 0x4, 0x1, {0x22, 0x59}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xb5, 0x2, 0x3}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0xc, 0x2, 0xff}, 0x10d, &(0x7f0000000100)={0x5, 0xf, 0x10d, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x35, "8271b718bbc1e1a90af71a38c796c8db"}, @generic={0xe0, 0x10, 0x1, "f7ba5e45e3c7ad129de04a5b7530276140ce8dd399f185da7832e5f3a30fa7132d590cb72782bb0b6e10cb972381f628b3e6ffa242e87be14ea30242830b3c6056bf8ca1bea7e06cda0f4fd8e3136eedae33a76f9a66986e1549af15a03bb84a38a21f86fa1b6e8a29e95259b3b3a9609702c9c760e6aa8f7e0b35b8b726f88d685fc40a2897c886d284585e5e7d795baaf1686b2ec27c3c52c49bd5d22e550d156377548b9e6a82a8d873843625fea564bfed73ff2a76cbd2b041be01e9b11f43cc6e2ac4f6071dda9b96c5d109f18342578109df9afe4b35cb323995"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x5d, 0x6, 0x0, 0x7}, @ptm_cap={0x3}]}, 0x3, [{0x2e, &(0x7f0000000240)=@string={0x2e, 0x3, "327a16f4ce4ef99c94555596703f28bbd029b00268b24a34d0725a815b371b02581ffcfec1008c346b368c27"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x407}}, {0x18, &(0x7f0000000340)=@string={0x18, 0x3, "d6aadd6fc0832b6405c99f060d3f28ac70dfb2341479"}}]}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0xfff80000) 23:58:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 423.725208][ T9935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 423.830852][ T8484] usb 1-1: new high-speed USB device number 29 using dummy_hcd 23:58:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 424.079209][ T8484] usb 1-1: Using ep0 maxpacket: 32 [ 424.197466][ T8484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 424.414478][ T9950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 424.627317][ T8484] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 424.636730][ T8484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.644829][ T8484] usb 1-1: Product: syz [ 424.649766][ T8484] usb 1-1: Manufacturer: syz [ 424.654468][ T8484] usb 1-1: SerialNumber: syz 23:58:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 424.781535][ T8484] usb 1-1: config 0 descriptor?? 23:58:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 425.164170][ T9930] udc-core: couldn't find an available UDC or it's busy [ 425.171673][ T9930] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 425.203897][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 425.365854][ T8484] usb 1-1: USB disconnect, device number 29 23:58:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 426.397306][ T8925] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 426.431438][T10003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:58:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 426.696541][ T8925] usb 1-1: Using ep0 maxpacket: 32 [ 426.819194][ T8925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 23:58:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:55 executing program 0: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x3}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100006a70a22010112390be0e010290fad6317b5baeec0007f76819eb030109022400276bf37c22e90509050a0100079500a4a686b159f382e493d48ca9e3289336700eea90461c1f2c73cb3b0d91"], 0x0) [ 427.116893][ T8925] usb 1-1: string descriptor 0 read error: -71 [ 427.123358][ T8925] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 427.133713][ T8925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.280572][ T8925] usb 1-1: config 0 descriptor?? [ 427.297397][ T8925] usb 1-1: can't set config #0, error -71 [ 427.305440][ T8925] usb 1-1: USB disconnect, device number 30 23:58:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 427.502983][T10029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 428.026543][ T9565] usb 1-1: new high-speed USB device number 31 using dummy_hcd 23:58:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:58:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 428.287800][ T9565] usb 1-1: Using ep0 maxpacket: 32 [ 428.328548][ T9565] usb 1-1: too many configurations: 250, using maximum allowed: 8 [ 428.523574][ T9565] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 428.531344][ T9565] usb 1-1: can't read configurations, error -61 [ 428.541583][T10046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 428.799451][ T9565] usb 1-1: new high-speed USB device number 32 using dummy_hcd 23:58:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 429.067053][ T9565] usb 1-1: Using ep0 maxpacket: 32 [ 429.107922][ T9565] usb 1-1: too many configurations: 250, using maximum allowed: 8 [ 429.238826][ T9565] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 429.246605][ T9565] usb 1-1: can't read configurations, error -61 [ 429.349886][ T9565] usb usb1-port1: attempt power cycle [ 430.116941][ T9565] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 430.219256][ T9565] usb 1-1: Using ep0 maxpacket: 32 [ 430.269446][ T9565] usb 1-1: too many configurations: 250, using maximum allowed: 8 [ 430.410936][ T9565] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 430.412127][T10054] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.418685][ T9565] usb 1-1: can't read configurations, error -61 [ 430.502570][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 430.567667][ T9565] usb 1-1: new high-speed USB device number 34 using dummy_hcd 23:58:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 430.644237][T10038] IPVS: ftp: loaded support on port[0] = 21 23:58:59 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0xe, 0x4, 0x0, 0x0, {0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d8a77c33"}, 0x0, 0x0, @planes=0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r2], 0x0) [ 430.898139][ T9565] usb 1-1: device descriptor read/8, error -71 [ 430.966705][ T2969] Bluetooth: hci3: command 0x0409 tx timeout [ 431.016870][ T9565] usb usb1-port1: unable to enumerate USB device [ 431.606942][ T17] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 431.701268][T10038] chnl_net:caif_netlink_parms(): no params data found [ 431.803687][ T17] usb 1-1: device descriptor read/64, error 18 [ 431.865277][T10038] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.872705][T10038] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.882390][T10038] device bridge_slave_0 entered promiscuous mode [ 431.895585][T10038] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.903171][T10038] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.913060][T10038] device bridge_slave_1 entered promiscuous mode [ 431.965534][T10038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.987950][T10038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.053184][T10038] team0: Port device team_slave_0 added [ 432.068443][T10038] team0: Port device team_slave_1 added [ 432.094438][ T17] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 432.144516][T10038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.153078][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.179894][T10038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.206810][T10038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.213897][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.240219][T10038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.328140][ T17] usb 1-1: device descriptor read/64, error 18 [ 432.350955][T10038] device hsr_slave_0 entered promiscuous mode [ 432.388562][T10038] device hsr_slave_1 entered promiscuous mode [ 432.408094][T10038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.415735][T10038] Cannot create hsr debugfs directory [ 432.454710][ T17] usb usb1-port1: attempt power cycle [ 432.859030][T10038] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.878657][T10038] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.922539][T10038] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.970086][T10038] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 433.059908][ T9565] Bluetooth: hci3: command 0x041b tx timeout [ 433.209684][ T17] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 433.388508][ T17] usb 1-1: device descriptor read/8, error -61 [ 433.656751][ T17] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 433.827308][ T17] usb 1-1: device descriptor read/8, error -61 [ 433.948957][ T17] usb usb1-port1: unable to enumerate USB device [ 434.954117][T10038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.127483][ T2969] Bluetooth: hci3: command 0x040f tx timeout [ 435.292829][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 435.301754][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 435.367596][T10038] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.506079][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 435.516014][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 435.526485][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.533728][ T8484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.737225][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 435.746889][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 435.756691][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.765892][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.773296][ T8484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.782458][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 435.793521][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 435.804500][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 435.814901][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 435.954528][T10038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.965168][T10038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.351387][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 436.361189][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 436.371661][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 436.382325][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 436.391963][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.402335][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 436.411870][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 436.665426][T10038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.948422][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 436.958955][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 436.966884][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.119520][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 437.129585][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.207871][ T2969] Bluetooth: hci3: command 0x0419 tx timeout [ 437.603555][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 437.613235][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.749657][T10038] device veth0_vlan entered promiscuous mode [ 437.802750][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.812036][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.963596][T10038] device veth1_vlan entered promiscuous mode [ 438.558287][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 438.569179][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 438.628742][T10038] device veth0_macvtap entered promiscuous mode [ 438.730269][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 438.835539][T10038] device veth1_macvtap entered promiscuous mode [ 439.072995][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 439.083620][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.093749][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 439.104343][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.115533][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 439.126468][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.140661][T10038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.153769][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 439.164267][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 439.329142][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 439.340160][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.350306][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 439.361101][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.371120][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 439.381703][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.395742][T10038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.406950][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 439.417262][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 439.498910][T10038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.508179][T10038] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.517177][T10038] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.527154][T10038] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.949085][ T8921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.957400][ T8921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.984973][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 440.072232][ T443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.080574][ T443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.090416][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 440.413156][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:59:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:09 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100007ed515205e0483028bcb01020352e37dd9f8794e0e00000904000001301cfb0009050a00000f000625"], 0x0) 23:59:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 441.356857][ T17] usb 1-1: new high-speed USB device number 39 using dummy_hcd 23:59:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 441.598104][ T17] usb 1-1: Using ep0 maxpacket: 32 [ 441.640869][ T17] usb 1-1: too many configurations: 82, using maximum allowed: 8 [ 441.847100][ T17] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 441.854815][ T17] usb 1-1: can't read configurations, error -61 23:59:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 442.580523][ T17] usb 1-1: new high-speed USB device number 40 using dummy_hcd 23:59:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 442.826710][ T17] usb 1-1: Using ep0 maxpacket: 32 [ 442.866846][ T17] usb 1-1: too many configurations: 82, using maximum allowed: 8 [ 443.006844][ T17] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 443.014598][ T17] usb 1-1: can't read configurations, error -61 [ 443.121629][T10434] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 443.196776][ T17] usb usb1-port1: attempt power cycle 23:59:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:12 executing program 3: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x9}, @IFLA_BOND_UPDELAY={0x8, 0x5, 0x5}]}}}]}, 0x44}}, 0x0) 23:59:12 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) openat$vimc0(0xffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) [ 444.163628][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:13 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003ecda1035120a00bc840102030109022400010000000009040000020592ff00090500004000001400090500000000000000de49a58e8a89860aac355be4e5c0fe698fd2bc79a9b47931791aa3118aedbe53b4e0ee09d3b1b1250400"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000004800)={0x1c, 0x0, 0x0, 0x0}) io_setup(0x463, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x2) 23:59:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 444.764492][ T17] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 444.936828][ T17] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 445.099318][ T17] usb 1-1: Using ep0 maxpacket: 32 [ 445.127124][ T8925] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 445.218360][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 445.218894][T10469] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.387747][ T17] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 445.397143][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.405238][ T17] usb 1-1: Product: syz [ 445.409649][ T17] usb 1-1: Manufacturer: syz [ 445.414332][ T17] usb 1-1: SerialNumber: syz 23:59:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 445.678887][ T17] usb 1-1: config 0 descriptor?? [ 445.687803][ T8925] usb 4-1: Using ep0 maxpacket: 16 23:59:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 445.817372][ T8925] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 445.828118][ T8925] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 446.057750][ T8925] usb 4-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice=84.bc [ 446.062807][ T17] usb 1-1: USB disconnect, device number 42 [ 446.067185][ T8925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.067239][ T8925] usb 4-1: Product: syz [ 446.067317][ T8925] usb 4-1: Manufacturer: syz [ 446.090188][ T8925] usb 4-1: SerialNumber: syz [ 446.226666][ T8925] usb 4-1: config 0 descriptor?? 23:59:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 446.557741][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 446.768291][ T8925] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 446.797151][ T8925] usb 4-1: USB disconnect, device number 2 [ 446.907103][ T9565] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 447.162539][ T9565] usb 1-1: Using ep0 maxpacket: 32 23:59:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 447.299983][ T9565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 447.397746][ T8925] usb 4-1: new high-speed USB device number 3 using dummy_hcd 23:59:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 447.651178][ T8925] usb 4-1: Using ep0 maxpacket: 16 23:59:16 executing program 0: sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x164, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) [ 447.706997][ T9565] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 447.717774][ T9565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.725861][ T9565] usb 1-1: Product: syz [ 447.730808][ T9565] usb 1-1: Manufacturer: syz [ 447.778743][T10527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.811342][ T9565] usb 1-1: config 0 descriptor?? [ 447.847813][ T8925] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 447.858568][ T8925] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 447.883575][ T9565] usb 1-1: can't set config #0, error -71 [ 447.940911][ T9565] usb 1-1: USB disconnect, device number 43 23:59:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 448.476871][ T8925] usb 4-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice=84.bc [ 448.486064][ T8925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.494391][ T8925] usb 4-1: Product: syz [ 448.499041][ T8925] usb 4-1: Manufacturer: syz [ 448.586804][ T9565] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 448.614461][ T8925] usb 4-1: config 0 descriptor?? [ 448.662680][ T8925] usb 4-1: can't set config #0, error -71 [ 448.711170][ T8925] usb 4-1: USB disconnect, device number 3 [ 448.887573][ T9565] usb 1-1: Using ep0 maxpacket: 32 [ 448.932514][T10563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 449.447003][ T9565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 449.507849][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 449.647013][ T9565] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 449.657576][ T9565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.665675][ T9565] usb 1-1: Product: syz [ 449.670364][ T9565] usb 1-1: Manufacturer: syz [ 449.675051][ T9565] usb 1-1: SerialNumber: syz 23:59:18 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) openat$vimc0(0xffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) [ 449.828693][ T9565] usb 1-1: config 0 descriptor?? 23:59:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 450.351322][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 450.405595][ T9565] usb 1-1: USB disconnect, device number 44 [ 450.413980][ T2969] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 450.669673][ T2969] usb 4-1: Using ep0 maxpacket: 32 [ 450.819489][ T2969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 23:59:19 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000)=0x6, 0x4) syz_usb_connect(0x6, 0x7b2, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xe7, 0x10, 0xf5, 0x20, 0x1110, 0x9000, 0x12e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a0, 0x2, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0xfd, 0x40, 0xd, 0x65, 0x2, 0xa8, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x0, 0x9, 0x20, 0x80, [@generic={0x3d, 0x4, "46311204c4fddce56ea199969d0d31ad5c006c007721a728ec9a00ec31363568d1b0a2c26d566d77e277096491d986fdb4db1623f85181a674f334"}, @generic={0xee, 0xb, "b7274bed36cd25951b9a57f0c185668d5fa5cc5d3e38b04489c8dbaf7c59ef9f091a91ebe86fca0cb9bcf6d5e9b15b391a73362c7c7965758f2aa8f1cfde671e8e5dec840fcf61ffc4ff12fbf54c9d23cc22e1d02129b9bcc488926fa43414c7cc15068bdc65fab0c71d0d922dc472772048b70afe9f3db0be0504a0b5f1092a53bbe63bf463465b32c323cc9e57d5b99101253f24c80c103c91993928236989566c88fe57382e254063d4ac14d96c4d6b3cc4e8b95c9dbd859c883d30cd0aa3aa5b419ec2191d3ef3e564679f3d178641f0c1bbc2b806e2d9c7ac46c239967fc71ed67e843a6394df490762"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x7, 0x0, 0x5}}, {{0x9, 0x5, 0x80, 0x1c, 0x400, 0xc6, 0x2, 0x2, [@generic={0xf2, 0x2, "2fd3003feb4bf9802485fe94c0084b14b01788d5b804fd924d8b2f3e65af2f6965565a4981c21c567feca172f8d93219d869468978388dbf8148e1fa6323f484f54529a7636cb09e7d11aa1c55b9c20a6a0a7e328b024ef93388671c72c8640c3539254bc479da3872be56e27c5b278056bd8e68749a8453c99d7f6ba4afacbf3855b77fed11fe10a0bba4da34c4d64739c9510541ce1199cd80ffe51016d7049a3ce1d207acf3922ecd869e168d1f3f39c643e8307e210bf3efcf55cd42b9881074a19890c0169c39183a9bde37526ad8eab8ba645bcfeb611d70fb90764866af9386983714e9e130a9cd6d1e6fa434"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x1000}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0xff, 0xa2, 0x9, [@generic={0x50, 0x6, "ca1df20e6527b4e6af2151fc8b4e0b634f01fee59d395561f9b72c1d5282353b6fdf9aa8db7cd12d605217c508f7d7346e35fd245ec06e27d5968b79c34c7c5039138116fbe43eb8689169947230"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3f}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x1, 0x1f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xbf, 0x9a9}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x3d}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x3, 0x8, 0x5}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x0, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x2}, @generic={0xcd, 0x11, "538e7e8925b25fc7c6c041c42cd987c30550656de1ff3dbfc4ec47f03b375040e93197ba79e6f84cec269e96e652f7b452add90e1eb990907c7537603d8bc87f7fe77a16ee1377088452f66655b97f9df94f89a4c0004a8bcdb766b48056e39080413d1fbcd42e3431a653492c80031d125958dbb78b0b154683305840746f41331ed00bbe09becadbe3ead709a5dab2786e05bd70e2f4e8eaea8a8bd2476eb5a2166b4d74abad61b73a360e2a78599bb124543c591ef5e9d9e21433d29e65c08e18f031e2f47e54014c4e"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x8, 0x20, 0xa, [@generic={0x23, 0x0, "14f577401ec2c337682eeb3649da4f67dd00aa9d5d77ce10fc6cb646ba8370ef67"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x9, 0x5, 0x5, [@generic={0x8b, 0x9, "406496fce71acf5b33ee38fdbd21f16c1bd3fb5ebf48db6a613072ab8e0321046f54e25246161bc3ca038255c82eb9969f1974004b86b4db8fb80c1aacf88f2a863c09a3d11d3d5b65c77672949ff38df7e15495378d275f3a101c26f1ae5cadbe25024b885a1a769c45bb63434222552ed18c879af3f6fdab9314ffb1a594a857df52f1b0b525ed4f"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0xfc, 0x8, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xe47}, @generic={0x85, 0xa, "ccbbb8c8ff346b196fab5e3def48fd4951837084fabb9a907917beb29a30c34e3d55863a07f568fc903e826836d66be0b4e6b8e417acb2bffb2c424487543131bd943e4a0f51f0a5cfa9b5073e362c4790e36f632ed3fd69e0799a96d9514b9f7b92cd32c2247f8a9f963ab735b1de688ee56f91a216335e0cfe0253c33efac5731086"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x1f, 0x1f, 0x3, [@generic={0x59, 0x11, "8db4f490ba204137016ebf6f8d1940c1cff6f3294be48480411203ffc0b94147402a2b9731120afe705fe3eb673833e57e2ec4ed09402a866d214557942ee9022e07db40699fc2b1015fac6f2ea0c556f9dfe207a2a80f"}, @generic={0x78, 0x30, "b21a23f3d660e38e8d5626d9adb2d9177f4d414ac4fd7d61ed7b3378eed9fc07e9a9e53a3cdc7478485406c42528aa6811de4890769ebb3b77bc56e974015cb47e332bed5639ff954ff480cca778fb88397f1e119207e9d489bf5ff36ccfe419b8ed516802f62eb821571dc492ab650de1ba6bd86d2d"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x20, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x8, 0x20, 0x2f}}]}}, {{0x9, 0x4, 0x66, 0x30, 0x5, 0x9c, 0x16, 0xa1, 0x4, [], [{{0x9, 0x5, 0xc, 0xc, 0x40, 0x79, 0x8, 0x4}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x60, 0x40, 0x4}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x7, 0x81, 0x80, [@generic={0xb5, 0x11, "74ad7735966f417d7373a17f6fa77d68acfab0f01fc17219610bac49ccdce415f7e5de5b00db0433260c2fe4ee276a7492cfab030233b97df676dd58cc8713619e203cd40e4498b6b3c057d7aef77b16b7b5875afbc7684e57094ad4d467f197ebf13af0ccc595b8f0ba82660d0fb11ed01b2323ab3f99b85e7a0211398e972f948a20755c51fe25d02b16e6f228ea0340038e273b87eb3f112ba66c47f1bd6cb8deb8a9f7b39dfc3f7fc47803a602da13273b"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0xcc}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x5, 0x1f, 0x3f}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x5, 0x0, 0x3, [@generic={0xaa, 0x4, "fd3b038176ef2440e7b0b372c97f0f730aa9ccd80aabfa4ae3a3de94fb5cb742d7d5f14dd0ef2a170902cdf8b69a1e784fadee36f2286a0c21842619d9f7bb0f7c3f95bc9e9c78e9ff628ea3334fd8c4c3c161b04ae473485776005d5821604b9cf0bc6d390d05f1a26c47126812740f425e002db796a4639ff92924b30ce6f71daaf3bf77ea0b8ca225d1f09b64b8f6522f424d94453dd65daa2f5a60c9e98566fe442c40578b9b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x8be8}]}}]}}]}}]}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400854d5, &(0x7f0000000840)={0x6, &(0x7f0000000800)=[{0xd782, 0x47, 0x6, 0xfff}, {0x5, 0x2, 0x4, 0x3ff}, {0x8, 0xff, 0x60, 0x6}, {0x0, 0xff, 0x3, 0xc25}, {0x8, 0x4, 0x81, 0x1000}, {0xfffd, 0xe0, 0x1f, 0x7}]}) [ 451.030717][ T2969] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 451.039958][ T2969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.048311][ T2969] usb 4-1: Product: syz [ 451.052573][ T2969] usb 4-1: Manufacturer: syz [ 451.057354][ T2969] usb 4-1: SerialNumber: syz 23:59:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 451.241332][ T2969] usb 4-1: config 0 descriptor?? 23:59:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 451.632417][ T2969] usb 4-1: USB disconnect, device number 4 [ 451.790113][T10623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:20 executing program 0: sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x94, 0x2, 0x8, 0x500, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8011}, 0x65b7f3b0c7117a5) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 23:59:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 452.412611][T10658] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 452.888470][ T2969] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 453.066490][T10668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 453.207023][ T2969] usb 1-1: Using ep0 maxpacket: 32 23:59:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 453.339833][ T2969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 453.520177][ T2969] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 453.529614][ T2969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.537937][ T2969] usb 1-1: Product: syz [ 453.542200][ T2969] usb 1-1: Manufacturer: syz [ 453.548044][ T2969] usb 1-1: SerialNumber: syz [ 453.720803][T10674] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 454.105668][ T2969] usb 1-1: config 0 descriptor?? [ 454.175401][T10678] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:59:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 454.451109][ T2969] usb 1-1: USB disconnect, device number 45 23:59:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 454.666701][T10713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:24 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000000)={0x7, 0x0, [], {0x0, @bt={0x8, 0x2, 0x1, 0x2, 0x1, 0x1, 0x4, 0x2, 0xc000, 0x1f, 0x1, 0x0, 0x3, 0xfff, 0x13, 0x0, {0xaeaa, 0x2}, 0x3f, 0x4}}}) [ 455.298966][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:59:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 455.838835][T10733] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 456.354171][ T17] usb 1-1: new high-speed USB device number 46 using dummy_hcd 23:59:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 456.596631][ T17] usb 1-1: Using ep0 maxpacket: 32 [ 456.719302][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 456.814052][T10735] bond0: (slave bond_slave_1): Releasing backup interface [ 456.896844][ T17] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 456.906023][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.914579][ T17] usb 1-1: Product: syz [ 456.918944][ T17] usb 1-1: Manufacturer: syz [ 456.923631][ T17] usb 1-1: SerialNumber: syz [ 457.026413][ T17] usb 1-1: config 0 descriptor?? 23:59:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 457.328466][ T17] usb 1-1: USB disconnect, device number 46 [ 458.120864][ T9565] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 458.387891][ T9565] usb 1-1: Using ep0 maxpacket: 32 [ 458.527946][ T9565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 23:59:27 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x29e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28c, 0x2, 0x1, 0x9, 0x0, 0xce, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x400, 0xffff, 0x5}, {0x6, 0x24, 0x1a, 0x9}, [@acm={0x4, 0x24, 0x2, 0x1}, @mdlm_detail={0x7b, 0x24, 0x13, 0xff, "ed5c1aa6538e4e4c82e240d871e255f07afb99df67fca288d966f24185789780c5f4829aaccb06aed54daa68bdacacb9835969b751690df7a0765ea19214c815cdebd3af8f292ba8e5511181e8ca0c9e503be7cb4510a7d24d98c831d2135d1990f3442aefe6647b936d7f725771b8584da7b396f1cd58"}, @dmm={0x7, 0x24, 0x14, 0x1, 0x9b}, @dmm={0x7, 0x24, 0x14, 0x400, 0xd0fc}, @mdlm_detail={0xde, 0x24, 0x13, 0x20, "31041df58487bbb41d7c76865794f6ff428871143cfdd53d381a868af5a9622d284717548b1504fc22ab7e3997d7a3e05e96c21b7a6503212f9b9fae34d8a2919af22a0c4c320ce3915abbe5741387cd958a5c4ec84489bed52e651ce30e1ceebeaef8f1bc8bb22b272e34169dfe57596bba2922e650e284fd2978533e530729e8228e291686c21bd977267d87787080a2067600dc754928c63ab1ca0a83fe381758142fb9adc47ab39197a46043fd84a089058fcd3a786b9f5ed5964f26cfa15009a65f2028393de1c4d1004d98e7e9a4b1b1729562727b88d8"}, @mdlm_detail={0xc5, 0x24, 0x13, 0x8, "41f4d628de25abd1ad83cc39f3b137e26f5fd8aa2173a5ec2502e401c21d9cbd901d8a58e24d9dd508d302be33a05a7f3ed782092be8f6193a9e88750c1f8d788b183e5ae6ae896e9e320ea30eaffe460fc2623939c1da77c0b50419801f39701356a6d54dca04199aa33ea0bd9aac9997723ab87bf0e5237ad0d08f13cd116bb4fdede0190f33402e9f85705beaee49c8c0968688a4d3602ee7a4228f9dc8536443cef06608b4c3bbf493b440337140240f15ce50377f9f80f25a6d83cbf2a5de"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x80, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xf8, 0xff, 0x1}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0xc0, 0x6, 0x0, 0x8, 0xe6}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x807}}, {0xd0, &(0x7f0000000380)=@string={0xd0, 0x3, "209b8764726ddc5767754e56d8dc7eb532f5f47f76ff30e465e60d7ca057c611a0c7358135f0cf0e04f828c2049d831a8caab0556fd8b87c99419b88a8aa86bf36b553ef9ec98e1cfaf56c996d5caad164c68e5556827ff1fac21e5129baca2348e79e8432059d53d69a83ab4f519ac5be4802ed338a6fdea9d21195a45371f0cd3646da269c4c714122b1e2923a85f506e23b19564ef4a75b5015b32ad793372c16102b78652b096af4569beaee5a2b917eff7d2a451ecb1e5eae53483681ec76205a4fcba25c751c9c379b8fcb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3c0a}}]}) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f00000005c0)=0x1) [ 458.868033][ T9565] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 458.878153][ T9565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.886274][ T9565] usb 1-1: Product: syz [ 458.890990][ T9565] usb 1-1: Manufacturer: syz [ 458.954435][ T9565] usb 1-1: config 0 descriptor?? [ 458.964700][T10782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 459.032085][ T9565] usb 1-1: can't set config #0, error -71 [ 459.060862][ T9565] usb 1-1: USB disconnect, device number 47 23:59:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 459.581237][T10808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.609469][ T9565] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 459.878392][ T9565] usb 1-1: Using ep0 maxpacket: 32 [ 460.018180][ T9565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 460.200309][ T9565] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 460.210625][ T9565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.222997][ T9565] usb 1-1: Product: syz [ 460.227437][ T9565] usb 1-1: Manufacturer: syz [ 460.232128][ T9565] usb 1-1: SerialNumber: syz [ 460.331442][ T9565] usb 1-1: config 0 descriptor?? [ 460.581854][T10803] udc-core: couldn't find an available UDC or it's busy [ 460.589074][T10803] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 460.688044][ T9565] usb 1-1: USB disconnect, device number 48 [ 460.952516][T10808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.033215][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.043875][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.054155][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.064830][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.074911][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.085564][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.121190][T10809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r1) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8927, &(0x7f0000000480)='lo@|T{\xdcD\xef\x00\x00\x00\x0f\x89d:\x8f\xecb6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xd8\xd6\xcb\x85\x9a\x06\x97o\xbc\xe3\xf3\xee\xf6N\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\x00\xb8&\xb9.XD\br\xe5\xd7\xda\xe7C\x1b\xbc\xaca\x17\x7f\xf0\xab\x8a\x929\x81!\x0fno\xdb\x9c\x97\xb6\xf8\x9b\xcbn\xdfu\xd7pM\xb6\b\xcb\x9f\x17#n\xa4\xb5\xf1\xb0\xc3\xc4\x9ae\xc8\xe2\xc1R\x9e\xf8%\xa57\xf2g\x82\x87\xb0\x933\\\xe2Q\x0f\xc4\xc3p\x01c\xdf\x83\n\x99\xb3\xc1\xbc\xa1\xd2\xe6\xf6\xc0\xc5\x00]\xd2GM\xb7\x9a\xc9\xffM\xa0\xa9\xddk\v\xb7\xe7\f\x9b\xbf=\xf5sz\xa9\xf6\xfe\x00\x19\x7f\xc4H\xb7DBN\x8f:P\x84\x13.I\xc8\xeekcjAmr>-/1\x83S6\xa6\xd8\xbb^\'\xde\x9ck\xbb\xe6@\xd1\xe5@6\xdc\xda\xb8\xaaEn\xc1\x8c\x83.\x81g\x8b\xba\xa1\xbb\xd8\xbdT\xac\x03\x13\xf5\xe8\x04E/\xb5\xc1\a\f%\xaf\xa4\x14\v\xdc\xfd\xbe\xda\xdcJaY\xbdPA18\xda\x7f\r\xb9*\xb1\x05bc~\xe2\x83XC\xab/\xb1n{\x98\x1bt\x99\xe4=\r\xbc\x05\xddT\xbf\xf6\xc6U\xed\x8bfm\xe9\x0f\xd5\xc7\x85\x11\x9ed\xda09u\xc6\xfb!\xc2\xc5\xffp8/ \x0emiD\xe7\xfeYg\xda\x92U\x0e\r\xe9\xf3\x0e5h\xac\xff\xc0\x81\x91\xf7n\x18\xa3X\xb9\x9a\xcb\xc9\xc7__\xfd40ne\xdc\xd3\xac<]\f\xd3\xe2xnsR\x18\xc9\xe7\xb1\xfc\xc5\xebY+K8\xcc\xed\xf1T\x03\x00\x00\x00\x00\x00\x00\x00\x80/\x81n\x18\xc0\x9e$S\x89R\xa2\x9d\xc5\x15\x8fYH+O\xfe\xc6\xd98T\x0f\x02\x05\xe0xQ\"\xf3\xecmf\xb7\xb3\xf4\xa9\xc2\x8d\x06<$[\x962\x9c\xb9t\xc4\xc36\xbf\x9a\xb2\x16v\x9e_\xa3\v\xc2T\x03%\xe6\xc3\xcfr%\x11\x0f\x1e\t\x91\xbdQ@K \x99\xe8\xd2\x9aA\x12\x8f\xbcY5\x16\x0f\x95fYoQ\xa1\xb3M\xb8\x1b\xbf\xb43\xb6\x8e\x1d\xdb\xe7(\x16W\x03\xaae\xc1D\xc1\x0e\x1b\x1bO\v\x80z\x8e\xaf\x82_\xf2\x81\xcc3f]0t\xd3\x00\xd3\x92\xb5\xab\xd0\xae\xbc\xef\xefHUv\xaa*\xc1\xbb\x13\x8f\xf0w\x9dm\x9a\xff/\x83\x9d\x8f5\xb3\x16\xddm\xe8p\xb6t\xd3\xdeY-\xce\xb9)\xa23Q\xf9Hi\x178\x16\xe7\xd4\xe8\xb8\xce\xe2\xa9\x06\v\x1ap%\xf3z\x98\xe2E\xa4\n\f5\x83\xd0F\x8d\xa6\xb3S\'\xfcr\xc7\x1c\xddS\xbe\xe5\x1d\xb7\x0e\xf8R\xa5\x83\x7f\xe8\xb7j2/\xa7\xca\x029\x194\xd3[V\xb8\x14\x98L\x9b\xdbiT7>>HxV\xa1\xd6\x8f>W\x9acKLX{\xab\xef\v\x1c\xacE\x87\x18\xe5\xf5\x82\xff*\xe2\xb1\x9b\a\xccxn6\xe8\xcc\x8e\\;?p\xd7x\xa0)\xf9\xff\x87CuV\xac9\xe4P\xf1\x18#h\x97\xfc\xe2\x9b\xfe\xf8\x8e.\f?\xaf\xf8n:\'\xd0\xcf\xe0Bh\xe7\xe1\x8a\xb9Wnq\xef\xdb/\xbeD\xd9j\xa0i\xce0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 461.439987][ T8484] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 461.687634][ T8484] usb 1-1: Using ep0 maxpacket: 32 23:59:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 461.808787][ T8484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 23:59:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r2, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x10c0}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbb, 0xa4, 0x60, 0x40, 0x41e, 0x403c, 0x7fc9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4, 0xe4, 0xb2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000400)={0x10, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0246400, &(0x7f00000001c0)={0x5, 0x1, 0x7fff, 0xad, &(0x7f0000000080)=""/173, 0x71, &(0x7f0000000140)=""/113, 0x7, &(0x7f0000000000)=""/7}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) [ 461.966418][T10856] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:31 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) listen(0xffffffffffffffff, 0x1) [ 462.606985][ T8484] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 462.616246][ T8484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.624642][ T8484] usb 1-1: Product: syz [ 462.629098][ T8484] usb 1-1: Manufacturer: syz 23:59:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 462.722469][ T8484] usb 1-1: config 0 descriptor?? [ 462.776802][ T8484] usb 1-1: can't set config #0, error -71 [ 462.791117][ T17] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 462.827332][ T8484] usb 1-1: USB disconnect, device number 49 [ 463.020788][T10881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 463.257861][ T8484] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 463.318115][ T17] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=7f.c9 [ 463.327731][ T17] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.335917][ T17] usb 4-1: Product: syz [ 463.340388][ T17] usb 4-1: Manufacturer: syz [ 463.345084][ T17] usb 4-1: SerialNumber: syz 23:59:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 463.497056][ T8484] usb 1-1: Using ep0 maxpacket: 32 [ 463.508939][ T17] usb 4-1: config 0 descriptor?? [ 463.553474][ T17] gspca_main: sq930x-2.14.0 probing 041e:403c [ 463.616965][ T8484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 463.771860][T10898] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 463.818820][ T8484] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 463.828221][ T8484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.836417][ T8484] usb 1-1: Product: syz [ 463.841016][ T8484] usb 1-1: Manufacturer: syz [ 463.845742][ T8484] usb 1-1: SerialNumber: syz 23:59:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 463.984795][ T8484] usb 1-1: config 0 descriptor?? 23:59:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 464.239368][ T17] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 464.245477][ T17] sq930x: probe of 4-1:0.0 failed with error -71 23:59:33 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r0, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 464.314350][ T17] usb 4-1: USB disconnect, device number 5 [ 464.350307][ T8484] usb 1-1: USB disconnect, device number 50 [ 464.420926][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:33 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r0, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 465.069712][ T3126] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 465.077702][ T8484] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 465.156779][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:34 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r0, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 465.317426][ T8484] usb 1-1: Using ep0 maxpacket: 32 [ 465.417753][ T3126] usb 4-1: device descriptor read/all, error -71 [ 465.437734][ T8484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 23:59:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 465.617768][ T8484] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 465.627321][ T8484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.637067][ T8484] usb 1-1: Product: syz [ 465.641326][ T8484] usb 1-1: Manufacturer: syz [ 465.646012][ T8484] usb 1-1: SerialNumber: syz [ 465.799608][ T8484] usb 1-1: config 0 descriptor?? 23:59:34 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100007ed515205e0483028bcb3ab6030109021b0001000000000904000023301cfb0009050a000000000000"], 0x0) 23:59:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 465.968684][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 466.016916][ T8484] usb 1-1: can't set config #0, error -71 [ 466.047735][ T8484] usb 1-1: USB disconnect, device number 51 [ 466.657869][ T8484] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 466.904496][ T8484] usb 1-1: Using ep0 maxpacket: 32 23:59:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 467.029539][ T8484] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30 [ 467.040677][ T8484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 467.050796][ T8484] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35 23:59:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 467.278344][ T8484] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 467.287740][ T8484] usb 1-1: New USB device strings: Mfr=58, Product=182, SerialNumber=3 [ 467.296090][ T8484] usb 1-1: Product: syz [ 467.300664][ T8484] usb 1-1: Manufacturer: syz [ 467.305367][ T8484] usb 1-1: SerialNumber: syz [ 467.381052][T10998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 467.497699][ T8484] usb 1-1: config 0 descriptor?? [ 467.671273][T11013] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:59:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 467.828033][ T8484] usb 1-1: USB disconnect, device number 52 23:59:37 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x0, 0x46}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20000050) prctl$PR_SET_DUMPABLE(0x4, 0x7) connect$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote={[], 0x1}}, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x1, 0x1, 0x80, 0x40}, {0x5, 0x86, 0x1, 0x5}]}) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000240)=""/8, 0x8, 0x1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000340)=""/17, &(0x7f0000000380)=0x11) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000003c0)=""/118) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000880)={&(0x7f0000000440)={{@host, 0x6}, {@hyper, 0x99}, 0x400, "e72d8c21b66696c807e5811f4c1331fe2ffcf8a066db5d9ff0d815974d12b32ea3fa295843918e082118ee057c0f03f021eabac75d0751f9c3cbdca3d4bdbfe25f87f81173f310b90a9cf0bce112a4717adb6056dbda727502f94ffaaa5509f54e7874077e91569e775f9c45585fa3ee1c55131bf90b8dd082d67ad2ef369286f2558068d5b476aeaf11152181eee6ad576a2fbf7fd2ed021c97aa3e6b69c735603a54030ad400b78efc1872d97989e24f960f8ec6e7e51925be78f6ed8e18ef36394e3683a6d9206fa47a0be03d3903af8bd8c574930bc572297c5257e7424bbc553af8a522d52967589aef0cb6ed0ecce0cc717f8eebd1dadafdbf986149eb44f64babe4646050e345a06a9b338c414b63862850016e24248076a961ebeada3be4e5ae856b4a5e423a20b1db4a7e5def0649443d054a4b0c82095d9b7e003f84bf0b93767f6c957de19c61d91da9a5170b4f0a4acfbc0349677faafae8d0bbef50eec5d4c1ae330255015d36af57e5f317b90325049b35da9498b75559b5bce2e33bbd7d01c38c889084be68b3e3508f0ee295054fab3f47ed8a0a3eb8ca1a92dfd8de2e8e6071c8e898918292bd9c52b0995501576872a8ea4605a64f29b27990aa7189c93ce57d86d31e15d2ed96e6d1411ba8cc19213c82fcab4f856ef93804708b7b7b0096b16feeabe06c99ae18a35c0a52645d0d0cec42579037a56e46cbc940228769e958a23163440a00aed25f52b1b2d1c701a7b7193c19fcf5ec5aa96efd3ea5e80527c11dca14821a5baf1d69bfd79755e16e4fe76771d544a8c0df7cb4d61a7b979b574cd2b00b857878ecc0a033bd9d1028ebe34ccc3e4990d3a42d0571e097c4e8ca86ccbd2ce7ffb7e8f055a132619f0c18ec4f70eaddfbe01d6ffc95b40cbd4ec89914c7584ad7a69caa98c5cefa87586534597c279643d8881f56891508b6db38a96c1ce32a44f6f235b3b8a103636a17e243e78b880c15c7b817e758f6dfd1442f9e644a3d46088caca47d179abfbbf859c255a758dfeb663a16d01e7bc83251a47d993632c56368c3f05e687e1d2d5cae5a15a7a1fae96ca766df521ceb09255e1cd01a1af405555a902807a18ea7d0991ef25cf936e82096d5578cf136a521c3fa7a5300a578326ee290496a5b2fa31374b257ced7b0e9150ee2adc0bd3a083ff31d5fe410888d51fc43c1eb55729816e534faf7ca6fc497a505930d8155c9557e80598095f45acc7e07e005bc445f73e8b7a70623e49d9676c0ec91a3d92cc9c89aee47cc012961ac01dfff194057263593c797cf96b130211731647768f5c60e7625cdae4e27926a254619511d5be2a455ed9e1a95e5b80a7567d406b86c7419f23f717c24cecadd1c838dd0746afc85f819061f2a434929a540a323503fb7c17638f8e8edcdfc40657b5dc3b6bd5be2366451c4"}, 0x418, 0x80000000}) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000008c0), 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd4, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3451}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0x40) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000b40)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f00000010c0)={0x9, &(0x7f0000000b80)=[{@none}, {@none}, {@fixed}, {@fixed}, {@none}, {@none}, {@none}, {@fixed}, {@none}]}) prctl$PR_GET_KEEPCAPS(0x7) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000001100)=0x20000000) write$P9_RFLUSH(r4, &(0x7f0000001140)={0x7, 0x6d, 0x1}, 0x7) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001580)={0x0, 0x6, 0x3, 0x1}) [ 468.407313][T11041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 468.856935][ T8473] usb 1-1: new high-speed USB device number 53 using dummy_hcd 23:59:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 469.112855][ T8473] usb 1-1: Using ep0 maxpacket: 32 [ 469.210754][T11058] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 469.248814][ T8473] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30 [ 469.260231][ T8473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 469.270196][ T8473] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35 [ 469.400489][T11065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 23:59:38 executing program 0: sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x10001, 0x5) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d8a77c33"}, 0x0, 0x0, @planes=0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0) openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 23:59:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 469.476993][ T8473] usb 1-1: string descriptor 0 read error: -71 [ 469.483441][ T8473] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 469.492839][ T8473] usb 1-1: New USB device strings: Mfr=58, Product=182, SerialNumber=3 23:59:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 469.617720][ T8473] usb 1-1: config 0 descriptor?? [ 469.646280][ T8473] usb 1-1: can't set config #0, error -71 [ 469.712133][ T8473] usb 1-1: USB disconnect, device number 53 [ 470.258311][ T8473] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 470.460224][ T8473] usb 1-1: device descriptor read/64, error 18 [ 470.607042][T11081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 470.738313][ T8473] usb 1-1: new high-speed USB device number 55 using dummy_hcd 23:59:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:39 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100007ed515205e0483028bcb3ab6030109021b0001000000000904000023301cfb0009050a000000000000"], 0x0) [ 470.936877][ T8473] usb 1-1: device descriptor read/64, error 18 23:59:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 471.062526][ T8473] usb usb1-port1: attempt power cycle [ 471.434612][T11101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 471.616944][ T8484] usb 4-1: new high-speed USB device number 8 using dummy_hcd 23:59:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 471.797463][ T8473] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 471.868993][ T8484] usb 4-1: Using ep0 maxpacket: 32 23:59:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 471.985878][ T8473] usb 1-1: device descriptor read/8, error -61 [ 471.989007][ T8484] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 35, using maximum allowed: 30 [ 472.003129][ T8484] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 472.013069][ T8484] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 35 [ 472.269394][ T8473] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 472.277580][ T8484] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 472.288428][ T8484] usb 4-1: New USB device strings: Mfr=58, Product=182, SerialNumber=3 [ 472.297242][ T8484] usb 4-1: Product: syz [ 472.301510][ T8484] usb 4-1: Manufacturer: syz [ 472.306198][ T8484] usb 4-1: SerialNumber: syz [ 472.400068][T11120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 472.430388][ T8484] usb 4-1: config 0 descriptor?? [ 472.457844][ T8473] usb 1-1: device descriptor read/8, error -61 [ 472.590508][ T8473] usb usb1-port1: unable to enumerate USB device [ 472.741172][ T8484] usb 4-1: USB disconnect, device number 8 [ 472.976986][T11110] IPVS: ftp: loaded support on port[0] = 21 [ 473.803881][T11110] chnl_net:caif_netlink_parms(): no params data found [ 474.258604][T11110] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.265966][T11110] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.276193][T11110] device bridge_slave_0 entered promiscuous mode [ 474.332771][T11110] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.342167][T11110] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.352097][T11110] device bridge_slave_1 entered promiscuous mode [ 474.490047][T11110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.550983][T11110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.708081][T11110] team0: Port device team_slave_0 added [ 474.728252][T11110] team0: Port device team_slave_1 added [ 474.807987][ T8925] Bluetooth: hci4: command 0x0409 tx timeout [ 474.860316][T11110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.867600][T11110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.894667][T11110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.933036][T11110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.940452][T11110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.968452][T11110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.111998][T11110] device hsr_slave_0 entered promiscuous mode [ 475.127572][T11110] device hsr_slave_1 entered promiscuous mode [ 475.150542][T11110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.160449][T11110] Cannot create hsr debugfs directory [ 475.577354][T11110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 475.621484][T11110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 475.663668][T11110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 475.703814][T11110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 476.440189][T11110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.482179][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 476.493199][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 476.514628][T11110] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.538601][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 476.549552][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 476.559050][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.566278][ T8484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.639271][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 476.648715][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 476.658779][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.668931][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.676165][ T8484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.685445][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 476.696758][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 476.707884][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 476.718533][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 476.775826][T11110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 476.786463][T11110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.843152][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 476.853458][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 476.864084][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 476.874542][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 476.884302][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.894949][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 476.897411][ T8473] Bluetooth: hci4: command 0x041b tx timeout [ 476.904435][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 476.964198][T11110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.028836][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 477.038351][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 477.046219][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 477.262649][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 477.272995][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.352430][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 477.362974][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 477.392426][T11110] device veth0_vlan entered promiscuous mode [ 477.401639][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 477.412667][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 477.467596][T11110] device veth1_vlan entered promiscuous mode [ 477.558873][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 477.568524][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 477.579352][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 477.590986][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 477.629072][T11110] device veth0_macvtap entered promiscuous mode [ 477.683307][T11110] device veth1_macvtap entered promiscuous mode [ 477.794304][T11110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.805119][T11110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.815345][T11110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.827065][T11110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.837355][T11110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.847926][T11110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.861942][T11110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.869909][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 477.879574][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 477.889210][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 477.899089][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.955948][T11110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.967887][T11110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.977992][T11110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.988620][T11110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.998681][T11110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 478.009302][T11110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.019374][T11110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 478.029991][T11110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.043972][T11110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.052201][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 478.062291][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 478.103753][T11110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.113527][T11110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.122644][T11110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.131573][T11110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.919129][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.927128][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.955345][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 478.987378][ T8925] Bluetooth: hci4: command 0x040f tx timeout [ 479.385771][ T8342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.393895][ T8342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.522660][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:59:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x18) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000ec3a9f079b09a618ffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8}]}}]}, 0x3c}}, 0x0) 23:59:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:49 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ed515205e0483028bcb0102030109021b0001000000000904000001301cfb0009050a000000000000c287331e5abc2552edd8a3d73e58bbe9affe6daf60045c252f82861f49e9cd8a865218cd2196b8702e637772bef66630bfd1243c3a702bee5c5d271ce6204cb81069df50945d46ac114df9ab61737705be3b16875309b02c1ed13475937a9daade00"/154], 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4008641a, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[0x1, 0xf324, 0x0, 0x7fff, 0x38, 0x3, 0x5, 0x6]}) 23:59:49 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x8, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) [ 481.046978][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 481.151734][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 481.427491][ T8925] usb 1-1: new high-speed USB device number 58 using dummy_hcd 23:59:50 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={r6, @in={{0x2, 0x4e21, @loopback}}}, 0x88) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={r6, 0x3}, 0x8) sendto$inet6(r3, &(0x7f0000000640)="23000000220009bb80b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x15) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x20040004, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 23:59:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 481.697971][ T8925] usb 1-1: Using ep0 maxpacket: 32 23:59:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 481.827836][ T8925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 481.997978][ T8925] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 482.007786][ T8925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.016892][ T8925] usb 1-1: Product: syz [ 482.021168][ T8925] usb 1-1: Manufacturer: syz [ 482.025868][ T8925] usb 1-1: SerialNumber: syz 23:59:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x18) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000ec3a9f079b09a618ffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8}]}}]}, 0x3c}}, 0x0) [ 482.289965][ T8925] usb 1-1: config 0 descriptor?? [ 482.297871][T11456] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 23:59:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 482.573295][T11463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 482.863353][ T8925] usb 1-1: USB disconnect, device number 58 23:59:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000019000100000000000015000100000000000000000094cbc359086428ed136b5e75030000002817d2f50b5b46a133e69eba8ece1b755a"], 0x34}}, 0x0) 23:59:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8, 0x1, 0x0, 0xf0ffffff}]}]}, 0x54}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000000)=0x4) [ 483.487230][ T8925] usb 1-1: new high-speed USB device number 59 using dummy_hcd 23:59:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 483.749884][ T8925] usb 1-1: Using ep0 maxpacket: 32 [ 483.884375][T11507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x200000041c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x40240, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, &(0x7f0000000040)={[0xff]}, &(0x7f0000000180), 0x8) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000200)={0xfff}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000240)={0x7, 0x79, 0x1}, 0x7) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x15, 0x0, 0x0, "d031b4a252850b6ac5d864f9f2c2ffec"}, 0x15, 0x1) fallocate(r2, 0x11, 0x0, 0x10000) r4 = dup(0xffffffffffffffff) read$char_usb(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000280)=""/143, 0x8f) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000000)=0x751ace8) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000340)=""/156) sendfile(r2, r3, 0x0, 0x11f08) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 484.558156][ T8925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 23:59:53 executing program 0: syz_usb_connect(0x4, 0x537, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x8) [ 484.888021][ T8925] usb 1-1: string descriptor 0 read error: -71 [ 484.894614][ T8925] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 484.904089][ T8925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.103129][ T8925] usb 1-1: config 0 descriptor?? [ 485.148965][T11526] IPVS: ftp: loaded support on port[0] = 21 [ 485.197168][ T8925] usb 1-1: can't set config #0, error -71 [ 485.285529][ T8925] usb 1-1: USB disconnect, device number 59 [ 485.402284][ T32] audit: type=1804 audit(1609286394.098:2): pid=11530 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir364039559/syzkaller.0xEsCv/23/file0" dev="sda1" ino=15916 res=1 errno=0 [ 485.426467][ T32] audit: type=1804 audit(1609286394.158:3): pid=11528 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir364039559/syzkaller.0xEsCv/23/file0" dev="sda1" ino=15916 res=1 errno=0 23:59:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:54 executing program 4: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000008000000008000000524700006201", 0x66, 0x400}, {&(0x7f0000010200)="010000000000050008", 0x9, 0x560}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {&(0x7f0000011a00)="504d4d00504d4dff", 0x8, 0x8000}, {&(0x7f0000013b00)="ed41000000100000dff4655fe0f4655fe0f4655f000000000000040008", 0x1d, 0x22080}, {&(0x7f0000013c00)="8081000000180000dff4655fdff4655fdff4655f00000000000001001000000010000800000000000af3", 0x2a, 0x22100}], 0x0, &(0x7f0000014900)) [ 485.704632][T11528] IPVS: ftp: loaded support on port[0] = 21 23:59:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:55 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="7ef76e27ab00d01d8ab8c3870bc7b4c74fd515205e0483028bc40102030109021b0001000000000904000001300600000000080000000000003e5c3bda01009fa852ce2629ecf325fdd83cf54f8eea00000000a5a8a2eb5e1000ec78a1ea9f8ff8a77eb8faa8292d96fa42d8d16ee972a8a41638b812a0c3bda968ed5d526950e50c7a73cd10b22843d57100e6252621268dfe216bb63865674caed91b8edff53f581770279c36bf1887b16367ec5348970ac677fef26f34947a4cc99b23e6b70d"], 0x0) r0 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4000, 0x0) bind$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) [ 486.567941][T11391] Bluetooth: hci0: command 0x0406 tx timeout [ 486.690874][T11594] EXT4-fs error (device loop4): ext4_ext_check_inode:459: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 0, max 0(0), depth 0(0) [ 486.758507][T11599] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:59:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 486.992504][T11594] EXT4-fs error (device loop4): ext4_quota_enable:6370: comm syz-executor.4: Bad quota inode # 3 [ 487.181086][T11594] EXT4-fs warning (device loop4): ext4_enable_quotas:6410: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 487.415262][T11594] EXT4-fs (loop4): mount failed [ 487.786411][T11614] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 487.898017][ T3126] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 488.092579][ T3126] usb 1-1: device descriptor read/64, error 18 23:59:56 executing program 4: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x400, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040a61200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0, 0x4}, 0x1c) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x2) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000000)) 23:59:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 488.379751][ T3126] usb 1-1: new high-speed USB device number 61 using dummy_hcd 23:59:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 488.577036][ T3126] usb 1-1: device descriptor read/64, error 18 23:59:57 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10010, 0xffffffffffffffff, 0x4fb53000) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r1, 0x29, 0x31, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x17}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x243f97b3feb091c5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) close(r0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000040)={r0, 0x0, 0x7, 0x6}) getpeername$l2tp6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x20) [ 488.697664][ T3126] usb usb1-port1: attempt power cycle [ 488.744733][T11626] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 488.755310][T11626] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 489.144865][T11626] bridge0: port 3(veth3) entered blocking state [ 489.154372][T11626] bridge0: port 3(veth3) entered disabled state [ 489.228785][T11626] device veth3 entered promiscuous mode [ 489.252306][T11627] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 489.718417][ T3126] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 489.889423][ T3126] usb 1-1: device descriptor read/8, error -61 23:59:58 executing program 4: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x400, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040a61200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0, 0x4}, 0x1c) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x2) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000000)) 23:59:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 23:59:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000400000019000000900100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000028305c8a835f4f4da440baa59e2884cb010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x2000}], 0x0, &(0x7f0000013a00)) open(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f00000001c0)={0x1, 0x2819}) link(&(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0\x00') 23:59:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(0x0, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 490.157877][ T3126] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 490.337094][ T3126] usb 1-1: device descriptor read/8, error -61 [ 490.445232][T11655] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 490.458054][T11655] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 490.458494][ T3126] usb usb1-port1: unable to enumerate USB device [ 490.561180][T11657] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 490.571973][T11657] EXT4-fs (loop3): group descriptors corrupted! [ 490.846578][T11655] bridge0: port 4(veth5) entered blocking state [ 490.855515][T11655] bridge0: port 4(veth5) entered disabled state [ 490.933233][T11655] device veth5 entered promiscuous mode [ 491.014241][T11658] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:00 executing program 0: openat$dlm_plock(0xffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x383600, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) [ 491.575049][T11657] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 491.585323][T11657] EXT4-fs (loop3): group descriptors corrupted! 00:00:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:00 executing program 3: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000efdd79b7c3654313ac0cec53e79dcbaf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="03", 0x1, 0x643}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1800}], 0x0, &(0x7f0000000080)=ANY=[]) 00:00:00 executing program 4: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x400, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040a61200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0, 0x4}, 0x1c) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x2) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000000)) [ 492.227521][ T7] usb 1-1: new high-speed USB device number 64 using dummy_hcd 00:00:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 492.499415][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 492.601165][T11692] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 493.057817][T11696] EXT4-fs error (device loop3): ext4_quota_enable:6368: comm syz-executor.3: inode #50331648: comm syz-executor.3: iget: illegal inode # [ 493.165174][T11699] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.175042][T11699] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.394058][T11696] EXT4-fs error (device loop3): ext4_quota_enable:6370: comm syz-executor.3: Bad quota inode # 50331648 [ 493.396083][T11699] bridge0: port 5(veth7) entered blocking state [ 493.411873][T11699] bridge0: port 5(veth7) entered disabled state [ 493.421048][T11699] device veth7 entered promiscuous mode [ 493.447694][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 493.498826][T11696] EXT4-fs warning (device loop3): ext4_enable_quotas:6410: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 493.557573][T11696] EXT4-fs (loop3): mount failed [ 493.638687][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 493.648164][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.656343][ T7] usb 1-1: Product: syz [ 493.660896][ T7] usb 1-1: Manufacturer: syz [ 493.665665][ T7] usb 1-1: SerialNumber: syz [ 493.890929][ T7] usb 1-1: config 0 descriptor?? 00:00:02 executing program 3: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000efdd79b7c3654313ac0cec53e79dcbaf010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="03", 0x1, 0x643}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1800}], 0x0, &(0x7f0000000080)=ANY=[]) 00:00:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 494.215861][ T7] usb 1-1: USB disconnect, device number 64 00:00:03 executing program 4: ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7, 0x2, 0x6, 0x0, {0x3}, 0x0, 0x40}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x400, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040a61200", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0, 0x4}, 0x1c) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x2) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000000)) [ 494.622779][T11744] EXT4-fs error (device loop3): ext4_quota_enable:6368: comm syz-executor.3: inode #50331648: comm syz-executor.3: iget: illegal inode # [ 494.658018][T11745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 494.664905][T11744] EXT4-fs error (device loop3): ext4_quota_enable:6370: comm syz-executor.3: Bad quota inode # 50331648 [ 494.969771][T11744] EXT4-fs warning (device loop3): ext4_enable_quotas:6410: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. 00:00:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 495.195761][T11744] EXT4-fs (loop3): mount failed 00:00:04 executing program 0: syz_usb_connect(0x0, 0x1bc, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x80, 0xd2, 0xb1, 0x20, 0x7ca, 0xb808, 0x5d68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1aa, 0x4, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd2, 0x1, 0x0, 0x93, 0x95, 0xe5, 0xea, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x800, 0x9, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x80, 0x3, 0x7, 0x7f}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1f}, @dmm={0x7, 0x24, 0x14, 0x28, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x3f, 0x1000}, @mdlm={0x15, 0x24, 0x12, 0x8000}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xde}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0x200, 0x5}, {0x6, 0x24, 0x1a, 0x80, 0x1}, [@mdlm_detail={0x12, 0x24, 0x13, 0x7, "a7258210c9992fe85ba62ce83b72"}, @mdlm_detail={0xc9, 0x24, 0x13, 0x0, "7a6f5ce7a9fcd68f6c569681fd5c931e4ede3e27bc824110fc0a362e0c0d27987a8f399efab75bf9e96a3d54b34e39fa35a4c5581a8c4c641b434e42cdf0f11338d4ae4d42cda4488554db072ccbe5d7f6de42bb20a9e55bceb76003c7cf82643cc321cbe9b8434b05551365b8354038944db8c42e6ea0ae9ededc4a9b0661bdc21ec2e6f5df0032f6da975543dcaa57aa0cc7191c64eb726ed3e37ff0d373677a576ba2eebc1d58874e4b37afb15018c990b37ce20a0cbf05c2bd2c66cb212da57d6862fd"}, @obex={0x5, 0x24, 0x15, 0x9}]}]}}, {{0x9, 0x4, 0x3, 0x1f, 0x0, 0xfc, 0x16, 0x7b, 0x9, [@hid_hid={0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x7a}}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0x7f}, [@mixer_unit={0xa, 0x24, 0x4, 0x81, 0x0, "7c42bb13c6"}]}]}}, {{0x9, 0x4, 0x69, 0x73, 0x0, 0x94, 0xdf, 0x5e, 0x5}}, {{0x9, 0x4, 0x77, 0x0, 0x0, 0xcc, 0x24, 0xe8, 0x8, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x4, 0x40, 0x81, "8e8453b8b48cc0"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6, 0x9, 0xd, "89674d857a"}]}]}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001c00)={{0x12, 0x1, 0x0, 0xb9, 0x80, 0x46, 0x8, 0x18b4, 0x1689, 0x242, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xd8, 0x3a, 0x80}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000340)={0xc, &(0x7f00000001c0)={0x40, 0x21, 0x8c, {0x8c, 0x30, "b0dd0ede6a7a8d03de055d4ce34841321b91b5518048ae188c057a67aef977fd2ac6ce74aecf76664ad98e7c6a6e77f57d74a00f00e5c39effcce3e1b97e4d2581b9c70743b73a7632900a9711f2ea4a34478df8af7452131678c40610403bb0200c9eec9eb0f37bbf070c02e7bf6c7b2f3db730944a296bdfe64b3873ee70a20c1753c6fe867e591714"}}, &(0x7f0000000280)={0x0, 0x3, 0xaa, @string={0xaa, 0x3, "4bc61faf896399151bb08136a3e6d07145b7ff86cfd4b4717ef7d6e2ef2c60dbdaf20786665b4a9ff4e491dacfc79ab4d7dab5a905e51c85f58e32b2e90ae8cec318a89149fcba992123c7a1222bea141837d29f561d83cf70fedf190a9dc9db5c5225727c7414046955b194730564e1fe2214478d78798b3896734ba0a552ded838b28f552fa8d14bffba03c93056b660c71f3892acbee4963724c24d18c96c78d468a9243104bb"}}}, &(0x7f0000000600)={0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="c00b3f0000005650832e917258e8db9145b8a004f4b04efd0dba00655e41f12936de955b739e0c61be18a8deac4e34f9712e19f663ed42fcd3f00b0000000000000000001cfd6b7dab1a17da2bac661ce4a70a0417a846f591e8fe39a9f81db3a3711077339d1f5978715373f42aeb771b70f26ac17d9f33ade47a89e7ad490c1cf1b7aebeda4f158d3498beacdbcffb"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0xd2, {0xd0, "28cd4562f88e6de4eaafc7fb63547e22ccabb8eedc6e87ffeddc91edb3007e2a9025aaad4d4c8539ec5f58564057079ab60118195466a6a8edb8209aec32cbc93de0fbca8b27f884d62e211bbffc5e50fdf50adae6d02f72b1390f2664fd3b1afc0855b8655748b6ab116e3d80e4b980c41cb91780996766ffcb6e16de6c92378b60553325b57988eca23abe5f187c77d147d5d75a479849ec7423326c41dade562c2c4028be72c6f4967153211b5b246d6c18fee647614f86870761a49b7bada4eb3f0c3455e07a74bb991bf7235926"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0xff}}) [ 495.416374][T11759] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 495.426684][T11759] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. 00:00:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 495.853182][T11759] bridge0: port 6(veth9) entered blocking state [ 495.862419][T11759] bridge0: port 6(veth9) entered disabled state [ 495.931357][T11759] device veth9 entered promiscuous mode 00:00:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 496.417781][T11775] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 496.649923][T10380] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 496.867912][T11776] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 496.876417][ T2969] Bluetooth: hci1: command 0x0406 tx timeout [ 497.209208][T10380] usb 1-1: Using ep0 maxpacket: 32 [ 497.328293][T10380] usb 1-1: config 0 has an invalid interface number: 210 but max is 3 [ 497.336680][T10380] usb 1-1: config 0 has an invalid interface number: 129 but max is 3 [ 497.345540][T10380] usb 1-1: config 0 has an invalid descriptor of length 132, skipping remainder of the config [ 497.356090][T10380] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 497.365272][T10380] usb 1-1: config 0 has no interface number 0 [ 497.371706][T10380] usb 1-1: config 0 has no interface number 1 00:00:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r4 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 497.380105][T10380] usb 1-1: config 0 has no interface number 2 [ 497.386342][T10380] usb 1-1: too many endpoints for config 0 interface 129 altsetting 0: 124, using maximum allowed: 30 [ 497.397941][T10380] usb 1-1: config 0 interface 129 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 124 [ 497.411429][T10380] usb 1-1: config 0 interface 210 has no altsetting 0 [ 497.418483][T10380] usb 1-1: config 0 interface 3 has no altsetting 0 00:00:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 497.909788][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 498.048511][T10380] usb 1-1: New USB device found, idVendor=07ca, idProduct=b808, bcdDevice=5d.68 [ 498.057946][T10380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.066039][T10380] usb 1-1: Product: syz [ 498.070763][T10380] usb 1-1: Manufacturer: syz [ 498.075458][T10380] usb 1-1: SerialNumber: syz [ 498.215804][T10380] usb 1-1: config 0 descriptor?? 00:00:07 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x5c6, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, 0x0) r0 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x22a641, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x7ff, 0x4) [ 498.435590][T11805] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 498.659764][T11808] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 498.714293][T11771] udc-core: couldn't find an available UDC or it's busy [ 498.721820][T11771] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 499.062872][T10380] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in cold state, will try to load a firmware [ 499.102504][T10380] usb 1-1: Direct firmware load for dvb-usb-dib0700-1.20.fw failed with error -2 [ 499.112002][T10380] dvb-usb: did not find the firmware file 'dvb-usb-dib0700-1.20.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware 00:00:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 499.317109][T10380] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in cold state, will try to load a firmware [ 499.331138][T10380] usb 1-1: Direct firmware load for dvb-usb-dib0700-1.20.fw failed with error -2 [ 499.341039][T10380] dvb-usb: did not find the firmware file 'dvb-usb-dib0700-1.20.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware 00:00:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 499.508455][T10380] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in cold state, will try to load a firmware [ 499.519711][T10380] usb 1-1: Direct firmware load for dvb-usb-dib0700-1.20.fw failed with error -2 [ 499.532473][T10380] dvb-usb: did not find the firmware file 'dvb-usb-dib0700-1.20.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 499.628625][ T3126] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 499.711334][T10380] usb 1-1: USB disconnect, device number 65 [ 499.783574][T11835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.868582][ T3126] usb 5-1: Using ep0 maxpacket: 8 [ 499.988186][ T3126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.999614][ T3126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.010469][ T3126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 500.020433][ T3126] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 500.030477][ T3126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 500.040348][ T3126] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 500.353577][T10380] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 500.398562][T11852] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.498169][ T3126] usb 5-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.40 [ 500.507515][ T3126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.515617][ T3126] usb 5-1: Product: syz [ 500.520109][ T3126] usb 5-1: Manufacturer: syz [ 500.524822][ T3126] usb 5-1: SerialNumber: syz 00:00:09 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) r0 = semget$private(0x0, 0x2, 0x8) semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f0000000000)=""/45) 00:00:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 500.749530][ T3126] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 500.760393][ T3126] usb-storage 5-1:1.0: USB Mass Storage device detected 00:00:09 executing program 3: r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf250c0000006c000280080001000e0900003c00038008000100001400000800010001000100080001000010000008000200090000000800010008000000080001000900000008000200ffffffff08000100018000001c0003800800020001c5f0b9e0865b329780000008000200080000000800020001040000"], 0x88}, 0x1, 0x0, 0x0, 0xc004}, 0x80) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x10000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000040)) r1 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x0, 0x220440) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000680)=@urb_type_iso={0x0, {0x0, 0x1}, 0x25, 0x0, &(0x7f0000000280)="a242efb1643d6b49e19bc4b75afdf3a900c4500ce25bb7d1e344110a2f4813fa03780276758c1445709707bcb09988844d16d2ed3e40bfe0792e2ff5b1191001f8a7a933f5536bd52276457495f47216316559641353eaf2d62ccc74e4c3b56a5aa35adc38ec31a80c81605ac381e10dfc0ecd191664da7fcfb7d1837f4d24d30cbed8e65ef6048e36205178d4ae0abfbf69fd52cece735713722965dac234ebb551182bca3e3bfff49c69af969f6a1d7474e255525ecb4b33309e9233614f3d0b64d00b23b66039272c28b5a89c2867ce60070c6644a3100e97d7290852889829085fdb20bcd4667c203860", 0xec, 0x5, 0xffff, 0x6, 0x8, 0xcf3, &(0x7f00000005c0)="155080d15573b0781972e05b3b25f0d0dcbd2eabc056402800433f8e38ce7fe2b9bc3f7933f6a05b960b434b0c6e4442ec992f5638cdd4570ce0dd88a97373df77401440642b5b9a1c1d95829db1f885c6640da9e48cb68f8f594e6caae9127f5920a0e3317549eef880275675ee3386524ff78376459fafb2555ea145356359635442dda2f70f00eaba92c48558dcef3d71d8", [{0x79, 0xffff, 0x7f}, {0x1ff, 0x6, 0x2}, {0x80, 0x6, 0x6}, {0x4, 0x0, 0x9}, {0xfffff7c2, 0x5, 0x6}, {0x8, 0x7, 0x2}]}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)) [ 500.853744][ T3126] scsi host1: usb-storage 5-1:1.0 [ 500.977020][ T3126] usb 5-1: USB disconnect, device number 2 [ 501.101944][T11870] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:10 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x208c0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') tkill(r0, 0xd) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 00:00:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 501.769181][ T3126] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 501.909709][T10380] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 502.016993][ T3126] usb 5-1: Using ep0 maxpacket: 8 00:00:10 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0xe0, 0x7f, 0x2, 0x8, @local, @ipv4={[], [], @rand_addr=0x64010102}, 0x700, 0x10, 0x3ff, 0x999}}) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f00000001c0)={0x3, {0x2, 0xaa3, 0x9, 0x5f}}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x119c, 0x13, 0x300, 0x70bd26, 0x25dfdbfe, {0x27, 0x7, 0x1, 0x2, {0x4e22, 0x4e23, [0x0, 0x3, 0x0, 0x2], [0x9e, 0x94, 0x0, 0x4], r2, [0x3, 0x1]}, 0x6, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x58, 0x1, "8e801c9c00cfa99aac5bad656e4b0e4adde4a2115bb0d2da55c60f277347fd7f8f37c238f3ddbb20b97e1ec32b81a86d759a9f31c3ec31c0f3882875e080d8df37b7c96d3085b41ffe8fd05d1a8312e61742e002"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "8c69f758d8ff157a841140ec1d86bd7a8df79025a445583b51a06534ae883d44a26d169fd876c2abfb60c75fecd955840a56db16c347d04f791c4dd11d7f3cb1cbd1a986cfc7ac16b71b5de963131d8c7d6e6d93879e0b7d9058adf37bcf360535678b042052f46e68d789ed86fb75695e164972ee3c15932c9c74ca66ef362b9848f7"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "3d67a601ee01f16da3d55928a367ed017ffa4ae76c83153b7aa41e4d0acab3934ec565040584a6be0490cd8e4c9444d747de0b9ab5a76f0074ede39322c4ba3a331b4a0bdc4a85475aa90628967865cb7b79c7e36fb09f1ad36f4d63ec31f47f0afef87952384a4f65d68c68637565a69f615029f6aafea97342334c15fb1398ee583f8d240bbaf089afbd2f297a124074236d7bbb690007bd63770b53fe3e50af1f17d54b0677a4bd7755fb73cec9d2e70afa9c4eec54a96768efaecb74794890f3687022b849ab538bb55217cb21eaafcafe265debb306be36a9380ac10e88c136b9926c4d34ad0028324295826a2871bee143cb102adbddfe8c1e6eec0260980a42a8116c010d61f0c3bfc1e78c4a97c0ce9548e0013e58b0fd4e7abf1efb999616b63fa11aa21e614cd1d8c3e30cd21251864231ed6abdddbc30c9588b32bd7936fdfdcd5d83377dab0127e82aff47a785da96189838d2e93ed142de316ffe6d38f37ae4a1869e2afbdc66badb3c9cf092cad0e42a5396acbde1f7e39102a66f0aead651576418bf517d2afa9d25f49f2b1ae3eb1ae164d0ac3cbe603c4b3352de8d353a87c3323e0ce580ee9d70139c50d8c8d32eed853e5034322a9837026cbe1a9adebcb1c3eb7bd6c50d557cef8b16670aa644b2a3ac64b567914f322b9ce784e3d778ab97e4dbee914612aeeef5e441d0b1efa1c4a001a805407dcaefd1aaba98501b80b6f3c1d3efbe661eae6a27c2e5c238d3b6e8c08a6cd79fa7a88123e1b3d45e70acec389c59f75076a88c12e6ec44d7822d23829fc6472cba96c0984dfcac8f03b42fcbf8465d8428a687e026342965a67a30e712eb05ed6767eea974db88863c0d2c11e23930dfb0694954a57690201c2abd7706a71a4d290102f5974e77a32ee4633a0a763cbad8e0b109bf924552cb51fb527342e435d1413eab07646832758b6af943b5242cb8c5fb364d3dd4545a3280a1f916756da76e0b15a311122394c411a6b4aa98d037985396b5c4998830f3f73891d1d9a643d42f183a73c496cd6161db8d2f7ad1c4569818a3eee3df350f0eef2eecd096c2ce05cb30484855ac19199c7476ce1365d5ea6df9a6ecf982e9a6a28d486806f61217db4a7a2e6e8b5f6b3ad7558dc24e71a6a780cc66da1da75525425e688011ad611f7f3321f1d8ab5f661821306f9e797703645d26876c01404e39e448bd1d33e92ff1933636c7963defa9fa785085273583f155ddc6dfed0b7a8ba2572b794780ff934791333f7e778f50ca8a27203c538837c93be1600ca1930362026e785217af078cf0c98948fcfd7a5c6ce47c78c7184120fda0045eca3b3b21e7932b26feefb032df5af3852e5c08b4f1b10a9800d5e6883b66b94082f39d973b9b77a6a33d6c061cfda0ef4574628c6fff9ae3ff49fb258ea5fb9e0e9e9aee6cc5051634264ddd75a612731bf36f1c8a40aa5e1fde93047636daea6a4ece9f0e0616d2930408d8639ebd6e657d679b9de4f582287ee5f0bfe01237c321a269a5c0edea582b8a58451271018244b68871176f0791a3ef3023c2b678ac076b599ffb5f6f24329cb578a63e60c3143ef74b676c885aab15b4cb0aecaf56c85c80991ff9064b1737c5b44e72cc25a8d483f2ced4065967ebd81e13606301165597f745bde0d5a084e3593e9590d799d961e72b14ff333de430f29643b9300ee9804ad44b6b213cf4caa639ae316fac746c0197fd747ba3664153fc85b1fc340422011bb30c8d98235d2b6a4b1c7b8c69d952147b29af62d0b159e74e9c42b8b747c14140d98e07ae6457033065975153be1b258a004c82642131d0d99215150ae58932aeb574c2efa6270bfaec911ef86770459e696848c9a1609492b5a6f64e4141e1b9259a63f1a9878c42731351501c3b69168603fb196e377a2180f0b030871f34e575d2c1eb3786d0dccf14217e3a6c04d04add1ed888affb90e402505ca6fe427a8463a5264323576958e92d1de943e8909fadcce49da0d2f5c8f167063c04047b3625d89b0ccaf6bfc0c91938860795bf35e439feaa6ac640d6df117e221e045efd2f24d01b66b92c81a9d90961d1cffb81ef1292d1918526b9abfb4ecc987adf7e730feaf774927afd404dfe8f4922580695c5615f3f8b76ecaf7fef6c48ca6793d8b7efc07be2304a9abd15232b3eba07f1d027ab045c61faa1d3733a52474b88f0fdb4447c255507ef1dc9fc9793cbae8b5b4b2b0ce04b7ddf2fb63403e8eb42a7d54fe59f0183d72a0882be40dcc5b96e96887f4f822a5011ad3fbde2407f4bad50d88e1549ee3d7460cdbbc7c993055366c6626d60bb471ee3c08c4082d6644fe6f63c266c69f5616aebf98bf3c4a3024895e524358e2c798b97c2aa31d3e8cb382529af12d3770ca8f07853730b0dd91408becf806f6bc83472d7816705e36780ef7651a82603ea1d09c9898b8cb9a944d99c2553698349055aa280cad5479926d8461f03514b617f7e419a6c8038e55fe7090bd5f57b1396e5f5d407022da71aa8bb9dd41c4e8688e0d6975cca9ad1bde7e257be9b6159833d5ff877a9dc44e59bcee4b28dd1a7163f74d24fbbc62c563f074002d7513cf340cb184aa05847afb8769558fcc709490909497e119ba47787a8cded9ec690e15044ff81b553c01cfae08380e8c2a2656b5be26c41cccd12720a5eeedc03527f4557ed757e08c8430ced6d684d4c65174b31d2dfec3fad188856d0b8210febb0ab2ddb45195f06f4f21d7166a9a17dcaa8d22cc0b7d6e4e4a75ca4d192c4283d2f0fac39e8decfc54b8e8eac50838c476fdedc52b1e30140099e72e18d285446c4070b040ff05ecf88fcf38fab53b167ef9d8b106a83137dc4781814cc43b368bc834516a2a510816bb100ca96be954c1ced8b943ce767a5c51381deabfb5f04aaffdaf55af9bfa1d84e9c8440453a62e50e2ef3f998efd6b72c530b6c39ccf6e3d8efb1ce2fd6164db39abaff179f3a8289ed7051351ea90ef7020c45ac46f8b651d3b112ea529437028bfe383883a5057b82ba89a724e8c8ff3de57b8a9515a0bda22ef531ca8256ee30b4f6cb211b7bddeab9240963136f19cdb9e52d7b1c4b4e19be219314fdfe275854904b186e6fec0aa0fe87f58f7441a09cb7ba4fbd878a13ab0c6527bd73bca6920e0725f5f9f6d83f3e3c449527b9ef49f36e674dd3af61b3b600c9f87c300adcd6ef9340404ffbcfa71238f4b4ac3182bb25de482a99ce5ef935bc38a7738aec8cd9eca3e110f751237cba193f3b326f355ff307249d549178a467561c16bca7e1951869cd348a67af043e983efea105078a4b950565d8043b92bec71cd630a557ceb94b377d4470eab48ebd205989903613ad85305791f09ef850c764abcc1e5acb3526cf4dae9d4be3a73a778ec0275f91bcc104fdf32c96cd8cbfb6adb2cbb622a1d58a720d5df52288098996f0070632be61e793288b116bb81c890571ca80ef76852595cd2b59c60a9ba5cb15f71b202d68b36f6ebff4bea4f070f7c2895e5a20ba186af75478d97799c7d2ab829660866b4ce76c56470680508294213c965985b27fa68f4df36318514f4ce92cebc2a03e6d1b95142fad062b112613da2439ef871b565a8635dd1a64954b451cb0b4171cb28d4adf2ff24106a8cee782f3c2a662e600f0057479e471f48ef84ad036dbdc70d9389a580dd3c694318d4d58b8f23a33907643884e10833f35ebfce90a3775cf7c93e716fb35f96f20241f4ecb5fca72bcebced7059d15dae5897719bacfdf26aa4308970b8580881312016c9af4a1cf33f0ecc585a343eb0ab81e04831884ad7924db8ccb38d6bd2451f01fa56d40ebd40479c13014c7138c11b777c7e82dd6f946df15ac5b419d31c94d2f9ec532e43529f76619a66cf0addc3d13f470c078ba99ed86425bcd87f886a24db77c014837a09060aa1aef6a504d07691275d1009864b1e107601679a7a1797804310f2b77bc939c253d7b6db1c2cb9573f677112e0266eb5c9a8e213cde5324d5a910128acc881c748768bf9718daf05a107a1248b4a6063e7261a1ff6acf3963761b2c6ca9e0ac90018873c6b4497237011cd301ef70784587b7f6c92177d5d6ad1886c6ceb763d0147535a18f597e42d38368c64d63723f5cba2c978d6b0d32239d14b011f20dd5a3c37f2a191a8bb72ff907a8382c7e844cc01a1bb00fedbecf4f02f2ea0e901b89592f46b48803cd2a9e987cc4a27211f77872e0aa6c82acedb77a849692c2bde6d2d05e5829dfec60ca2fd862bfc5f3d85d19a2789360b5cafa3386188e0f0e4be56478ff8cd40c18639570c2b2fb19c6a4f4dc1bcef6e0979a66cdc3bd77eba306e28e9ebc99a56de47f9937b1514115ad722f3b2125b52e0fe208837b3f63f56261ccbf74b4aa41f5f77fe1148f9cc509fde1d4ae33750c8f20a196a70a1f8fc1ae8a2c5692d9a2e437c180d88eb3bb13ae86a0d88262be1c732e88244d93a91d033ce6d22becf260a5d0a6fea9a5d6bd441c23831c25a4b98458ccc2dd57b0514824e15da2e80f94774d4a69ffe09b38f50c7772d27df2628a7eebc07b8e078cf60518991924339ecc96d90009c515f8795365035362979d5a834a9ca81026d15dfc58c427518b1461be8d2d9d473d6fe6e35fc5c4d48d2ffd20c427456937c467d2c17d16783977745862a55a48e40909b6681e32424d03389aea83e20fe0da3006939295df0e6d94acacd96ad32d4137acdcce5b5fd8511aa8919ecaf8ae055a4f6c4f159576a7ca7bf609bd9b307d5ae86f0d2c31ac892c970f42bfaa8b2f5a4ae83ec1a9470c28845277af6a3609684f03a55bc3e9cd5cf4541cfdcb2e29c57152364b79dad04a76947481e821ca5ae18f0aa8d4fd05ea7259c272300d96555cf713dd2c9fb60138fed3004fb95150b3f41ac119043b00202df7fa01690ffea956eaaad49ac66479ee64050246fd56177cee6fc73db9659a4d3dd01e3b4a9909ade44526e6ff64a8e7bddb04ca5369eb6865f64befa0c473b09a03410bbc99fffdeb7df3cd95d8364c43ab922951e017e1ae3be6c83c6a5e66f2c0e3a1144fbe3e6ceb5de0e580fd3c5c95d98853bbda72153e839688f22a3e6f9650a5fea090d5bbbabb2907297c685692a255c8a8d3e2cd04df90a92de30a0518098095f65a754419459542f9ef4a0b5b864e800c7519df1f5844add9ec42ca6253711897070b9d4bc8a8686794a5a65e1378a158009377eb7a89bcd9cef2d4d7774b8397195644b5e9c9f484cc87e85e383a0a77290b2b89e9bcbf5897e008f2901067db7d0a86f463fd3cfd81f9bbaab61518969f81d84c68f00ef4ed9e3cf8ae20493a3ceaa7db6127e2890b98f6e2a7db7f66bc8cca09eae06a57316bc5158c5513774a480a4e05df66ed0fddb07b9e7900c91172d0686f565813c4f6c7d2b21e1f57f8b1fbd36f8595d2445e70b8d5db1b67b5c291cf82fa3b69cb99e46cbcabe650149f9a67ca97f8468058dcb6d4c08ce10055998f48eb2727eea3aec0c967bd9a6a51f9453e5704018f88644dfd128a4b5f78a8866649cddce3732c1a3c617e879f07aebe2dc6d85a86c5ac9d9094a9c573d667fc2319c311f8326f9f0c19d3f0c54fa90d61215338cfd7af6f08f4a56b062682756172f68c930e4693ea6894556068ccd4d0f6e444aa0f8f73289979b7df22654ade315a30529ef686d9dfda89e8d5cd5226393b8588611f251a787a2ac947937cd8671155e2cd0b27f03d30dc5ed06af6a9a1e1a356046b15"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "09235241e0861a07d8b2e5ad78a91ffb1ca40335bbd10229fcca18b07537d3e721c21029ea2f1f812f8ff31f7524159a08b8b5825fe4518875e9370f14d1b87a95e5566a5c6bf71b5b1dc291598cdfebd28d5ddec35d74314e40e91b47d47c188cdf0e7ac1"}]}, 0x119c}}, 0x0) r3 = openat$vcs(0xffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x60142, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000001680)=""/4096) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) [ 502.115375][T11900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet6(0x10, 0x2, 0x15) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x301400, 0x0) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000080)=""/124) sendto$inet6(r2, &(0x7f0000000000)="1ba0000012001d0d89fdc5cbdd0457987028ed4dca14a7960f0f8ee8da78031c7660b08f810d", 0x26, 0x4, 0x0, 0x0) [ 502.562094][T10380] usb 1-1: Using ep0 maxpacket: 32 [ 502.628524][ T3126] usb 5-1: unable to read config index 0 descriptor/all [ 502.635707][ T3126] usb 5-1: can't read configurations, error -71 [ 502.688028][T10380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 00:00:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 502.920677][T10380] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 502.930448][T10380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.938843][T10380] usb 1-1: Product: syz [ 502.943111][T10380] usb 1-1: Manufacturer: syz [ 502.947905][T10380] usb 1-1: SerialNumber: syz [ 503.158368][T10380] usb 1-1: config 0 descriptor?? 00:00:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}]}, 0x50}}, 0x0) r1 = openat$cachefiles(0xffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x8000, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0)={0x0, 0x2710}, 0x8) [ 503.545780][T10380] usb 1-1: USB disconnect, device number 67 [ 504.021203][T11949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 504.898855][T10380] usb 1-1: new high-speed USB device number 68 using dummy_hcd 00:00:13 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) 00:00:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x20, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x140, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000000c0)={0x4}) 00:00:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x8000, 0x369, 0xffff}, 0xc) 00:00:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:14 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x9e, 0xa, 0x3, "7c5db6da21c549d258437a4c93ddf62d3721669361e8bfae4def8efbfe7dda5b", 0x31435641}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2044, 0x8]}, 0x8, 0x80000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000000c0)=""/81) sendfile(r0, r0, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000600)=@abs={0x1}, 0x6e) recvmsg(r3, &(0x7f0000000640)={&(0x7f0000000180)=@tipc=@id, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000400)=""/127, 0x7f}, {&(0x7f0000000480)=""/127, 0x7f}, {&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f00000002c0)}], 0x6, &(0x7f00000005c0)=""/84, 0x54}, 0x142) [ 505.789058][T11976] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:14 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 00:00:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_delrule={0x1c, 0x1e, 0x421, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000280)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000000b0103000000000003400000000108000240c0000000f507000340000000010800024000000005069225165977d669000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x80) 00:00:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc008641d, &(0x7f0000000140)={0x0, &(0x7f0000000040)=""/206}) 00:00:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 506.777113][T10380] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 506.932210][T11999] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 507.018013][T10380] usb 1-1: Using ep0 maxpacket: 32 [ 507.138275][T10380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 00:00:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/57, 0x39}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000200)=""/256, 0x100}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0xb00, 0x0) [ 507.428318][T10380] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 507.437722][T10380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.445807][T10380] usb 1-1: Product: syz [ 507.450277][T10380] usb 1-1: Manufacturer: syz [ 507.454971][T10380] usb 1-1: SerialNumber: syz [ 507.715167][T10380] usb 1-1: config 0 descriptor?? 00:00:16 executing program 4: mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x480) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/eevalbd0\x00'], &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='romfs\x00', 0x0, 0x0) 00:00:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, 0x0) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 508.096698][T10380] usb 1-1: USB disconnect, device number 69 [ 508.469408][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/57, 0x39}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000200)=""/256, 0x100}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0xb00, 0x0) [ 508.987633][ T7] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 509.268309][ T7] usb 1-1: Using ep0 maxpacket: 32 00:00:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 509.397934][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 00:00:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 509.588084][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 509.597691][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.605860][ T7] usb 1-1: Product: syz [ 509.610412][ T7] usb 1-1: Manufacturer: syz [ 509.615179][ T7] usb 1-1: SerialNumber: syz [ 509.794565][ T7] usb 1-1: config 0 descriptor?? 00:00:18 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$full(0xffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x0, 0x0) mq_notify(r1, &(0x7f0000000680)={0x0, 0x5, 0x0, @thr={&(0x7f0000000540)="81f9849c7a49364c20f9139a380ed42f3f7a6eb13c5d3a7d10b8a993ce043a7d4ca8b72228e165", &(0x7f0000000580)="e100daffda1296a8239ec53132ac911346fb36ce15e4855d0fc1c034f7a6388bf5b5e5a5e0066cb40c7229828111911519f12c3e7f6f0e3c6b3dfd2fb746ff93f733e8a4a308c971c844e1da34943eed2e44185f6de1473b46af7863ca7f4b514360567f05dd677db79d70f46efdf835bfa137aa1b476ceb833a3b9532eb00b372a7fd88a6f6679c60d71bca5f2232b528e9d08d6ddc2fc61386ea192d4aa7a143bdbe885e801645967ff2d57e5d4f7150389663a9fe094beee32f51622463ed56da444ca575e9a540ecfd"}}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = openat$proc_capi20ncci(0xffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x80400, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x170, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000810}, 0x8011) sendto$netrom(0xffffffffffffffff, &(0x7f0000000100)="fee29247507c12b1458a93fcebddd26a3cc534d282a7682f2800bac9234c24f2e0f51f016221f808f3c18d1ef60e45be7fad2ee3ef1a08a805a42c354c327967961fcc4907c1fc2aaad8ce95212b1c02388002c93323814aeeed9114bf6786477c24aa9508b9e39f65974761a9a3800682e3ba5344924281309cf008afbd5afdf1ca9cecd43ed3227f38214502e6b99d2491e12d9d7133f5da386e3dcd687781eacfc434262efa7c2f43962f9d1dd4090094e1e8e2b7767ef265abb3716aa1146347d845c3186342b785ed38d49d3dcef2669afae1f22bcd7bdf83c5917fde90d370d5f15926c9a958362641cb02e76e2d579a69729df0", 0xf7, 0x20000005, &(0x7f0000000200)={{0x3, @bcast, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default]}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ed515205e0483028bcb0102030109021b0001000000000904000001301cfb0209050a00040000000096ecde90fff73a96f8552fb5270557fe79e9fcc091ce64ef444b2b8eb7303281e13f8577454be689d012608e2d33a81757b21c80d0f7fc9f17e1b065776ecf016d0dc3d7278e126d84f05bf45ba4e0069676adc78197113045c004618665f42c32ec583aee2b2aad9ff3f970b4365a4a900ad64bf93d13e48a3972e3a44d453e1bbaa14553ee17358237e0f385fca57dbba52c9310fbc5ef6ecec31a33b86260d2733ebe236448624344200d2dbf640cabfa440e21880056c3a941"], 0x0) [ 510.008328][ T7] usb 1-1: can't set config #0, error -71 [ 510.051660][ T7] usb 1-1: USB disconnect, device number 70 [ 510.399256][T12074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:00:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, 0x0) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/57, 0x39}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000200)=""/256, 0x100}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0xb00, 0x0) 00:00:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 511.197035][ T2969] usb 1-1: new high-speed USB device number 71 using dummy_hcd 00:00:20 executing program 5: setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0x8, 0x4) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8008743f, &(0x7f0000000040)) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x200, 0x80) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x401}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f00000001c0)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000300)=r0, 0x4) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4004ae52, &(0x7f0000000380)=0x1ff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f00000003c0)={0xffff, 0x53b50c65, 0x140, 0xa5, 0x1, @discrete={0x1, 0xff}}) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000400)) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000440)={0x10000, 0xf000, 0x1, 0x3, 0x4}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)={0x43c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x38, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "82cf55de80f3"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_SRF={0xc, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xc8}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x204, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_SERVICE_INFO={0x8b, 0xb, "4e2ddf7f4b115f91537b1fb243fbdc759cfdfdccf8c50a5f794d4f95adbc2d2cd6a9380a70b1481af0321b89a3c6bf6c91a332fa349df3377a923d287c1352bbc0aa2c848efbab28dc08943cacec7d352005ab27498e29bbfd9a2eeed93423a181318d1e8b697c4db5a102e9192870c0d2bdd6c238d2d69931ead34e690b871d801362f180b059"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x158, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x40}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x1d4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0xc7, 0xb, "0e360fadffb3bfe5fcceb7052683a3ee798639579029b4c4f8c5afe5fe34185ba88151e4ae58b77cd942bb002ecb8ecb6305b1fa84b83eeb1a18846eaaa3e649730847c02ca3bd639f37bbbcf1fd80be296fb62ebdfb9817e0e7039a9dcf67d0129023ae24aadb334c4066d6d0e4c23da53a557206694663e0d987bbf9c4f3f99f521c8ace252e5ac91dc8c165b687e9ef889c3ceefb960822820c31faf1ab683d14d3e581cb2a97bacc206800b743ec12bf0e3877e02bf14c3ab176864bb87e104a55"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0xe8, 0xd, 0x0, 0x1, [{0x58, 0x0, "64b040c617e2b7c745108e45cbbc7eb5cb572a5c0eb790bfbe84899ba7db1230978d30f15929427d1f5078afa7974acc22c8e969f099c29bae23d5a8621e4236eb5206b0714ccd0c65b9b8e301f6a618efe9d316"}, {0x8c, 0x0, "9a7f1ea2641e33b8239a5b3cc9cd794ade1a0b4dbe169dc88bde398247af5bb75c907dc5632a8bbd1923231ed5d18c461690e03385fe1f143a1453ec9642c4ca3df43efd3a3f77b85933ad668a90a3c45db35d894279af713498a381bd8f2672be1a44c730bb78daf296d386b2266f4ca4be8effa6aaf46b9247ef430368a2b259ac89c82b51fd75"}]}]}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4894}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb4, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TESTDATA={0x61, 0x45, "30f1e67a3068cf56eacfbbaef9780f3f7939a916b46dd1b28a6d27c6bae1a4f9cafd46f8fc3b81df8072fc366e255d6d41b1a88df04ff02df33a14d01eca07986c9a48d2027a81d2d3dd25ae597d0f1435a04c1658406135eee72d0be0"}, @NL80211_ATTR_TESTDATA={0x33, 0x45, "53b5253abeb842661c7b1c5b66a803f6ffef5db68d4b090e0ce18772b66bd9628535b09fff276ee4c34120f676592f"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10000}, 0x890) write$FUSE_BMAP(r1, &(0x7f0000000b40)={0x18, 0x0, 0x0, {0x3}}, 0x18) connect$rds(r1, &(0x7f0000000b80)={0x2, 0x4e23, @multicast2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00)='nl80211\x00') sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x326}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000d00)={'filter\x00'}, &(0x7f0000000d80)=0x54) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) [ 511.477420][ T2969] usb 1-1: Using ep0 maxpacket: 32 [ 511.562938][T12086] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, 0x0) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 512.049326][ T2969] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 512.058629][ T2969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.066719][ T2969] usb 1-1: Product: syz [ 512.071242][ T2969] usb 1-1: Manufacturer: syz [ 512.075954][ T2969] usb 1-1: SerialNumber: syz 00:00:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 00:00:21 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/57, 0x39}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000200)=""/256, 0x100}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0xb00, 0x0) [ 512.274779][ T2969] usb 1-1: config 0 descriptor?? [ 512.671178][ T2969] usb 1-1: USB disconnect, device number 71 [ 513.025783][T12138] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 00:00:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 513.487895][ T8484] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 513.787545][ T8484] usb 1-1: Using ep0 maxpacket: 32 00:00:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') [ 515.574967][T12157] IPVS: ftp: loaded support on port[0] = 21 00:00:24 executing program 0: syz_usb_connect(0x1, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 00:00:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 00:00:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 516.137950][ T8484] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 516.147329][ T8484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.155435][ T8484] usb 1-1: Product: syz [ 516.286708][ T8484] usb 1-1: config 0 descriptor?? [ 516.380910][ T8484] usb 1-1: can't set config #0, error -71 [ 516.420256][ T8484] usb 1-1: USB disconnect, device number 72 [ 516.501513][T12242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 516.973013][T12157] chnl_net:caif_netlink_parms(): no params data found [ 517.231637][ T2969] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 517.304875][T12157] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.312518][T12157] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.323399][T12157] device bridge_slave_0 entered promiscuous mode [ 517.353799][T12157] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.361315][T12157] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.371630][T12157] device bridge_slave_1 entered promiscuous mode [ 517.443861][T12157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.457568][ T8472] Bluetooth: hci5: command 0x0409 tx timeout [ 517.481600][T12157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.507385][ T2969] usb 1-1: Invalid ep0 maxpacket: 32 [ 517.550168][T12157] team0: Port device team_slave_0 added [ 517.575786][T12157] team0: Port device team_slave_1 added [ 517.639214][T12157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.646329][T12157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.675143][T12157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.688592][ T2969] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 517.701024][T12157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.708314][T12157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.734635][T12157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.825795][T12157] device hsr_slave_0 entered promiscuous mode [ 517.836324][T12157] device hsr_slave_1 entered promiscuous mode [ 517.846224][T12157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.854789][T12157] Cannot create hsr debugfs directory [ 517.937139][ T2969] usb 1-1: Invalid ep0 maxpacket: 32 [ 517.943035][ T2969] usb usb1-port1: attempt power cycle [ 518.199325][T12157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 518.238125][T12157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 518.275099][T12157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 518.307527][T12157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 518.682228][ T2969] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 518.790876][ T2969] usb 1-1: Invalid ep0 maxpacket: 32 [ 518.872920][T12157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.957130][ T2969] usb 1-1: new low-speed USB device number 76 using dummy_hcd [ 518.963303][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 518.974325][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 519.009655][T12157] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.050958][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 519.061891][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 519.067528][ T2969] usb 1-1: Invalid ep0 maxpacket: 32 [ 519.071190][ T3126] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.082783][ T3126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.097948][ T2969] usb usb1-port1: unable to enumerate USB device [ 519.172738][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 519.182668][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 519.192710][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 519.202168][ T3126] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.209530][ T3126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.218768][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 519.229973][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 519.241081][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 519.251872][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 519.285954][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 519.298211][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 519.309044][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 519.334841][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 519.344669][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 519.413587][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 519.423769][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 519.448723][T12157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 519.528137][ T2969] Bluetooth: hci5: command 0x041b tx timeout [ 519.561994][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 519.570335][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.617085][T12157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.941359][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 519.951768][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 520.083212][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 520.096187][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 520.128394][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 520.139069][T10380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 520.153015][T12157] device veth0_vlan entered promiscuous mode [ 520.216661][T12157] device veth1_vlan entered promiscuous mode [ 520.343639][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 520.353228][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 520.363100][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 520.373158][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 520.412091][T12157] device veth0_macvtap entered promiscuous mode [ 520.448828][T12157] device veth1_macvtap entered promiscuous mode [ 520.481850][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 520.491794][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 520.611790][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 520.623511][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.634386][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 520.645039][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.655205][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 520.665908][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.676134][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 520.686839][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.701310][T12157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.717673][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 520.729137][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 520.762590][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 520.773442][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.784512][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 520.795238][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.805323][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 520.816158][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.826361][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 520.837078][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.847153][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 520.857825][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.872156][T12157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.880952][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 520.891354][ T2969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 521.013270][T12157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.022296][T12157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.033296][T12157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.042926][T12157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.408892][ T8921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.417825][ T8921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.427201][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 521.519859][ T443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.528645][ T443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.561650][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 521.609606][ T2969] Bluetooth: hci5: command 0x040f tx timeout 00:00:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:00:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) 00:00:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:30 executing program 0: syz_usb_connect(0x0, 0xfffffffffffffce2, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 00:00:30 executing program 5: read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 522.168191][ T2969] Bluetooth: hci2: command 0x0406 tx timeout [ 522.319611][T12465] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 522.427746][ T8925] usb 1-1: new high-speed USB device number 77 using dummy_hcd 00:00:31 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0xffff}]}) [ 522.697194][ T8925] usb 1-1: Using ep0 maxpacket: 32 00:00:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 522.868359][ T8925] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 522.877569][ T8925] usb 1-1: can't read configurations, error -22 00:00:31 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:00:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 523.057506][ T8925] usb 1-1: new high-speed USB device number 78 using dummy_hcd 00:00:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 523.327124][ T8925] usb 1-1: Using ep0 maxpacket: 32 00:00:32 executing program 4: io_uring_setup(0x0, 0x0) clone(0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0)="2f0122ec6ed0780a1048442f22f13b9afd00c8d705e987c98b167221107ea5a9d045ab3839736d8d449955adaf964391827781439d17ea93cfb126344418b3c47d49dcca37eb106c24f910d7") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) [ 523.509843][ T8925] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 523.518596][ T8925] usb 1-1: can't read configurations, error -22 [ 523.605800][ T8925] usb usb1-port1: attempt power cycle 00:00:32 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0xc0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x80001, 0x0) [ 523.689634][ T2969] Bluetooth: hci5: command 0x0419 tx timeout 00:00:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 524.136841][T12491] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 524.182871][ T32] audit: type=1804 audit(1609286432.937:4): pid=12495 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir093986069/syzkaller.JjywYn/3/file0" dev="sda1" ino=16050 res=1 errno=0 [ 524.347110][ T8925] usb 1-1: new high-speed USB device number 79 using dummy_hcd 00:00:33 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x4, @thr={&(0x7f0000000280), 0x0}}, 0x0) 00:00:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 524.461222][ T8925] usb 1-1: Using ep0 maxpacket: 32 [ 524.658089][ T8925] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 524.666139][ T8925] usb 1-1: can't read configurations, error -22 [ 524.857103][ T8925] usb 1-1: new high-speed USB device number 80 using dummy_hcd 00:00:33 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d8a77c33"}, 0x0, 0x0, @planes=0x0}) ioctl$VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000000)={0x1f, 0x7, 0x4, 0x1000, 0xe92d, {}, {0x7, 0x0, 0x34, 0x7, 0xe3, 0x1, "528115d2"}, 0x0, 0x1, @offset=0xfffff800, 0x7}) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000080)) 00:00:33 executing program 4: socketpair(0x1, 0x4, 0x0, &(0x7f0000000000)) 00:00:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x4000}, 0x0) [ 525.187329][ T8925] usb 1-1: device descriptor read/8, error -71 00:00:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 525.307484][ T8925] usb usb1-port1: unable to enumerate USB device 00:00:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 525.569889][T12522] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:34 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004700)) 00:00:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x0, @local, 0x800}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) 00:00:35 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000600)=@abs={0x1}, 0x6e) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:00:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:00:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:35 executing program 4: socket$inet6(0xa, 0x3, 0x7) 00:00:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0xfffffbb2}]}) [ 527.067660][T12550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:36 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:00:36 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000040)={@any, 0x3, 0x7, 0x9, 0x0, 0x401, "91ab9043985062fe544ee95c5801414768ce24ed73be47723060c11675b6ae90bdd070f342a2e8d939943ba488011d35ccf9c6152c151bde90117b401534f86cc3c218edbcad350e4b37dab15876ed11e4e466873d979a18aa3d9e5498aba1c3eff53d482bdc33a9a79524ccc7089171f78297b6cfab8b9254c317d3d4bc502d"}) 00:00:36 executing program 4: socketpair(0x11, 0x0, 0x0, &(0x7f0000000540)) 00:00:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4001) 00:00:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, 0x0) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 528.449624][ T3126] usb 1-1: new high-speed USB device number 81 using dummy_hcd 00:00:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 528.897386][ T3126] usb 1-1: Using ep0 maxpacket: 32 00:00:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000200)={0xd, 0x8}) [ 529.123150][ T3126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 529.216982][T12588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, 0x0) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 529.787451][ T3126] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 529.796702][ T3126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.805474][ T3126] usb 1-1: Product: syz [ 529.809841][ T3126] usb 1-1: Manufacturer: syz [ 529.814537][ T3126] usb 1-1: SerialNumber: syz 00:00:38 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 529.986272][ T3126] usb 1-1: config 0 descriptor?? 00:00:39 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf3418f67c44f6fad, 0x0) [ 530.611056][ T3126] usb 1-1: USB disconnect, device number 81 00:00:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 531.263254][T12640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 531.583951][ T3126] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 532.068102][ T3126] usb 1-1: Using ep0 maxpacket: 32 00:00:40 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d8a77c33"}, 0x0, 0x0, @planes=0x0}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="7857793bccdc61c54867f2829dec99c45131fe66dbd127f3eb104eb4b9ff01d8580a540884d49a07bbcc6a59dcad8a0751c4a8cadc757cd893bd6916350cbe132be1a286be9690bb6b5d0830eb10afd7f335169c4ebd86", 0x57}, {&(0x7f0000000080)="64d7d759560fbe0794e81f7c683ce0996026bb3cd1f03253a578b1bf7b3de07db3157e8995fb0a77e5338c1bcbb7f214b2d5a035b1195c7ac274b3cea7", 0x3d}, {&(0x7f00000000c0)="d90d6ef190f9ef186d1821b66e8ab4a3bf04a66604fa67833b42c9ed6585f8ab379d2ccd7a0710ed71bb3b244d2c38c3445c0b89094cac370fe0a2", 0x3b}, {&(0x7f0000000100)="d31f73d097d3f31ddad0879dfaa7beced0f6be7cbd4504614b6e3b1af505c5c127f4b83669e61456a2228fbb4d9a03f3492fb3b507c29e5c888fdacecb8119040908f3645cef4c3f051587b2da50c8f0ccf50b2d36e096eccd76f4f1f0e67cede1fd82031d22991cf3df1434b5f26ccab26568167b2c838efd4e61eaf37b7f2692e80511ccded4477116d36c8a9f986556d27594ae092d9ddcedf7d22f9de1511c39fbdfebcb3192e26a99939bfa8889cf8956e50b89932f0e186121bc141a15c281b5b604f5da570274733ca58f6ba74a6f", 0xd2}], 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100007ed515205e0483028bcb010203010600000000000000000904000001301cfb0009050a100000000000"], 0x0) 00:00:40 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:00:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, 0x0) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:40 executing program 4: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0xc0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) 00:00:40 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) socketpair(0x11, 0x2, 0x3, &(0x7f0000000540)) 00:00:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 532.177331][ T3126] usb 1-1: device descriptor read/all, error -71 00:00:41 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 532.844030][T12664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:00:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa8}}, 0x801) [ 533.677422][ T3126] usb 1-1: new high-speed USB device number 83 using dummy_hcd 00:00:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 533.964246][ T32] audit: type=1326 audit(1609286442.717:5): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=12674 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f55549 code=0x0 00:00:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 534.107611][ T3126] usb 1-1: Using ep0 maxpacket: 32 [ 534.268106][ T3126] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 534.275984][ T3126] usb 1-1: can't read configurations, error -61 [ 534.334470][ T3126] usb usb1-port1: attempt power cycle [ 534.402051][T12689] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 535.078781][ T3126] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 535.168560][ T3126] usb 1-1: Using ep0 maxpacket: 32 [ 535.328191][ T3126] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 535.335904][ T3126] usb 1-1: can't read configurations, error -61 [ 535.497286][ T3126] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 535.588192][ T3126] usb 1-1: Using ep0 maxpacket: 32 00:00:44 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0xe, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d8a77c33"}, 0x0, 0x0, @planes=0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x0) 00:00:44 executing program 5: syz_open_dev$evdev(&(0x7f0000002200)='/dev/input/event#\x00', 0x0, 0x40081) 00:00:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x8916, 0x0) 00:00:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:00:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 535.767371][ T3126] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 535.777648][ T3126] usb 1-1: can't read configurations, error -71 [ 535.817582][ T3126] usb usb1-port1: unable to enumerate USB device [ 536.134991][T12716] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:45 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f00000001c0)={0x0, "935f120720f5b9b40d397076e2f4b5e4dedc3e6b8f85093d666d3816ddf50247fd6f36c2cf899ac6b470306c3e319c7ee6ac8b703aed2a75a2c5322e93b0893d"}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x0) 00:00:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) 00:00:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 536.837932][ T3126] usb 1-1: new full-speed USB device number 86 using dummy_hcd 00:00:45 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 537.027770][ T3126] usb 1-1: device descriptor read/64, error 18 00:00:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 537.457513][ T3126] usb 1-1: new full-speed USB device number 87 using dummy_hcd 00:00:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}]}, 0x30}}, 0x0) [ 537.647221][ T3126] usb 1-1: device descriptor read/64, error 18 [ 537.769132][ T3126] usb usb1-port1: attempt power cycle [ 538.235822][T12750] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 538.697205][ T3126] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 538.868042][ T3126] usb 1-1: device descriptor read/8, error -61 00:00:47 executing program 0: ioperm(0x16, 0x1, 0x6) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 00:00:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:47 executing program 5: socket$packet(0x11, 0x3, 0x300) getresgid(&(0x7f0000002280), &(0x7f00000022c0), 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x0, 0x0, 0x0, 0x0) 00:00:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:00:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}], 0x20}}], 0x1, 0x0) 00:00:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 539.139561][ T3126] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 539.439943][ T3126] usb 1-1: device not accepting address 89, error -71 [ 539.458569][ T3126] usb usb1-port1: unable to enumerate USB device [ 539.633133][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 540.078703][ T3126] usb 1-1: new high-speed USB device number 90 using dummy_hcd 00:00:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) clone(0xc5000000, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000440)) 00:00:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:49 executing program 5: pselect6(0x40, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={0xfffffffeffffffff}, 0x0, 0x0) [ 540.357485][ T3126] usb 1-1: Using ep0 maxpacket: 32 00:00:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:00:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 540.477333][ T3126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 540.677432][ T3126] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 540.686623][ T3126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.697551][ T3126] usb 1-1: Product: syz [ 540.701840][ T3126] usb 1-1: Manufacturer: syz [ 540.706537][ T3126] usb 1-1: SerialNumber: syz [ 540.860074][T12801] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 540.922406][T12799] IPVS: ftp: loaded support on port[0] = 21 [ 540.964677][ T3126] usb 1-1: config 0 descriptor?? 00:00:49 executing program 5: add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f00000001c0)={0x0, "935f120720f5b9b40d397076e2f4b5e4dedc3e6b8f85093d666d3816ddf50247fd6f36c2cf899ac6b470306c3e319c7ee6ac8b703aed2a75a2c5322e93b0893d"}, 0x48, 0xfffffffffffffffe) r0 = add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f00000001c0)={0x0, "935f120720f5b9b40d397076e2f4b5e4dedc3e6b8f85093d666d3816ddf50247fd6f36c2cf899ac6b470306c3e319c7ee6ac8b703aed2a75a2c5322e93b0893d"}, 0x48, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) [ 541.360465][ T3126] usb 1-1: USB disconnect, device number 90 [ 541.685793][T12852] IPVS: ftp: loaded support on port[0] = 21 [ 542.117181][ T3126] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 542.367643][ T3126] usb 1-1: Using ep0 maxpacket: 32 [ 542.493909][ T3126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 542.658458][ T3126] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 542.668027][ T3126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.676126][ T3126] usb 1-1: Product: syz [ 542.680823][ T3126] usb 1-1: Manufacturer: syz [ 542.685542][ T3126] usb 1-1: SerialNumber: syz [ 542.744158][ T3126] usb 1-1: config 0 descriptor?? 00:00:51 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="127ed515205e0000000904000001301cfb0009050a000000000000000000000000000000000000200000"], 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000000)={0x6, 0x3, 0x80000001, 0x7, 0x4}) 00:00:51 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:00:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x5451, 0x0) 00:00:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:51 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x48002) [ 542.857382][ T3126] usb 1-1: can't set config #0, error -71 [ 542.912208][ T3126] usb 1-1: USB disconnect, device number 91 [ 543.318895][T12905] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:52 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x2, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}, @sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x48}}, 0x0) 00:00:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:00:52 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 00:00:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 543.750787][ T8925] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 543.947724][ T8925] usb 1-1: device descriptor read/64, error 18 [ 544.238414][ T8925] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 544.344789][T12930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) [ 544.757045][ T8925] usb 1-1: device descriptor read/64, error 18 [ 544.877698][ T8925] usb usb1-port1: attempt power cycle [ 545.613131][ T8925] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 545.798222][ T8925] usb 1-1: device descriptor read/8, error -61 [ 546.068229][ T8925] usb 1-1: new high-speed USB device number 95 using dummy_hcd 00:00:55 executing program 0: syz_usb_connect(0x5, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 00:00:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:55 executing program 3: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:00:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x24}}, 0x0) 00:00:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x894c, 0x0) 00:00:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 546.377117][ T8925] usb 1-1: device descriptor read/8, error -71 [ 546.497606][ T8925] usb usb1-port1: unable to enumerate USB device [ 546.998668][T12964] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:00:55 executing program 5: socket$unix(0x1, 0x2, 0x0) clone(0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000480)='P') recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x28, 0xa, 0x0, &(0x7f0000000100)) 00:00:56 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') 00:00:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:56 executing program 3: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 547.937812][ T3126] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 548.447163][ T3126] usb 1-1: Using ep0 maxpacket: 32 00:00:57 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0xc0, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) [ 548.567760][ T3126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 00:00:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x6, 0x80000000, 0x20, @mcast2, @mcast1, 0x20, 0x40, 0x40, 0x4d4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x43, 0xa11c, 0x29, @mcast2, @mcast1, 0x7800, 0x10, 0x0, 0x8}}) [ 548.737872][ T3126] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 548.747172][ T3126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.755272][ T3126] usb 1-1: Product: syz [ 548.759688][ T3126] usb 1-1: Manufacturer: syz [ 548.764388][ T3126] usb 1-1: SerialNumber: syz [ 548.964644][ T3126] usb 1-1: config 0 descriptor?? [ 549.287895][ T3126] usb 1-1: USB disconnect, device number 96 [ 549.987269][T10380] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 550.227052][T10380] usb 1-1: Using ep0 maxpacket: 32 [ 550.350623][T10380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 550.517314][T10380] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 550.529172][T10380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.537994][T10380] usb 1-1: Product: syz [ 550.542268][T10380] usb 1-1: Manufacturer: syz [ 550.547069][T10380] usb 1-1: SerialNumber: syz [ 550.576492][T10380] usb 1-1: config 0 descriptor?? 00:00:59 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) kexec_load(0x0, 0x2, &(0x7f0000000080), 0x160000) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000180)={0x80000000, 0x3800000}) syz_usb_connect$cdc_ecm(0x1, 0x88, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x2, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x5e, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x6, 0x24, 0x6, 0x0, 0x0, "99"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3, 0x1f}, [@obex={0x5, 0x24, 0x15, 0x80}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x7fff}, @dmm={0x7, 0x24, 0x14, 0x2, 0x7}, @country_functional={0x10, 0x24, 0x7, 0x3, 0x8, [0x3, 0x9, 0xfffa, 0x7fff, 0x8]}, @acm={0x4, 0x24, 0x2, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x6, 0xaa}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x2, 0x2, 0x40, 0x20, 0x1}, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f05004042260cab559658b54d1a999b6f7b4886e72c1fb705010f796fa5256f038af69db237400dc13cb26ebd08b7679ead923ecb0ce4ce527bb65e"]}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4) 00:00:59 executing program 3: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:00:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:00:59 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x63c6, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 00:00:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x2, 0x0) [ 550.968767][T10380] usb 1-1: USB disconnect, device number 97 [ 551.434524][T13071] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:01:00 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:00 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x0) write$ppp(r0, 0x0, 0x0) 00:01:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 552.077769][ T2969] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 552.415070][ T2969] usb 1-1: Using ep0 maxpacket: 32 [ 552.551851][ T2969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 552.758194][ T2969] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 552.767639][ T2969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.776643][ T2969] usb 1-1: Product: syz [ 552.781238][ T2969] usb 1-1: Manufacturer: syz [ 552.785936][ T2969] usb 1-1: SerialNumber: syz [ 552.815853][T13099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:01:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:01 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 553.228262][ T8472] Bluetooth: hci3: command 0x0406 tx timeout [ 553.247497][ T2969] usb 1-1: config 0 descriptor?? [ 553.497466][T13088] udc-core: couldn't find an available UDC or it's busy [ 553.504561][T13088] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 553.632656][ T2969] usb 1-1: USB disconnect, device number 98 [ 554.337204][T10380] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 554.577550][T10380] usb 1-1: Using ep0 maxpacket: 32 [ 554.697699][T10380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 554.867136][T10380] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 554.876449][T10380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.884916][T10380] usb 1-1: Product: syz [ 554.889324][T10380] usb 1-1: Manufacturer: syz [ 554.894020][T10380] usb 1-1: SerialNumber: syz [ 554.921255][T10380] usb 1-1: config 0 descriptor?? 00:01:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x0, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:03 executing program 4: clone(0x208000, 0x0, 0x0, 0x0, 0x0) 00:01:03 executing program 0: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r0, 0xba, 0x7}) 00:01:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:03 executing program 3: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000000c0)='n', 0x1, 0x0, &(0x7f0000000140)=@file={0x1, '.\x00'}, 0x6e) [ 555.188467][T10380] usb 1-1: USB disconnect, device number 99 [ 555.518643][T13167] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:01:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) 00:01:04 executing program 0: syz_usb_connect(0x1, 0xac, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xa0, 0x74, 0xaf, 0x20, 0x90c, 0x1132, 0x1499, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0xb6, 0x0, 0x3, 0x9a, 0xeb, 0x87, 0x0, [], [{{0x9, 0x5, 0x0, 0x10, 0x400, 0x1, 0x7, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x3}]}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x0, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xad, 0x4}, @generic={0x51, 0x4, "2502d7cf283d7f460410b4154575b64fd2bf8a57d695af3f8cf15d0ea39a6e0b5dd51e2883daf9fb92f38aa5d46dcdab35142ca545cc3c03d5be017730d57c155db89a1c79712acb759f76b515ab2d"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x3, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x54}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x401}]}}]}}]}}]}}, 0x0) 00:01:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x0, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) [ 556.763234][T13210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 556.836928][T10380] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 557.088595][T10380] usb 1-1: Invalid ep0 maxpacket: 32 00:01:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 557.276907][T10380] usb 1-1: new low-speed USB device number 101 using dummy_hcd 00:01:06 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 557.567021][T10380] usb 1-1: Invalid ep0 maxpacket: 32 [ 557.567569][T10380] usb usb1-port1: attempt power cycle 00:01:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x60d}, 0x40) 00:01:06 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1a0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, 0xe8) 00:01:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x0, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 558.390086][T13240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 558.436842][T10380] usb 1-1: new low-speed USB device number 102 using dummy_hcd 00:01:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1a0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, 0xe8) [ 558.530595][T10380] usb 1-1: Invalid ep0 maxpacket: 32 00:01:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) [ 558.686929][T10380] usb 1-1: new low-speed USB device number 103 using dummy_hcd [ 558.858777][T10380] usb 1-1: Invalid ep0 maxpacket: 32 [ 558.864633][T10380] usb usb1-port1: unable to enumerate USB device 00:01:08 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f0000000000)={0x101, 0x6, 0x5, 0x99, 0x2, 0x2343}) syz_init_net_socket$x25(0x9, 0x5, 0x0) 00:01:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x0, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:08 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1a0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, 0xe8) 00:01:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast1}}) 00:01:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 559.832556][T13267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 560.627664][T11391] usb 1-1: new high-speed USB device number 104 using dummy_hcd 00:01:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1a0}}, {{@in6=@private1}, 0x0, @in6=@private2}}, 0xe8) 00:01:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 560.877167][T11391] usb 1-1: Using ep0 maxpacket: 32 00:01:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x0, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:09 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)) [ 561.008019][T11391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 561.177645][T11391] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 561.187133][T11391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.195247][T11391] usb 1-1: Product: syz [ 561.199747][T11391] usb 1-1: Manufacturer: syz [ 561.204449][T11391] usb 1-1: SerialNumber: syz [ 561.335047][T11391] usb 1-1: config 0 descriptor?? 00:01:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 561.625535][T13307] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 561.734338][T11391] usb 1-1: USB disconnect, device number 104 [ 562.537299][T11391] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 562.797105][T11391] usb 1-1: Using ep0 maxpacket: 32 [ 562.937611][T11391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 00:01:11 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0xfffffff8) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') 00:01:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x0, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:11 executing program 5: perf_event_open$cgroup(&(0x7f0000000140)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:01:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:11 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 563.036934][T11391] usb 1-1: string descriptor 0 read error: -71 [ 563.043370][T11391] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 563.052898][T11391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.131067][T11391] usb 1-1: config 0 descriptor?? [ 563.179253][T11391] usb 1-1: can't set config #0, error -71 [ 563.220902][T11391] usb 1-1: USB disconnect, device number 105 [ 563.415827][T13354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:01:12 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@alu={0x7}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:01:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x0, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 564.537168][ T7] usb 1-1: new high-speed USB device number 106 using dummy_hcd 00:01:13 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) unlink(&(0x7f0000003440)='./file0\x00') [ 564.786808][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 564.907983][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 00:01:13 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x7, &(0x7f00000000c0)=@raw=[@initr0, @alu, @generic, @initr0, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 565.107967][T13388] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 565.587480][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 565.596818][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.605000][ T7] usb 1-1: Product: syz [ 565.609587][ T7] usb 1-1: Manufacturer: syz [ 565.614357][ T7] usb 1-1: SerialNumber: syz [ 565.733626][ T7] usb 1-1: config 0 descriptor?? [ 566.054786][ T7] usb 1-1: USB disconnect, device number 106 [ 566.767067][ T3126] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 567.009769][ T3126] usb 1-1: Using ep0 maxpacket: 32 [ 567.127370][ T3126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 567.318950][ T3126] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 567.328259][ T3126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.336360][ T3126] usb 1-1: Product: syz [ 567.341072][ T3126] usb 1-1: Manufacturer: syz [ 567.345773][ T3126] usb 1-1: SerialNumber: syz 00:01:16 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000000)=0x800) 00:01:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0xc0045878, 0x0) 00:01:16 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x8, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x5421, 0x751000) [ 567.581467][ T3126] usb 1-1: config 0 descriptor?? 00:01:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x0, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 567.670977][ T3126] usb 1-1: can't set config #0, error -71 [ 567.711826][ T3126] usb 1-1: USB disconnect, device number 107 [ 567.985486][T13453] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:01:17 executing program 4: perf_event_open$cgroup(&(0x7f0000000140)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:01:17 executing program 5: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:01:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 568.816757][ T3126] usb 1-1: new high-speed USB device number 108 using dummy_hcd 00:01:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x0, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 569.176899][ T3126] usb 1-1: Using ep0 maxpacket: 32 00:01:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x5460, 0x0) [ 569.297512][ T3126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 569.507584][ T3126] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 569.517156][ T3126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.525685][ T3126] usb 1-1: Product: syz [ 569.530209][ T3126] usb 1-1: Manufacturer: syz [ 569.534895][ T3126] usb 1-1: SerialNumber: syz [ 569.587861][T13486] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 569.865239][ T3126] usb 1-1: config 0 descriptor?? [ 570.201644][ T3126] usb 1-1: USB disconnect, device number 108 [ 570.931633][ T7] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 571.187447][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 571.318539][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 00:01:20 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x43d481, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) process_madvise(r2, &(0x7f0000000440)=[{&(0x7f0000000000)="c0fb7a3f907bd016", 0x8}, {&(0x7f0000000080)="8d505d9f69543cba15a45870d16cfaeaa634dbba71b4e555ce7032bedd41126bfcc4841e6620e257c64da41bf0a43d9869397e0b43ff764058661f9c0ed2ede907e8715605d21ca320902eef193033e68121174957dc50ad1a41d58a86b3fa9e8e7f2d5c929a2b9e29c7944eb099137bab854d1645402bb28e2113cff5dcc0bbe975fb73cef36b751365ddd2e4b38c71e72b7446c71194637f8d10eb05b24d3ed707b83f7dddafcc70fed6b60eb4f8744bd89f99f836bf472d63", 0xba}, {&(0x7f0000000140)="26e3bf28760869e5ed594075", 0xc}, {&(0x7f0000000180)="f28a7ec6e2d777b86b108f4dec81e22f544c9d6f79dd96feb7f836f23ec4759ecac6f29f4b7cf3bc56541aa0b4ddbe819a4137c5e45febfa117f4ab280f1421d27d9f9c6a62bc44e31b9c2dd1e875206eb06ccb0f54c05b0bc6ab0938a28053ed5c027435047216c2565198f5071fca5f25c734e061650d0bb810aacac4248aaf74bb7ef44ed1c684a29cac67a4ed47fc3e4eddcb756d490d207ed1ac29933d80ca61599fa56a2740b01c8087b950a8a042174aa23857878668aeee962a588f168cf0079fa1647275ef1a4", 0xcb}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000280)="cb7a97818714defb068aa711869fa00101a9b430a767fca48fc29c9184b12de7002bf04a7e8a263b76b2bf9928e218306e354555cb6541b715cf2d9a0a49e5f8ec269c8797e41ae47b43658dde21b9780220058958201bec97c34a24ff9e51c6c9cf5392f772f8494b8b2c838595546b88161ffc5bb57283f8eab8150a0b05b18203d2fbc47c1fc2b1c012cb206b7ce31f04147abc98eb6689a3f7ff", 0x9c}, {&(0x7f0000000340)="f72a1ab603e0d67438d05e072812988cf1e2e9196c504f846c9cfdcfc4256993fb71f51329b3547f1ba93df155dfa22d898fa2d4b1bf03901ac1d9023c4ea6be362948d2bc56500b9d3463235182ca495e966a7c7ac1bcc593989c9c87cb7b302d136369a19dcebaa7ac1f27362054ac5b0c2bd0ca9f609c40f648425ffc59f2bb45545acc4cc1faee2d4db5b945c9f8e3f6078f620e5ddbd7a85825c83269f6d3125b7f5223e986ad7bb9d2a176e727b6457114635638873e3cc7e8c28a4dc63b480b133f9901d65cfb18", 0xcb}, {&(0x7f0000001500)="822ddda5a5638eef8c4e92474bc519705484f733779df667be9c9282b1aa01afbb9b1836e38c47b8a6d10f1735512f43b1861cff828a02113e6351fe26027bbeddffb57433b97fa227004e80290a21e5039f158ebdb888e3533a18b3cbc995613e25e4cf4313bcbe66ea52da04c44574f9bbb25156807f81438c1ae54579010f3a", 0x81}, {&(0x7f00000015c0)="836fd5a437f72a0f77e1645a712297300cc81364b2fd38eaeb3bcd924e13b1d38270fd2545304c2f0aa3165d170831a9c901a71fa20b1df828475dae4d4b2b01452425c674f9f39caa7b4c2b83c5cc3237f7d3808e70d5339fa265d98a637778a5751ff3dc12f8809af409e20c83f331ddf29b7835338dc8e4d86e612b4fc8e5fd3cbaa796a5651e98aa4c12ae692e0996efe21816c7c54506e5eefc8984f22d78cc695ca976b162b04bb54a94b4873ed26a242bd38a4c527dc23051fc2a883d040ce3232d2afa15484a01190fa4c884c8c5b1f19a704bda", 0xd8}], 0x9, 0x3, 0x0) 00:01:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0x0, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:20 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 00:01:20 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, 0x0, 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x5451, 0x0) 00:01:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 571.636871][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 571.646139][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.654658][ T7] usb 1-1: Product: syz [ 571.779600][ T7] usb 1-1: config 0 descriptor?? [ 571.873684][ T7] usb 1-1: can't set config #0, error -71 [ 571.902109][ T7] usb 1-1: USB disconnect, device number 109 [ 571.940014][T13547] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:01:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:21 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/131, 0x83}], 0x300, &(0x7f0000000580)=""/196, 0xc4}, 0x0) 00:01:21 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 572.496934][ T7] usb 1-1: new high-speed USB device number 110 using dummy_hcd 00:01:21 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, 0x0, 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 572.758680][ T7] usb 1-1: Using ep0 maxpacket: 32 00:01:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0x0, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 572.887802][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 00:01:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 573.127578][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 573.137070][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.145249][ T7] usb 1-1: Product: syz [ 573.150879][ T7] usb 1-1: Manufacturer: syz [ 573.155660][ T7] usb 1-1: SerialNumber: syz [ 573.321584][ T7] usb 1-1: config 0 descriptor?? [ 573.487770][T13578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 574.224141][ T7] usb 1-1: USB disconnect, device number 110 [ 574.857084][ T3126] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 575.098597][ T3126] usb 1-1: Using ep0 maxpacket: 32 [ 575.237639][ T3126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 575.410480][ T3126] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 575.420017][ T3126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.428361][ T3126] usb 1-1: Product: syz [ 575.432629][ T3126] usb 1-1: Manufacturer: syz [ 575.437484][ T3126] usb 1-1: SerialNumber: syz [ 575.474010][ T3126] usb 1-1: config 0 descriptor?? 00:01:24 executing program 0: openat$autofs(0xffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8480, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001500)={'vxcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@empty, r2}, 0x14) r3 = openat$pfkey(0xffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x19, 0x0, 0xa81, 0x7f, 0x1200, r5, 0xb6, [], 0x0, r3, 0x2, 0x1, 0x4}, 0x40) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 00:01:24 executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) close(r0) 00:01:24 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000180)={r0}, 0x10) 00:01:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0x0, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:24 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, 0x0, 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 575.792097][ T3126] usb 1-1: USB disconnect, device number 111 [ 576.023431][T13649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:01:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:25 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x8, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 00:01:25 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x1a, 0x1, &(0x7f0000000040)=@raw=[@call], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) [ 576.967033][ T8473] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 577.269835][T13684] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 577.286957][ T8473] usb 1-1: Using ep0 maxpacket: 32 00:01:26 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000180)={r0}, 0x10) [ 577.517152][ T8473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 577.717592][ T8473] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 577.726933][ T8473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.735047][ T8473] usb 1-1: Product: syz [ 577.739532][ T8473] usb 1-1: Manufacturer: syz [ 577.744232][ T8473] usb 1-1: SerialNumber: syz [ 577.832776][ T8473] usb 1-1: config 0 descriptor?? [ 578.113821][ T8473] usb 1-1: USB disconnect, device number 112 [ 578.930240][ T8485] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 579.176958][ T8485] usb 1-1: Using ep0 maxpacket: 32 [ 579.297123][ T8485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 00:01:28 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 00:01:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:28 executing program 4: perf_event_open$cgroup(&(0x7f0000000140)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:01:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r0}, 0x10) [ 579.556759][ T8485] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 579.566040][ T8485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.574621][ T8485] usb 1-1: Product: syz [ 579.579019][ T8485] usb 1-1: Manufacturer: syz [ 579.691471][ T8485] usb 1-1: config 0 descriptor?? [ 579.755932][ T8485] usb 1-1: can't set config #0, error -71 [ 580.086662][T13744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 580.256186][ T8485] usb 1-1: USB disconnect, device number 113 00:01:29 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0x0, 0x0}, 0x30) 00:01:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x89a0, 0x0) 00:01:29 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 580.676916][ T8485] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 580.919875][ T8485] usb 1-1: Using ep0 maxpacket: 32 00:01:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x89a0, 0x0) [ 581.040284][ T8485] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 581.050746][ T8485] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 581.320372][T13779] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 581.427216][ T8485] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 581.436672][ T8485] usb 1-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 581.447534][ T8485] usb 1-1: Product: syz [ 581.451838][ T8485] usb 1-1: Manufacturer: syz [ 581.457306][ T8485] usb 1-1: SerialNumber: syz [ 581.498192][ T8485] usb 1-1: config 0 descriptor?? [ 581.555259][ T8485] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 581.744524][T11391] usb 1-1: USB disconnect, device number 114 [ 582.537337][ T8484] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 582.781087][ T8484] usb 1-1: Using ep0 maxpacket: 32 [ 582.907328][ T8484] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 582.917847][ T8484] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 00:01:31 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ed515205e0483028bcb010203010902bd87c84f0000f4a58d00096977590400000130e9d70000050a000000"], 0x0) 00:01:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:01:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:31 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x8, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x5421, 0x807400) [ 583.188955][ T8484] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 583.198361][ T8484] usb 1-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 583.206916][ T8484] usb 1-1: Product: syz [ 583.211202][ T8484] usb 1-1: Manufacturer: syz [ 583.353941][ T8484] usb 1-1: config 0 descriptor?? [ 583.522147][T13822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 583.550197][ T8484] usb 1-1: can't set config #0, error -71 [ 583.571589][ T8484] usb 1-1: USB disconnect, device number 115 00:01:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:32 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed={{}, [], {0x95, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:01:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:01:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 584.190473][ T8484] usb 1-1: new high-speed USB device number 116 using dummy_hcd 00:01:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 584.706692][ T8484] usb 1-1: Using ep0 maxpacket: 32 [ 584.735769][T13849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 585.039805][ T8484] usb 1-1: config index 0 descriptor too short (expected 34749, got 27) [ 585.048740][ T8484] usb 1-1: config 79 has too many interfaces: 200, using maximum allowed: 32 [ 585.058015][ T8484] usb 1-1: config 79 has an invalid descriptor of length 165, skipping remainder of the config [ 585.068668][ T8484] usb 1-1: config 79 has 0 interfaces, different from the descriptor's value: 200 [ 585.446985][ T8484] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 585.456656][ T8484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.464762][ T8484] usb 1-1: Product: syz [ 585.469219][ T8484] usb 1-1: Manufacturer: syz [ 585.473932][ T8484] usb 1-1: SerialNumber: syz [ 585.900998][T10380] usb 1-1: USB disconnect, device number 116 [ 586.677394][T10380] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 586.916999][T10380] usb 1-1: Using ep0 maxpacket: 32 [ 587.037396][T10380] usb 1-1: config index 0 descriptor too short (expected 34749, got 27) [ 587.045904][T10380] usb 1-1: config 79 has too many interfaces: 200, using maximum allowed: 32 [ 587.055102][T10380] usb 1-1: config 79 has an invalid descriptor of length 165, skipping remainder of the config [ 587.065732][T10380] usb 1-1: config 79 has 0 interfaces, different from the descriptor's value: 200 00:01:36 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ed515205e0483028bcb0102030109021b0001000081220903fffff0301cfb0009050a000000000000024b3fd651cf8fd242c201b8f423a2dbb458c5486e1b06f377b1d93a370f2bd8fe"], 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000080)=0x3, 0x4) semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x8000, 0x8, 0x5, 0x4}]}, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, &(0x7f00000000c0)={0x1, 0x7, 0x0}) 00:01:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:36 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x8, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0xc020660b, 0x0) 00:01:36 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1002, 0x0, 0x0) 00:01:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:36 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 587.656843][T10380] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 587.666037][T10380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.886820][T10380] usb 1-1: can't set config #79, error -71 [ 587.977485][T10380] usb 1-1: USB disconnect, device number 117 [ 588.261189][T13901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:01:37 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x38210, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 00:01:37 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x1, 0x0) r2 = dup2(r1, r0) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000480)={0x0, 0xffffffff}, 0x10) 00:01:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 589.006640][T11391] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 589.266386][T11391] usb 1-1: Using ep0 maxpacket: 32 [ 589.397240][T11391] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 00:01:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 589.631474][T11391] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 589.641642][T11391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.650091][T11391] usb 1-1: Product: syz [ 589.654363][T11391] usb 1-1: Manufacturer: syz [ 589.659234][T11391] usb 1-1: SerialNumber: syz 00:01:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) [ 590.027304][T11391] usb 1-1: config 0 descriptor?? [ 590.368420][T11391] usb 1-1: USB disconnect, device number 118 [ 590.508360][T13951] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 591.167403][T11391] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 591.416579][T11391] usb 1-1: Using ep0 maxpacket: 32 [ 591.566538][T11391] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 00:01:40 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000eedffc)=0x3fda, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x0, @empty}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 00:01:40 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)='\"', 0x1}, {&(0x7f0000000180)='\"', 0x1}], 0x2) 00:01:40 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:40 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r0, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:40 executing program 4: mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) 00:01:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 591.956717][T11391] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 591.966023][T11391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.974375][T11391] usb 1-1: Product: syz [ 592.090479][T11391] usb 1-1: config 0 descriptor?? [ 592.138727][T11391] usb 1-1: can't set config #0, error -71 [ 592.253884][T11391] usb 1-1: USB disconnect, device number 119 [ 592.336963][T13982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:01:41 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) fcntl$getflags(r0, 0x3) 00:01:41 executing program 5: chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, 0xffffffffffffffff) renameat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0) 00:01:41 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r0, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 592.866508][ T3126] usb 1-1: new high-speed USB device number 120 using dummy_hcd 00:01:42 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, &(0x7f0000001200)=""/122, 0x7a}, 0x41) [ 593.298449][ T3126] usb 1-1: Using ep0 maxpacket: 32 [ 593.417941][ T3126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 593.590577][ T3126] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 593.600154][ T3126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.608621][ T3126] usb 1-1: Product: syz [ 593.612889][ T3126] usb 1-1: Manufacturer: syz [ 593.617698][ T3126] usb 1-1: SerialNumber: syz [ 593.622860][T14008] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 593.776680][ T3126] usb 1-1: config 0 descriptor?? [ 594.181468][ T3126] usb 1-1: USB disconnect, device number 120 00:01:43 executing program 0: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x5, &(0x7f0000000280)=[{&(0x7f0000000080)="eff2a6bdb44a0f7839693f4fea344b73b7cc0feca7e83e172ca3d4ab827df837ac23cac14560d15e95b748e902e7578525003c72214c93d58efce4ae41b162c8e95fe585d72c4eaea62959270ac3e6276449294b12ee5ba0aba2883a86d80791165922f01ff11226cbf4ef2c02e1b238cf3232387ae36e0324864c9ea6892d79617cdb68e8b12172c562a286c52672803f0fc6fc92e4ca46e23a03177bcbee669e4531add9fabc3f18d520106ab92c72b28ed85327882505efec3ab714442d9aea39eedf060f585826113ce2e93fdbe5ae5c8e947c9680166b37590ce6b6fb4aac6ed1cdd6dd32a73b5a39ca1341e7f15c1fa81dd1c9", 0xf6, 0x8}, {&(0x7f0000000500)="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", 0x1000, 0x87}, {&(0x7f0000000180)="4e4845ff", 0x4, 0x3f}, {&(0x7f00000001c0)="fc3dfa32d74f10f77ae0e9bf671f0d8b99f2a90b0f54417df926bdd86194680e625b7de08a0c8d4b37bf964b078c3d4c56e84f5921ad90bcfb38f0b74e9846fceb429448a08d21586f", 0x49, 0x9}, {&(0x7f0000000240)="717c64a99c7431fcee6d7c6e4b4021e0a7124714f60e1afc20fa4cc0fd479347cab7cacbcb17f436fc125d88", 0x2c, 0x9}], 0x400, &(0x7f00000002c0)={[{@grpid='grpid'}, {@swidth={'swidth', 0x3d, 0x3}}, {@grpid='grpid'}], [{@measure='measure'}, {@smackfstransmute={'smackfstransmute', 0x3d, '$*,\xa2%'}}]}) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 00:01:43 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) 00:01:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:43 executing program 2: socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) getsockname$packet(r0, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/4096, 0x1000) 00:01:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 595.137904][T14046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:01:44 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x1, 0x0) dup2(r1, r0) 00:01:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), 0x0, 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000240)) [ 596.250140][T14073] xfs: Unknown parameter 'measure' 00:01:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) [ 596.556363][ T7] usb 1-1: new high-speed USB device number 121 using dummy_hcd 00:01:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$nl_route(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@setlink={0x44, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_CARRIER={0x5}]}, 0x44}}, 0x0) [ 596.796706][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 596.937282][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 597.156879][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 597.166431][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.174588][ T7] usb 1-1: Product: syz [ 597.179206][ T7] usb 1-1: Manufacturer: syz [ 597.183960][ T7] usb 1-1: SerialNumber: syz 00:01:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 597.723142][ T7] usb 1-1: config 0 descriptor?? [ 597.953674][T14098] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 598.076505][ T7] usb 1-1: USB disconnect, device number 121 [ 598.077494][T14109] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 598.283550][T14110] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 598.968388][ T8473] Bluetooth: hci4: command 0x0406 tx timeout 00:01:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000400)) 00:01:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@empty, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6b}, [@sec_ctx={0xc, 0x8, {0x8}}, @algo_auth_trunc={0x4c, 0x14, {{'sha384\x00'}}}, @replay_esn_val={0x1c}]}, 0x164}}, 0x0) 00:01:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 00:01:47 executing program 0: ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d1e, &(0x7f00000004c0)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201cd5f1b07f849c200007ed515205e0a83028bcb0102030109021b0001000000000904000001301cfb0009050a000000000000"], 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x355, 0x101}, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000180)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000300)=""/87, 0x57}], 0x3, &(0x7f00000003c0)=""/156, 0x9c}, 0x10000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000040)={0x1, 0x400, 0x3, 0x100, 0x80, 0xfff}) 00:01:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 599.458560][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:01:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001400010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140002"], 0x2c}}, 0x0) 00:01:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@empty, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6b}, [@sec_ctx={0xc, 0x8, {0x8}}, @algo_auth_trunc={0x4c, 0x14, {{'sha384\x00'}}}, @replay_esn_val={0x1c}]}, 0x164}}, 0x0) 00:01:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 00:01:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 599.967057][ T8484] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 600.139875][T14150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 600.177113][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:01:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@empty, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6b}, [@sec_ctx={0xc, 0x8, {0x8}}, @algo_auth_trunc={0x4c, 0x14, {{'sha384\x00'}}}, @replay_esn_val={0x1c}]}, 0x164}}, 0x0) [ 600.805875][ T8484] usb 1-1: device descriptor read/64, error 18 00:01:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000001c0)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x3c}}, 0x0) 00:01:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 601.116621][ T8484] usb 1-1: new high-speed USB device number 123 using dummy_hcd 00:01:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 601.306421][ T8484] usb 1-1: device descriptor read/64, error 18 00:01:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 601.437054][ T8484] usb usb1-port1: attempt power cycle 00:01:50 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x2000)=nil, 0x5000) add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0x0) [ 601.985725][T14184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 602.146403][ T8484] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 602.247890][ T8484] usb 1-1: Invalid ep0 maxpacket: 73 [ 602.396778][ T8484] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 602.487794][ T8484] usb 1-1: Invalid ep0 maxpacket: 73 [ 602.510679][ T8484] usb usb1-port1: unable to enumerate USB device 00:01:51 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000180)={0x200, 0x0, [], {0x0, @bt={0xfffffffb, 0x6, 0x1, 0x1, 0x7, 0x9, 0x0, 0xb56, 0xa1, 0x9, 0x8, 0x2, 0x7ff, 0x80000001, 0x1d, 0x8, {0x2, 0x5}, 0x6, 0x8d}}}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x66}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) 00:01:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@empty, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6b}, [@sec_ctx={0xc, 0x8, {0x8}}, @algo_auth_trunc={0x4c, 0x14, {{'sha384\x00'}}}, @replay_esn_val={0x1c}]}, 0x164}}, 0x0) 00:01:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:01:51 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f00000014c0)={'vlan0\x00', @ifru_data=&(0x7f0000001480)="e933b38a981afa0e288f4389c8ada771e140ce3c97fd213c803c642ec6fd97fb"}) [ 602.862646][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:01:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000302015d"], 0x64}}, 0x0) [ 603.446575][ T8925] usb 1-1: new high-speed USB device number 126 using dummy_hcd 00:01:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:01:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x11, &(0x7f0000000040)={@private, @private}, 0xc) 00:01:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 603.689096][ T8925] usb 1-1: Using ep0 maxpacket: 32 00:01:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 603.817758][ T8925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 603.828444][T14212] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. [ 604.067937][T14217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:01:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) 00:01:53 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @ifru_map}) [ 604.717640][ T8925] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 604.726921][ T8925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.735051][ T8925] usb 1-1: Product: syz [ 604.739653][ T8925] usb 1-1: Manufacturer: syz [ 604.744386][ T8925] usb 1-1: SerialNumber: syz [ 604.758818][ T8925] usb 1-1: config 0 descriptor?? [ 605.127880][ T8925] usb 1-1: USB disconnect, device number 126 [ 605.818213][ T8485] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 606.070021][ T8485] usb 1-1: Using ep0 maxpacket: 32 [ 606.188012][ T8485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 606.387282][ T8485] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 606.396889][ T8485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.405152][ T8485] usb 1-1: Product: syz [ 606.409773][ T8485] usb 1-1: Manufacturer: syz [ 606.414754][ T8485] usb 1-1: SerialNumber: syz [ 606.527971][ T8485] usb 1-1: config 0 descriptor?? 00:01:55 executing program 0: ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000040)={"c845911ce8495a33ae90208b4fd25a3f645e3200e5b44d5bcaf8d467e887", 0x3, 0x5, 0x5, [0x7, 0x7, 0x401, 0xea, 0x1ff, 0x3, 0x1f, 0x8, 0x53, 0xfffffffb, 0x8, 0x7fffffff, 0x2, 0x9, 0x7fffffff, 0x5, 0x5, 0x7f]}) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) 00:01:55 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:55 executing program 5: shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) bpf$MAP_CREATE(0x0, &(0x7f0000000480), 0x40) 00:01:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x411}, 0x20}}, 0x0) 00:01:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) 00:01:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 606.600354][ T8485] usb 1-1: can't set config #0, error -71 [ 606.663783][ T8485] usb 1-1: USB disconnect, device number 127 [ 607.005440][T14282] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 607.466580][ T3126] usb 1-1: new high-speed USB device number 2 using dummy_hcd 00:01:56 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x360, 0x98, 0x360, 0x180, 0x98, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@private, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'veth1_to_team\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'team0\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 00:01:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv6_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}}, 0x0) [ 607.747000][ T3126] usb 1-1: Using ep0 maxpacket: 32 00:01:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) 00:01:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) 00:01:56 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 607.867634][ T3126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 608.037287][ T3126] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 608.046961][ T3126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.055073][ T3126] usb 1-1: Product: syz [ 608.059726][ T3126] usb 1-1: Manufacturer: syz [ 608.064442][ T3126] usb 1-1: SerialNumber: syz 00:01:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bond\x00'}]}, 0x48}}, 0x0) [ 608.232162][ T3126] usb 1-1: config 0 descriptor?? [ 608.379314][T14303] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 608.760679][ T3126] usb 1-1: USB disconnect, device number 2 00:01:58 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) getgid() 00:01:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_batadv\x00'}]}, 0x48}}, 0x0) 00:01:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5], 0x28}}, 0x0) 00:01:58 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:01:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc8}, [@RTA_EXPIRES={0x8, 0x17, 0x87d}]}, 0x24}}, 0x0) 00:01:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 609.550828][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:01:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x29, 0x0, 0x49) 00:01:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5], 0x28}}, 0x0) [ 610.071100][T14355] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 610.119709][ T3126] usb 1-1: new high-speed USB device number 3 using dummy_hcd 00:01:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000080)=@setlink={0x98, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}, @IFLA_AF_SPEC={0x40, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x5}, {0x8}]}}]}, @IFLA_PHYS_PORT_ID={0x21, 0x22, "8e4fce967f57b36f82efb119793a722c7784a200"/29}]}, 0x98}}, 0x0) 00:01:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 610.366316][ T3126] usb 1-1: Using ep0 maxpacket: 32 [ 610.498484][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:01:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 610.592291][ T3126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 00:01:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@getpolicy={0x50, 0x15, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@empty}, 0x2000000}}, 0x50}}, 0x0) [ 610.767857][ T3126] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 610.777729][ T3126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.785864][ T3126] usb 1-1: Product: syz [ 610.790385][ T3126] usb 1-1: Manufacturer: syz [ 610.795107][ T3126] usb 1-1: SerialNumber: syz [ 610.897978][ T3126] usb 1-1: config 0 descriptor?? [ 611.135241][T14375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 611.627858][ T3126] usb 1-1: USB disconnect, device number 3 [ 612.216350][ T3126] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 612.459241][ T3126] usb 1-1: Using ep0 maxpacket: 32 [ 612.577297][ T3126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 00:02:01 executing program 0: ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000000)=""/115) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0xd5, 0x15, 0x20, 0x45e, 0x283, 0xcb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x30, 0x1c, 0xfb, 0x0, [], [{{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000000c0)=""/178) 00:02:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5], 0x28}}, 0x0) 00:02:01 executing program 4: shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:02:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000140)=@setlink={0x44, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x44}}, 0x0) 00:02:01 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:02:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 612.886438][ T3126] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=cb.8b [ 612.895672][ T3126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.904113][ T3126] usb 1-1: Product: syz [ 612.908631][ T3126] usb 1-1: Manufacturer: syz [ 613.094922][ T3126] usb 1-1: config 0 descriptor?? [ 613.142006][ T3126] usb 1-1: can't set config #0, error -71 [ 613.227130][ T3126] usb 1-1: USB disconnect, device number 4 [ 613.313637][T14424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:02:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) 00:02:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1b, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x73) [ 614.029760][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:02:02 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x401, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1100809, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) 00:02:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) getsockname$packet(r1, 0x0, &(0x7f0000000200)) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x800) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) 00:02:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='sessionid\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r5 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000140)={0x3f, 0x1ff, 0x401, 0x0, 0x1f, 0xad, 0x778}, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000108000000008000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001c00ef0000001d8989638cfaf9511a5ebf9ed445ee0a0a644cbedb145753a380e73323c4a2f1960bf7660beddf39433cef521b844deee30553f9ab4c056b5568155f48bfc1de14da41b05df4f93025d808199723d05e2a82f8aa648828678a80efad1bf49234256a880b67d6c0aaa9407253a0829e7e94216838d51bcc0064ad241f9e36acea7cf2d8fd8a76eb12361d7fd3398e13a43ffa"], 0x28}}, 0x0) [ 614.402475][T14447] ===================================================== [ 614.409578][T14447] BUG: KMSAN: uninit-value in xfrm_user_rcv_msg_compat+0x1c7b/0x1ec0 [ 614.417650][T14447] CPU: 0 PID: 14447 Comm: syz-executor.5 Not tainted 5.10.0-rc4-syzkaller #0 [ 614.426403][T14447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.436451][T14447] Call Trace: [ 614.439818][T14447] dump_stack+0x21c/0x280 [ 614.444173][T14447] kmsan_report+0xf7/0x1e0 [ 614.448583][T14447] __msan_warning+0x5f/0xa0 [ 614.453234][T14447] xfrm_user_rcv_msg_compat+0x1c7b/0x1ec0 [ 614.458972][T14447] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 614.465055][T14447] ? kmsan_get_metadata+0x116/0x180 [ 614.470253][T14447] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 614.476053][T14447] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 614.482259][T14447] ? ns_capable+0x179/0x220 [ 614.486754][T14447] ? __msan_get_context_state+0x9/0x20 [ 614.492313][T14447] ? try_module_get+0x19/0x290 [ 614.497113][T14447] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 614.502925][T14447] ? kmsan_get_metadata+0x116/0x180 [ 614.508125][T14447] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 614.513930][T14447] xfrm_user_rcv_msg+0x489/0xf20 [ 614.518880][T14447] ? xfrm_alloc_compat+0x1c40/0x1c40 [ 614.524282][T14447] ? __dev_queue_xmit+0x3a9b/0x4520 [ 614.529479][T14447] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 614.535280][T14447] ? kmsan_get_metadata+0x116/0x180 [ 614.540469][T14447] ? kmsan_internal_set_origin+0x85/0xc0 [ 614.546093][T14447] ? kmsan_get_metadata+0x116/0x180 [ 614.551285][T14447] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 614.557145][T14447] netlink_rcv_skb+0x70a/0x820 [ 614.561906][T14447] ? xfrm_netlink_rcv+0xf0/0xf0 [ 614.566753][T14447] xfrm_netlink_rcv+0xb2/0xf0 [ 614.571425][T14447] netlink_unicast+0x11da/0x14b0 [ 614.576359][T14447] ? xfrm_user_net_exit+0x280/0x280 [ 614.581552][T14447] netlink_sendmsg+0x173c/0x1840 [ 614.586547][T14447] ____sys_sendmsg+0xc7a/0x1240 [ 614.591400][T14447] ? netlink_getsockopt+0x1830/0x1830 [ 614.596764][T14447] __sys_sendmsg+0x6d5/0x830 [ 614.601356][T14447] ? kmsan_copy_to_user+0x9c/0xb0 [ 614.606424][T14447] ? _copy_to_user+0x1d5/0x270 [ 614.611318][T14447] ? kmsan_get_metadata+0x116/0x180 [ 614.616524][T14447] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 614.622344][T14447] ? kmsan_get_metadata+0x116/0x180 [ 614.627545][T14447] ? kmsan_get_metadata+0x116/0x180 [ 614.632823][T14447] __se_compat_sys_sendmsg+0xa7/0xc0 [ 614.638116][T14447] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 614.643605][T14447] __do_fast_syscall_32+0x102/0x160 [ 614.648801][T14447] do_fast_syscall_32+0x6a/0xc0 [ 614.653646][T14447] do_SYSENTER_32+0x73/0x90 [ 614.658202][T14447] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 614.664516][T14447] RIP: 0023:0xf7fa7549 [ 614.668578][T14447] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 614.688174][T14447] RSP: 002b:00000000f55a10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 614.696582][T14447] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 614.704540][T14447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 614.712505][T14447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 614.720468][T14447] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 614.728446][T14447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 614.736409][T14447] [ 614.738723][T14447] Local variable ----attrs@xfrm_user_rcv_msg_compat created at: [ 614.746350][T14447] xfrm_user_rcv_msg_compat+0xf7/0x1ec0 [ 614.751886][T14447] xfrm_user_rcv_msg_compat+0xf7/0x1ec0 [ 614.757411][T14447] ===================================================== [ 614.764325][T14447] Disabling lock debugging due to kernel taint [ 614.770464][T14447] Kernel panic - not syncing: panic_on_warn set ... [ 614.777047][T14447] CPU: 0 PID: 14447 Comm: syz-executor.5 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 614.787177][T14447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.797321][T14447] Call Trace: [ 614.800614][T14447] dump_stack+0x21c/0x280 [ 614.804996][T14447] panic+0x4c8/0xea7 [ 614.808890][T14447] ? add_taint+0x17c/0x210 [ 614.813299][T14447] kmsan_report+0x1da/0x1e0 [ 614.817794][T14447] __msan_warning+0x5f/0xa0 [ 614.822296][T14447] xfrm_user_rcv_msg_compat+0x1c7b/0x1ec0 [ 614.828015][T14447] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 614.834071][T14447] ? kmsan_get_metadata+0x116/0x180 [ 614.839269][T14447] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 614.845065][T14447] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 614.851210][T14447] ? ns_capable+0x179/0x220 [ 614.855703][T14447] ? __msan_get_context_state+0x9/0x20 [ 614.861153][T14447] ? try_module_get+0x19/0x290 [ 614.865910][T14447] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 614.871717][T14447] ? kmsan_get_metadata+0x116/0x180 [ 614.876928][T14447] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 614.882732][T14447] xfrm_user_rcv_msg+0x489/0xf20 [ 614.887669][T14447] ? xfrm_alloc_compat+0x1c40/0x1c40 [ 614.892956][T14447] ? __dev_queue_xmit+0x3a9b/0x4520 [ 614.898153][T14447] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 614.903960][T14447] ? kmsan_get_metadata+0x116/0x180 [ 614.909157][T14447] ? kmsan_internal_set_origin+0x85/0xc0 [ 614.914783][T14447] ? kmsan_get_metadata+0x116/0x180 [ 614.919980][T14447] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 614.925781][T14447] netlink_rcv_skb+0x70a/0x820 [ 614.930541][T14447] ? xfrm_netlink_rcv+0xf0/0xf0 [ 614.935405][T14447] xfrm_netlink_rcv+0xb2/0xf0 [ 614.940076][T14447] netlink_unicast+0x11da/0x14b0 [ 614.945009][T14447] ? xfrm_user_net_exit+0x280/0x280 [ 614.950315][T14447] netlink_sendmsg+0x173c/0x1840 [ 614.955253][T14447] ____sys_sendmsg+0xc7a/0x1240 [ 614.960101][T14447] ? netlink_getsockopt+0x1830/0x1830 [ 614.965466][T14447] __sys_sendmsg+0x6d5/0x830 [ 614.970056][T14447] ? kmsan_copy_to_user+0x9c/0xb0 [ 614.975073][T14447] ? _copy_to_user+0x1d5/0x270 [ 614.979833][T14447] ? kmsan_get_metadata+0x116/0x180 [ 614.985023][T14447] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 614.990823][T14447] ? kmsan_get_metadata+0x116/0x180 [ 614.996014][T14447] ? kmsan_get_metadata+0x116/0x180 [ 615.001206][T14447] __se_compat_sys_sendmsg+0xa7/0xc0 [ 615.006486][T14447] __ia32_compat_sys_sendmsg+0x4a/0x70 [ 615.011945][T14447] __do_fast_syscall_32+0x102/0x160 [ 615.017141][T14447] do_fast_syscall_32+0x6a/0xc0 [ 615.021987][T14447] do_SYSENTER_32+0x73/0x90 [ 615.026489][T14447] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 615.032804][T14447] RIP: 0023:0xf7fa7549 [ 615.036868][T14447] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 615.056477][T14447] RSP: 002b:00000000f55a10cc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 615.064902][T14447] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 615.072874][T14447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 615.080838][T14447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 615.088800][T14447] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 615.096764][T14447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 615.105304][T14447] Kernel Offset: disabled [ 615.109661][T14447] Rebooting in 86400 seconds..