after parsing attributes in process `syz-executor.2'. [ 641.549489][T14319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:55:56 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x88200, 0x0) read$dsp(r0, &(0x7f0000000100)=""/16, 0x10) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 09:55:56 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x8981, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 641.721635][ T8705] usb 3-1: USB disconnect, device number 45 09:55:56 executing program 4: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x8940, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 641.943631][ T9745] usb 2-1: new high-speed USB device number 73 using dummy_hcd 09:55:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x13, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:55:56 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x8982, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 642.203758][ T9745] usb 2-1: Using ep0 maxpacket: 16 [ 642.252293][ T9745] usb 2-1: too many configurations: 243, using maximum allowed: 8 [ 642.344873][ T9745] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 642.353593][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 642.363857][ T8705] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 642.515021][ T9745] usb 2-1: config index 1 descriptor too short (expected 539, got 27) [ 642.523481][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 642.527824][T14365] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:55:57 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x18002, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:55:57 executing program 4: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x8940, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 642.654731][ T9745] usb 2-1: config index 2 descriptor too short (expected 539, got 27) [ 642.663461][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 642.690188][ T8705] usb 3-1: Using ep0 maxpacket: 16 09:55:57 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x8983, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:55:57 executing program 4: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x8940, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 642.785321][ T9745] usb 2-1: config index 3 descriptor too short (expected 539, got 27) [ 642.793818][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 642.847082][ T8705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 642.859108][T14370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 642.944447][ T9745] usb 2-1: config index 4 descriptor too short (expected 539, got 27) [ 642.953076][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 643.014433][ T8705] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 643.023783][ T8705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.031928][ T8705] usb 3-1: Product: syz [ 643.036426][ T8705] usb 3-1: Manufacturer: syz [ 643.041179][ T8705] usb 3-1: SerialNumber: syz [ 643.154615][ T9745] usb 2-1: config index 5 descriptor too short (expected 539, got 27) [ 643.163340][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 643.318081][ T8705] usb 3-1: config 0 descriptor?? [ 643.325305][ T9745] usb 2-1: config index 6 descriptor too short (expected 539, got 27) [ 643.334186][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 643.385041][ T8705] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 643.504339][ T9745] usb 2-1: config index 7 descriptor too short (expected 539, got 27) [ 643.512866][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 643.591708][ T3217] usb 3-1: USB disconnect, device number 46 [ 643.694548][ T9745] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 643.703964][ T9745] usb 2-1: New USB device strings: Mfr=107, Product=9, SerialNumber=221 [ 643.712443][ T9745] usb 2-1: Product: syz [ 643.716975][ T9745] usb 2-1: Manufacturer: syz [ 643.721711][ T9745] usb 2-1: SerialNumber: syz [ 643.768008][ T9745] usb 2-1: config 0 descriptor?? [ 643.814948][ T9745] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 644.025972][ T3217] usb 2-1: USB disconnect, device number 73 [ 644.355046][ T9745] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 644.613429][ T9745] usb 3-1: Using ep0 maxpacket: 16 [ 644.747244][ T9745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 644.834535][ T8654] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 644.944271][ T9745] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 644.953722][ T9745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.961869][ T9745] usb 3-1: Product: syz [ 644.966365][ T9745] usb 3-1: Manufacturer: syz [ 644.971215][ T9745] usb 3-1: SerialNumber: syz [ 645.082759][ T9745] usb 3-1: config 0 descriptor?? [ 645.114114][ T8654] usb 2-1: Using ep0 maxpacket: 16 [ 645.156768][ T8654] usb 2-1: too many configurations: 243, using maximum allowed: 8 [ 645.174643][ T9745] usb 3-1: can't set config #0, error -71 [ 645.196332][ T9745] usb 3-1: USB disconnect, device number 47 [ 645.244570][ T8654] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 645.252961][ T8654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:56:00 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x8401) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000040)={0x1, 0x1, 0x6a50, 0x7, 0x7b65, 0x4}) syz_usb_connect(0x1, 0xfffffcb7, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0xa9, 0xac, 0x88, 0x10, 0xd98, 0x300, 0xa8a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffff85, 0x1, 0x3, 0x0, 0x40}}]}}, 0x0) 09:56:00 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES32], 0x0) 09:56:00 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="232120f76acd68e9f5867fe7c0eb8b100576987a7dfaa8a1fed461069ecca85c7d5c0707e8bf"], 0x34) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e000004f5ca01516e57c3d694000000e500"/36], 0x24) 09:56:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x14, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:00 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x89a0, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:00 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 645.473251][ T8654] usb 2-1: unable to read config index 1 descriptor/all [ 645.480408][ T8654] usb 2-1: can't read configurations, error -71 [ 645.501710][T14415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 645.788346][T14426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 645.803883][ T9745] usb 3-1: new high-speed USB device number 48 using dummy_hcd 09:56:00 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e2312110fd0b04004f826b09ddf309021b020100000000090400000137b2f70009050e000000000000"], 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xc041, 0x0) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) 09:56:00 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x89a1, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x60, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 646.074207][ T9745] usb 3-1: device descriptor read/64, error 18 [ 646.214781][ T8654] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 646.300916][T14448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:01 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x89e0, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 646.473717][ T8654] usb 2-1: Invalid ep0 maxpacket: 16 [ 646.479690][ T8654] usb usb2-port1: attempt power cycle [ 646.485256][ T8702] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 646.503758][ T9745] usb 3-1: device descriptor read/64, error 18 [ 646.526402][T14454] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:01 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:01 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x89e1, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 646.723209][ T8702] usb 5-1: Using ep0 maxpacket: 16 [ 646.763939][ T8702] usb 5-1: too many configurations: 243, using maximum allowed: 8 [ 646.783558][ T9745] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 646.845128][ T8702] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 646.853896][ T8702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 646.963961][ T8702] usb 5-1: config index 1 descriptor too short (expected 539, got 27) [ 646.972452][ T8702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 647.064334][ T9745] usb 3-1: device descriptor read/64, error 18 [ 647.087497][ T8702] usb 5-1: config index 2 descriptor too short (expected 539, got 27) [ 647.096240][ T8702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 647.184635][ T8702] usb 5-1: config index 3 descriptor too short (expected 539, got 27) [ 647.193327][ T8702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 647.284072][ T8702] usb 5-1: config index 4 descriptor too short (expected 539, got 27) [ 647.284204][ T8654] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 647.292549][ T8702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 647.385941][ T8702] usb 5-1: config index 5 descriptor too short (expected 539, got 27) [ 647.394451][ T8702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 647.416737][ T8654] usb 2-1: Invalid ep0 maxpacket: 16 [ 647.484169][ T8702] usb 5-1: config index 6 descriptor too short (expected 539, got 27) [ 647.492698][ T8702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 647.500917][ T9745] usb 3-1: device descriptor read/64, error 18 [ 647.576214][ T8654] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 647.594380][ T8702] usb 5-1: config index 7 descriptor too short (expected 539, got 27) [ 647.602764][ T8702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 647.625952][ T9745] usb usb3-port1: attempt power cycle [ 647.683345][ T8654] usb 2-1: Invalid ep0 maxpacket: 16 [ 647.688922][ T8654] usb usb2-port1: unable to enumerate USB device [ 647.774202][ T8702] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 647.783700][ T8702] usb 5-1: New USB device strings: Mfr=107, Product=9, SerialNumber=221 [ 647.792198][ T8702] usb 5-1: Product: syz [ 647.796733][ T8702] usb 5-1: Manufacturer: syz [ 647.801483][ T8702] usb 5-1: SerialNumber: syz [ 647.846662][ T8702] usb 5-1: config 0 descriptor?? [ 647.884815][ T8702] kvaser_usb 5-1:0.0: Cannot get usb endpoint(s) [ 648.150836][ T8702] usb 5-1: USB disconnect, device number 18 [ 648.343385][ T9745] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 648.593360][ T9745] usb 3-1: device descriptor read/8, error -71 09:56:03 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100004f820102030109021b000100000000090400000137b2f70009050e00"/45], 0x0) 09:56:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:03 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xae01, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:03 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)) pipe(&(0x7f0000000080)) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:03 executing program 2: fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'btrfs.', '[\\%\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000000)={0x9, 0xe7, [0xfff, 0x7, 0x8, 0x2, 0x70], 0x4}) 09:56:03 executing program 4: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2a0000, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newlink={0xfffffffffffffdcc, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x41835}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 648.823333][ T9745] usb 3-1: device descriptor read/8, error -71 09:56:03 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xae41, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 649.006384][T14497] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:03 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000061128800000000009500000000000000a97592a0c9e2492ed3286eea43f52f6adc56174afd29fcefac19090785e21241e90a4308c0e22972fc43420e58839511173a51e14204cc567a7808a6973c09fc13b97b4932656f83b334274b8afee84e9628de3383e183389189365bbbf4722c7d5e247fa3b745a46031f985e82cb94a9e50717b3c1b82999003bd19e6c14943093108154ed62e362ffe4c091434fa9c3684bc3616f3c407f54d9acee55a32fbc4f05059f851bbbb5751dccc46db000011"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xdba3dd835d632dde}, 0x48) [ 649.183818][T14505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 649.342990][ T9745] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 649.393236][ T8654] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 649.454662][ T9745] usb 3-1: Using ep0 maxpacket: 16 09:56:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 649.584445][ T9745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 649.683647][ T8654] usb 2-1: device descriptor read/64, error 18 09:56:04 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xae80, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:04 executing program 4: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x80, 0x6, 0x401, 0x4, @loopback, @mcast2, 0x1, 0x1, 0x3, 0x1}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@private2}}, &(0x7f0000000340)=0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r5, r6, 0x0) write$cgroup_type(r6, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000600)) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000028001200098b659f49f200010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000240007050000004007a299000500aece99848900000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1d0, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xb4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "e16b95c83dcf277a319eac7930f0514d0ca68aa532aadaf57e496138aa8e12346cfe19976b610d7b221b47df1164d3401c7c3a293f3cf6bcca45283b7e2f4249711204d9134d98450a798fc711707844d63db49e597400bfaa56996a8ef4676d60953ed0faa3d2ed058670ae1c75ed83492ccb1cbb34d7b4e6e9e7e755a3fcde99262ab4d939461d5d884c6a939bb05b7f3ebccd68e13f8e774287f18c1375aaeb0b431b6257fcae916905ba"}]}, @ETHTOOL_A_FEATURES_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10bb968003cb655b}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) r9 = socket$inet6(0xa, 0x400000000005, 0x0) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @empty}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}) [ 649.768174][ T9745] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 649.777500][ T9745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.785980][ T9745] usb 3-1: Product: syz [ 649.790307][ T9745] usb 3-1: Manufacturer: syz [ 649.795189][ T9745] usb 3-1: SerialNumber: syz 09:56:04 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 649.908082][T14518] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 649.947002][ T9745] usb 3-1: config 0 descriptor?? [ 649.998822][ T9745] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 650.026464][T14520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 650.083875][ T8654] usb 2-1: device descriptor read/64, error 18 [ 650.202805][ T9745] usb 3-1: USB disconnect, device number 51 [ 650.373394][ T8654] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 650.652733][ T8654] usb 2-1: device descriptor read/64, error 18 [ 651.042756][ T8654] usb 2-1: device descriptor read/64, error 18 [ 651.180712][ T8654] usb usb2-port1: attempt power cycle [ 651.922793][ T8654] usb 2-1: new high-speed USB device number 80 using dummy_hcd 09:56:06 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000400)=0x38a7b2ab, 0x4) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)}, 0x0) 09:56:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:06 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x400448c9, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:06 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 652.023090][ T8654] usb 2-1: Invalid ep0 maxpacket: 2 09:56:06 executing program 2: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) r0 = socket$inet6(0xa, 0x2, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x71, &(0x7f0000000140)={r3}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x3, 0xff}, &(0x7f00000000c0)=0x8) syz_usb_connect(0x0, 0x1b, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x31, 0xd7, 0x83, 0x10, 0x107b, 0x3009, 0x6c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}}]}}, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8000) openat$cgroup_devices(r4, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) 09:56:06 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x400448dd, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 652.211998][T14570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 652.350316][T14580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:07 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r0 = shmget$private(0x0, 0x600000, 0x400, &(0x7f0000a00000/0x600000)=nil) shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6cae244ae5e24e10, 0x10, r2, 0x3) shmat(r0, &(0x7f0000a37000/0x1000)=nil, 0x4000) shmctl$SHM_UNLOCK(r0, 0xc) 09:56:07 executing program 4: fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'btrfs.', '[\\%\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000000)={0x9, 0xe7, [0xfff, 0x7, 0x8, 0x2, 0x70], 0x4}) 09:56:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x608, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:07 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x400454ca, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 652.662724][ T9745] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 652.913034][ T9745] usb 3-1: Using ep0 maxpacket: 16 [ 652.942743][ T8654] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 653.010573][T14606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 653.043781][ T9745] usb 3-1: config 0 has no interfaces? [ 653.063860][ T8654] usb 2-1: Using ep0 maxpacket: 16 [ 653.096840][ T3217] usb 5-1: new high-speed USB device number 19 using dummy_hcd 09:56:07 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40045506, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:07 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x0) [ 653.214761][ T8654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 653.226857][T14612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 653.244088][ T9745] usb 3-1: New USB device found, idVendor=107b, idProduct=3009, bcdDevice= 6.c4 [ 653.253925][ T9745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.262082][ T9745] usb 3-1: Product: syz [ 653.266582][ T9745] usb 3-1: Manufacturer: syz [ 653.271346][ T9745] usb 3-1: SerialNumber: syz [ 653.346845][ T3217] usb 5-1: Using ep0 maxpacket: 16 [ 653.376004][ T9745] usb 3-1: config 0 descriptor?? 09:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x806, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 653.425916][ T8654] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 653.435704][ T8654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.444121][ T8654] usb 2-1: Product: syz [ 653.448434][ T8654] usb 2-1: Manufacturer: syz [ 653.453285][ T8654] usb 2-1: SerialNumber: syz [ 653.496723][ T3217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 653.622225][ T8654] usb 2-1: config 0 descriptor?? [ 653.674990][ T8654] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 653.691231][ T3217] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 653.700835][ T3217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.709073][ T3217] usb 5-1: Product: syz [ 653.713534][ T3217] usb 5-1: Manufacturer: syz [ 653.718281][ T3217] usb 5-1: SerialNumber: syz 09:56:08 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4004550a, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 653.750263][T14628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 653.874569][ T3217] usb 5-1: config 0 descriptor?? [ 653.898589][ T9745] usb 2-1: USB disconnect, device number 81 [ 653.924496][ T3217] kvaser_usb 5-1:0.0: Cannot get usb endpoint(s) [ 653.947478][T14636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:08 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40049409, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 654.184670][ T8654] usb 5-1: USB disconnect, device number 19 [ 654.299349][T14658] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 654.376231][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 654.702498][ T3217] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 654.963420][ T3217] usb 2-1: Using ep0 maxpacket: 16 [ 655.097947][ T3217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:56:09 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x0) 09:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xa00, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 655.232045][ T8702] usb 3-1: USB disconnect, device number 52 [ 655.273285][ T3217] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 655.282607][ T3217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.290755][ T3217] usb 2-1: Product: syz [ 655.295228][ T3217] usb 2-1: Manufacturer: syz [ 655.299994][ T3217] usb 2-1: SerialNumber: syz [ 655.386983][ T3217] usb 2-1: config 0 descriptor?? [ 655.398396][T14679] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 655.434027][ T3217] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 655.544477][T14690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:10 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e2312110fd0b04004f820102030109021b0001000000050e00"/49, @ANYRESDEC, @ANYRES16, @ANYBLOB="c3a37053db67765c1d847ab9c7ccf3581b9176db8dcabc2e38c637c5a7e0234b50b5329e0b5189daa37b979c16faaa120155bfa7fc6d3484c870eab30b9af2a0a2189e6b6ad7398fe3751bc980bbd17495db764db5070a044b1018b97317c29e3b890915a5811211df9bc178813debc4a185da0ea6996fa3f1873371345417d7b1421dfedf85def042bf4c92304f194dd060bda61d1746eaced1c456c8054ffbd559eddab5cca6b0505308c72ffebf43b327d15f3c91c03564b7f76d1c4d2b2b1341745f6c8838cb68b5c1f0204f343d79573012fde3ff8213274efe7560de9fa0bd8fe8c13ca5ae2a7a10", @ANYRES32=r1], 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 09:56:10 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40085203, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:10 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006800130000e5f3f9cb4aaf1b2866387efadd40fade0000f5a803000002000000000000000800050001"], 0x20}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000040)={0x7c3a, {{0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, [], 0x1}, 0x1}}}, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x20004001, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x3f052c333fb6a28, 0x0) 09:56:10 executing program 2: socket(0x15, 0x2, 0x1) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x99, 0x2, 0x81, "5d341d3b471db86236a0b062ebf1adbd", "fb74b3f389923c25b70614702360513a423edc38dc056643796b9609052a48c9d870b2d494aa38f0a8cb563ddca2088dee11dcfc5574af6d39747a3d43ae09151993738989bbd9ac59a0a9b20bf0b7454f0998eb7f91208808c0cc5c8f68539b915fa891105f31083911e9e953d6bf2c5a874b434586a8d99b102e9ebcd04dd52b8dcd06"}, 0x99, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:56:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xb00, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 655.674242][ T8702] usb 2-1: USB disconnect, device number 82 09:56:10 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40085503, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 656.062695][ T3663] usb 3-1: new high-speed USB device number 53 using dummy_hcd 09:56:11 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x0) 09:56:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xc00, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 656.323836][ T3663] usb 3-1: Using ep0 maxpacket: 16 [ 656.329336][ T8702] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 656.443304][ T3663] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 656.583115][ T8702] usb 2-1: Using ep0 maxpacket: 16 [ 656.634103][ T3663] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 656.643802][ T3663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.651943][ T3663] usb 3-1: Product: syz [ 656.656553][ T3663] usb 3-1: Manufacturer: syz [ 656.661320][ T3663] usb 3-1: SerialNumber: syz [ 656.723204][ T8702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.733852][ T8702] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 09:56:11 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40089416, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 656.811520][ T3663] usb 3-1: config 0 descriptor?? [ 656.859064][ T3663] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 656.916250][ T8702] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 656.926202][ T8702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.934596][ T8702] usb 2-1: Product: syz [ 656.938908][ T8702] usb 2-1: Manufacturer: syz [ 656.943785][ T8702] usb 2-1: SerialNumber: syz [ 657.023906][ T8702] usb 2-1: config 0 descriptor?? 09:56:11 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r0 = shmget$private(0x0, 0x600000, 0x400, &(0x7f0000a00000/0x600000)=nil) shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6cae244ae5e24e10, 0x10, r2, 0x3) shmat(r0, &(0x7f0000a37000/0x1000)=nil, 0x4000) shmctl$SHM_UNLOCK(r0, 0xc) [ 657.059238][T13484] usb 3-1: USB disconnect, device number 53 [ 657.284913][ T8701] usb 2-1: USB disconnect, device number 83 09:56:12 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4008ae90, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 657.644453][T13484] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 657.892823][T13484] usb 5-1: Using ep0 maxpacket: 16 [ 658.013146][T13484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 658.072302][ T9034] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 658.182628][T13484] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 658.192543][T13484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.200834][T13484] usb 5-1: Product: syz [ 658.205670][T13484] usb 5-1: Manufacturer: syz [ 658.210432][T13484] usb 5-1: SerialNumber: syz [ 658.254220][T13484] usb 5-1: config 0 descriptor?? [ 658.293822][T13484] kvaser_usb 5-1:0.0: Cannot get usb endpoint(s) [ 658.323245][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 658.453008][ T9034] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.463430][ T9034] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 658.521356][ T8702] usb 5-1: USB disconnect, device number 20 [ 658.653362][ T9034] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 658.662761][ T9034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.671166][ T9034] usb 2-1: Product: syz [ 658.675709][ T9034] usb 2-1: Manufacturer: syz [ 658.680465][ T9034] usb 2-1: SerialNumber: syz [ 658.750298][ T9034] usb 2-1: config 0 descriptor?? 09:56:13 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e2352110fd0b04004f820102030126021b000100000000090400000137b2f70009050e000000000000"], 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x1e, 0x5, 0x6, 0x5, 0x7fff, 0x8}) 09:56:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x1100, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:13 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40095505, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:13 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:13 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x900, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0xd4}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x80) [ 659.028715][ T9034] usb 2-1: USB disconnect, device number 84 09:56:14 executing program 4: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1, 0x2}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) sendto(r0, &(0x7f0000000180)="8d", 0x1, 0x0, 0x0, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x9740) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f00000002c0)={{0x1, 0x0, @reserved="dd69ac907e6e3279d606b5e1b9414e0617ca17d17b3152156663ecc2534219b0"}, 0xcb, 0x0, [], "def9ad4580c61e8e81153c0063fa28d12870687530fa08047f961f676efa32237ed860315c9ddf6c79e40e01a698f4c59a83ff51c7aa7aacd3f2cb560772e7bd5488f1cfd795616eac2726d252aea4e122ffad0fb0584dea7e7b9fc7d7bfe12d98fdf06de8e4ec0e981d3e5fbabc4bbcbf2b4aed524129ecb04c744c958158105227c2d8abcbaeed59a05961cbf22e66ee54b76e547bed35ff86017a9bcdc118588f4dc62e54801a720ef80a92c113031469ef56bbf8efc097f4fd9aafa893ca234c8607d97d3581dd3d20"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) 09:56:14 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4010ae42, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 659.353151][T14804] __nla_validate_parse: 8 callbacks suppressed [ 659.353251][T14804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 659.622493][ T8654] usb 3-1: new high-speed USB device number 54 using dummy_hcd 09:56:14 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 659.805478][T14813] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:14 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40186366, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 659.882250][ T8654] usb 3-1: Using ep0 maxpacket: 16 [ 659.972239][ T9034] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 660.003774][ T8654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:56:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x1200, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 660.132170][T13484] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 660.183183][ T8654] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 660.193059][ T8654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.201505][ T8654] usb 3-1: Product: syz [ 660.206130][ T8654] usb 3-1: Manufacturer: syz [ 660.211071][ T8654] usb 3-1: SerialNumber: syz [ 660.243056][ T9034] usb 2-1: Using ep0 maxpacket: 16 09:56:15 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4018aee1, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 660.356366][ T8654] usb 3-1: config 0 descriptor?? [ 660.374516][ T9034] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 38 [ 660.383570][ T9034] usb 2-1: can't read configurations, error -22 09:56:15 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 660.403372][T13484] usb 5-1: device descriptor read/64, error 18 [ 660.435905][ T8654] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 660.500965][T14838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 660.612833][ T9034] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 660.635115][ T8654] usb 3-1: USB disconnect, device number 54 [ 660.708788][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 660.812044][T13484] usb 5-1: device descriptor read/64, error 18 [ 660.863347][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 660.993100][ T9034] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 38 [ 661.002127][ T9034] usb 2-1: can't read configurations, error -22 [ 661.026529][ T9034] usb usb2-port1: attempt power cycle [ 661.081942][T13484] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 661.352250][T13484] usb 5-1: device descriptor read/64, error 18 [ 661.402598][ T8654] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 661.642084][ T8654] usb 3-1: Using ep0 maxpacket: 16 [ 661.743442][T13484] usb 5-1: device descriptor read/64, error 18 [ 661.767932][ T9034] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 661.793049][ T8654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 661.873250][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 661.879383][T13484] usb usb5-port1: attempt power cycle [ 661.972299][ T8654] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 661.981842][ T8654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.989979][ T8654] usb 3-1: Product: syz [ 661.994891][ T8654] usb 3-1: Manufacturer: syz [ 661.999628][ T8654] usb 3-1: SerialNumber: syz [ 662.012787][ T8654] usb 3-1: config 0 descriptor?? [ 662.042072][ T9034] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 38 [ 662.050873][ T9034] usb 2-1: can't read configurations, error -22 [ 662.059500][ T8654] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 662.206518][ T8701] usb 3-1: USB disconnect, device number 55 [ 662.236762][ T9034] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 662.356799][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 662.482631][ T9034] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 38 [ 662.491307][ T9034] usb 2-1: can't read configurations, error -22 [ 662.513679][ T9034] usb usb2-port1: unable to enumerate USB device 09:56:17 executing program 1: syz_usb_connect(0x6, 0x765, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xd8, 0xfa, 0x45, 0x8, 0xb05, 0x17ab, 0xf6a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x753, 0x3, 0x8, 0x0, 0x160, 0x7, [{{0x9, 0x4, 0xd2, 0x80, 0xb, 0x28, 0xc8, 0x13, 0x3f, [@uac_control={{0xa, 0x24, 0x1, 0xfff8, 0x2a}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x7}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0x3, 0x8, "de8212"}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0x20, "b198b87ea0"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x3, 0x1, 0x40}]}, @uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x66, 0x1, 0x0, 0x9, "8c3b7c2e55e8de62de"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x4, 0x7f, "2a8932"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xbb, 0x1, 0x6, 0x6, 'm:'}]}], [{{0x9, 0x5, 0xb, 0xc, 0x0, 0x5, 0x2, 0x2, [@generic={0x65, 0x23, "22702f77b47522c0f9868761f04001b8645b95c36d9fbc365fab184f0f33006eb33b2e44981712353117090f6da748da0c2629a4d21eb014ab93120c69f56aa605481f0fa44d9771405a721ca31eaafc307c65defa98ab4d372a5628224ecbdb6c1ead"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x7fff}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0x28}}, {{0x9, 0x5, 0xa, 0x686238605bdc156d, 0x400, 0x1, 0x94}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x1, 0x1f, 0x7f, [@generic={0xba, 0x22, "6f963347e2e9d1625afd4118499f014bc8aab0107e31f061642d778cea3eb37f67b3ee09856324fddcf7b2cdb96e5f1afca186871ded42217d5cb26f3933afe0f22ddc5470ab0b628940aa7a1431d04f10e4146102cef174c5ea746614bafa98f02a14eb3bac75c9841a6f5befd6b1d1bb0ac8568c4169c9bf3c28a3e674990f4b7dedc534d558770534a5f82990e6214585eba0eb65ff2f805a4198648f0bfef4eb114d0365d83ac4358803e684b5e865e4bcaf79ed3048"}, @generic={0x79, 0x31, "4e4cc20f9f534e5c12dec06bafa3cd10f4c8df02e4a15777f56953c6fbadaa82949e424b512ee9507e35cf4c9bd9b02967ee5384d5c8d578d682b0f88cc6a258643631e036f10a905ab4afa0957c7b05a40651bf825f17274b3860203a41c00f978d319679f567e7ba37fce92a3aa2ebba6e2ede1cf46e"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x5, 0xfe, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x20, 0x3f, 0x1, [@generic={0x92, 0x9, "c8cabaff3ee00841095d7cea3a2424dfeda786393514ac64be2bb95c9821d1036e0f9d28a31ba48ab8b0d1129b25f89678e5a3b9a02f092fa4c58db27c2df0d3604cec1ab792bb9115c5b7e7f80f47caaa777f60a99cd7ce50b31666f1cda91357ecced1527afad41b9f2d4999f5d92fc4f621ebcb46dcdee66ea7f30efa7b203c702fe085a3edddedeaa0519643ab7d"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x40, 0x4, 0x6, [@generic={0xe1, 0x21, "79d2bf97d2262a39c7e0096d9a8710888ffcde9a7c3093152db248aec63c72cbc0a9e61921cd603abdd0788118c36c76de2b0fba83e0733f5bc0b510912736e9629820fec6a6394a939fcf5f26e40c424910df0cdc7902c90cb84976913445266c6f7713b821fc8a593fabcf2f4276e731b449457cb4ce10cebe9befc37733f9118eb8d69f22a8dbe5fed7d26e60fc0012158f06ba015fcf5608086e599c208914be9d0655a06143a5ac2ce59f42b0ac2559d32cbeef96380106dc32a943d7470f69b60906d3108a3e979d5bb269882caaeeb1cb92c74c5364a387e8ac6939"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x9, 0x4, 0x33, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5c, 0x9cf5}]}}, {{0x9, 0x5, 0x9, 0x8, 0xf807c38988b92eed, 0x43, 0x80, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x8}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x81, 0x7, 0x87, [@generic={0x54, 0x30, "4c7ec9d10bd246c9e9e1390538ebe9a9f3d123d8dfa1b8e100eb2b0e41c2b7a42225648f33d3980d42ccdaf7e1705754fecf91935a48f955533458272c699a53232e72a801417159fd4a0c08a1aefe1b3245"}]}}]}}, {{0x9, 0x4, 0xda, 0x2, 0x3, 0x8, 0x90, 0xb7, 0x6, [], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x0, 0x1, 0x4, [@generic={0xd8, 0x22, "618ab967c47b075c4a36de333b218c7715f151960de64720cbd477c4da22c19c1ade9d10caf4ef5b40a5e39581cbeb288882df564cdd919b6f4a57b0ba9e085708da6a0f3a70bff3dc10d2b60c6697695599739ed04f1ebeb6be07b9bf6350ba3dfcbef089f96ac5d850cf6784e1805addf54027a10efb3f5005bd6f680eac92484656ea4f7c4bc38f3e087f000c3e768c2999014d492efb9d2b7e81ecb9f977b16d129b57d5b1f38ea301ae636b928a20fc36fe93cf991f575ce0b2e2d027aa06d800ecf768826a12d15f7dcdcbdef9d05a574843f2"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x1, 0x1, 0x20, [@generic={0x50, 0x32, "469822b341611c778d1d942a370776d381a7f77c51389ca2f8ec8199a4f769320d867a333967a43521ae3e2b900fe478753e532369aa70ca23f9ef94844f684f65f2142366d1973a531b7367dc7d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x9, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x63d5}, @generic={0xdb, 0x23, "3082a9e52ba9b76b21b939b78a0fbfd0e94bec956960248a5ff337104e88495fd9b07030ea175cc3a1662a8e0cdbffb75b5624b03b3809401102e714c9354ac47401a2906efa71af8db19595122a84cf6e0ec88c68cad899b808b86e959a6560d1e09ae555f18b49ef9964259b5e668495bf4328533abce7354d5594da33a578cae2495ab15d4a995721dabf83f020c2c3fabee133900bff3e1461d7abe889a7996081bbf935c9d91e59d99f6d2ee171324eae8969f5e315373f7ff325fec0c934e1eaa40dd47d9f4987712b59c6a8f6f6312c3b040e117bac"}]}}]}}, {{0x9, 0x4, 0xed, 0x0, 0x4, 0x43, 0xcf, 0x75, 0x2, [@hid_hid={0x9, 0x21, 0xbb, 0x0, 0x1, {0x22, 0xf6d}}, @hid_hid={0x9, 0x21, 0x4000, 0x7, 0x1, {0x22, 0x21e}}], [{{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x7, 0x8, 0x6}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x1, 0x19, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x2}, @generic={0x79, 0x8, "b312d1b099a40020f0ffad37c04fae66c44fc2e6a137dd56421ab484bd5c5088607073de2e91368af474996658a4ac21a6fd5ac85b5426c37778674e1af70e89eb3bb5b96eb354a808b3923dd9e4624f18d07c61fbd29b3bbce5bbfe055c86b6ff3c778b0db491b790c7f7ad4bcd85e10e40e1031a7cc0"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x0, 0x7f, 0x35}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x1, 0x7f, 0xd8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfb}, @generic={0x10, 0x3, "cab6bdd94be1499a504d33a4708f"}]}}]}}]}}]}}, 0x0) 09:56:17 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) 09:56:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x1300, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:17 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4020940d, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:17 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100007442110fd0b0400cdae1102030109021b000103000000090400000137b2f70009050e0000000000004f182362ef81b74b3bf4ca2562f86748fce14c22df9763c994f03c26655f"], 0x0) [ 662.591863][T13484] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 662.701808][T14879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 662.762828][T13484] usb 5-1: device descriptor read/8, error -61 [ 662.860983][T14893] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:17 executing program 4: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4020940d, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:17 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4020ae46, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:17 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) [ 662.982327][ T8701] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 662.995162][T13484] usb 5-1: device descriptor read/8, error -71 09:56:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x1400, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 663.231792][ T8701] usb 3-1: Using ep0 maxpacket: 16 09:56:18 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4090ae82, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 663.353478][ T8701] usb 3-1: config 3 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:56:18 executing program 4: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4020940d, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 663.420598][T14908] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:18 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) 09:56:18 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$isdn_base(0x22, 0x3, 0x0) getsockname(r2, &(0x7f0000000580)=@caif, &(0x7f0000000600)=0x80) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x2, 0x5, 0x3}) r4 = dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYRES16=r1], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x115e}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffff000}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40041}, 0x11) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f0000000640)=0x7) dup3(r5, r6, 0x0) write$cgroup_type(r6, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={&(0x7f0000000140)="b9e172392b6be11b55659445344905fe37157eb01cc65ae6589c8854fcc248e0d36ead6d913d9188c598a5a5e319629145cacffcbf82d46b170fb9cfc6339003bfac58e125ea11843f2aaa6e70b5740d9d4451606f77272a3b8dc32913ce21e5", &(0x7f00000001c0)=""/138, &(0x7f0000000300)="cd2ef3ff66e4cb7b1c1fb46b69216d29738d8d495340ec66744edb160526e265d00ba0afdd78e51d067cb244c7e103f2e7960b63c1d99da9a6618ecf86b587e49bba1f7f5f6a12c21b115dba45458ff618646d6fba1663900fe2e9e35687dc48222911df9c991b5f2900c62b04cac3853f8d87cec3745af00b9139afae884cc9d2ca5ab2afafbdba30e4b81a27c022489605a99080978c58d6f1194b9d883f08ee540d5c3ec6c082f4440518b554533388452de8aa04100dfe193ebe13b27698363cee7e779834c70e0797866c28f96235fe44220e", &(0x7f0000000400)="89f0fb00c37afd65bba0b89977634724eedb5f8712cb805dcb3b6423cb88e69d0ee322b8092715c155e7843993c8337f842d0f5a824c2b9393c6f365f319e4b5a740d253628ffc17cb82632f27849237ae61874d0f0143518957e3d403dac0a2f95352ec85a9ac86e113a908a22d4da6759fb5155138", 0x20, r6, 0x4}, 0x38) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 663.523980][ T8701] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=ae.cd [ 663.533681][ T8701] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 663.542190][ T8701] usb 3-1: Product: syz [ 663.546528][ T8701] usb 3-1: Manufacturer: syz [ 663.551764][ T8701] usb 3-1: SerialNumber: syz [ 663.639640][T14915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 663.733988][ T8701] kvaser_usb 3-1:3.0: Cannot get usb endpoint(s) 09:56:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x3580, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:18 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x41015500, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 663.936783][ T8702] usb 3-1: USB disconnect, device number 56 09:56:18 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 664.129622][T14938] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 664.181963][ T8701] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 664.272513][T14947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 664.451651][ T8701] usb 2-1: device descriptor read/64, error 18 [ 664.731780][T13484] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 664.841653][ T8701] usb 2-1: device descriptor read/64, error 18 [ 664.971951][T13484] usb 3-1: Using ep0 maxpacket: 16 [ 665.092274][T13484] usb 3-1: config 3 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 665.114907][ T8701] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 665.262160][T13484] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=ae.cd [ 665.271604][T13484] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 665.279770][T13484] usb 3-1: Product: syz [ 665.284361][T13484] usb 3-1: Manufacturer: syz [ 665.289105][T13484] usb 3-1: SerialNumber: syz [ 665.373005][T13484] kvaser_usb 3-1:3.0: Cannot get usb endpoint(s) [ 665.391902][ T8701] usb 2-1: device descriptor read/64, error 18 [ 665.602993][T13484] usb 3-1: USB disconnect, device number 57 09:56:20 executing program 2: syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:56:20 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4138ae84, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:20 executing program 4: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4020940d, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:20 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x4788, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 665.791390][ T8701] usb 2-1: device descriptor read/64, error 18 09:56:20 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x50009402, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 665.910962][T14977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 665.912878][ T8701] usb usb2-port1: attempt power cycle [ 666.099972][T14982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:20 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x80085502, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:20 executing program 4: rmdir(&(0x7f0000000040)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000000c0)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010401000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280090001007866726d000000001c00028008000200040000000800010000000000080001000400000008000300", @ANYRES32=r4, @ANYBLOB="932a1355279d05c744e632eaea99511ef330ef43e94095738e8ff8933c466d5529f7d6a3f8e5507c8b0f0f099ba41e99881e886f3296447fb2dee77cd3774b551d6a7f1af521a6ad82d2cb3565dde45e2f0e994166ccb3f0da4075c345"], 0x54}}, 0x0) [ 666.401830][ T9034] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 666.671786][ T9034] usb 3-1: Using ep0 maxpacket: 16 [ 666.691550][ T8701] usb 2-1: new high-speed USB device number 91 using dummy_hcd 09:56:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = io_uring_setup(0xa3, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000000), 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:56:21 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x4888, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:21 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x8008563f, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 666.803136][ T9034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 666.881435][ T8701] usb 2-1: device descriptor read/8, error -71 [ 666.958397][T15013] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 666.992850][ T9034] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 667.002214][ T9034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.010440][ T9034] usb 3-1: Product: syz [ 667.014997][ T9034] usb 3-1: Manufacturer: syz [ 667.019735][ T9034] usb 3-1: SerialNumber: syz [ 667.088167][ T9034] usb 3-1: config 0 descriptor?? [ 667.091859][ T8701] usb 2-1: device descriptor read/8, error -71 [ 667.124854][T15027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 667.139981][ T9034] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 667.343572][T13484] usb 3-1: USB disconnect, device number 58 [ 667.581437][ T8701] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 667.672377][ T8701] usb 2-1: Using ep0 maxpacket: 16 [ 667.791941][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 668.002968][ T8701] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 668.012377][ T8701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.020518][ T8701] usb 2-1: Product: syz [ 668.025127][ T8701] usb 2-1: Manufacturer: syz [ 668.029864][ T8701] usb 2-1: SerialNumber: syz [ 668.118175][ T8701] usb 2-1: config 0 descriptor?? [ 668.158294][ T8654] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 668.163110][ T8701] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 668.365465][ T8705] usb 2-1: USB disconnect, device number 92 [ 668.404979][ T8654] usb 3-1: Using ep0 maxpacket: 16 [ 668.541646][ T8654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 668.721287][ T8654] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 668.730539][ T8654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.738946][ T8654] usb 3-1: Product: syz [ 668.743381][ T8654] usb 3-1: Manufacturer: syz [ 668.748110][ T8654] usb 3-1: SerialNumber: syz [ 668.763866][ T8654] usb 3-1: config 0 descriptor?? [ 668.802907][ T8654] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 669.005698][ T8654] usb 3-1: USB disconnect, device number 59 09:56:23 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:23 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) quotactl(0x9, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000100)="09b27baa52290f946917eb380f436bdbebcb3a9ee7bd182167b013516c29e1d54294c2428262363a4faed74abca18012524dd6b1b95f1d352cbc143d9c1df883cac30bda5dd02418ac82834dbf2a6e7ec0b86bd13560904d698d484b3d05bd52cfb9213bf5e2be722b1b3b19bc632eaea6e1f2a01a7f92dbff5e69bbfc6a8a51f3d6c7e5836e132d8990dcd5fb5c29bfe50340f912a60566ed1e18c503e3c746a6138e374c7d9805e850") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) write$cgroup_type(r5, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x3f, 0x6, 0x9, 0x73, 0x0, 0x1, 0x9002, 0x12, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x2, @perf_config_ext={0x1f, 0x6}, 0x10, 0x9, 0x1f, 0x6, 0x8, 0x5, 0x3}, r3, 0x3, r6, 0x3) dup2(r5, r7) 09:56:23 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x80086301, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x5865, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:23 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, [], 0x1}, 0x8001}}, 0x5, 0xfc01, 0x8, 0xd8, 0x1b, 0x8, 0x4}, &(0x7f00000000c0)=0x9c) 09:56:23 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, r3, 0xd5bf98d0fc1ca92f, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x100}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xfffffffa, 0x80000000, 0xfffffbff, 0xc2fb}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0xb5b7553b5d6072e2) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) [ 669.245169][T15079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 669.454556][T15088] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:24 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:24 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x80108906, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 669.511594][ T8654] usb 2-1: new high-speed USB device number 93 using dummy_hcd 09:56:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x6000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = io_uring_setup(0xa3, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000000), 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:56:24 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x80108907, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 669.781161][ T8654] usb 2-1: Using ep0 maxpacket: 16 [ 669.786829][ T8705] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 669.915899][T15107] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 669.938587][ T8654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:56:24 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 670.073716][ T8705] usb 3-1: Using ep0 maxpacket: 16 [ 670.133095][ T8654] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 670.142410][ T8654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.151303][ T8654] usb 2-1: Product: syz [ 670.155812][ T8654] usb 2-1: Manufacturer: syz [ 670.161587][ T8654] usb 2-1: SerialNumber: syz [ 670.179181][T15111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 670.219111][ T8705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 670.305779][ T8654] usb 2-1: config 0 descriptor?? 09:56:25 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x80685600, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 670.357888][ T8654] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 670.392210][ T8701] usb 5-1: new high-speed USB device number 25 using dummy_hcd 09:56:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x6558, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 670.395089][ T8705] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 670.409287][ T8705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.417980][ T8705] usb 3-1: Product: syz [ 670.422447][ T8705] usb 3-1: Manufacturer: syz [ 670.427201][ T8705] usb 3-1: SerialNumber: syz [ 670.549665][ T8705] usb 3-1: config 0 descriptor?? [ 670.561094][ T3217] usb 2-1: USB disconnect, device number 93 09:56:25 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) [ 670.630653][ T8705] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 670.631071][ T8701] usb 5-1: Using ep0 maxpacket: 16 [ 670.741792][T15145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 670.762872][ T8701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 670.801633][ T8705] usb 3-1: USB disconnect, device number 60 09:56:25 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x8138ae83, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 670.883675][T15150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 670.932573][ T8701] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 670.941991][ T8701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.950143][ T8701] usb 5-1: Product: syz [ 670.954880][ T8701] usb 5-1: Manufacturer: syz [ 670.959624][ T8701] usb 5-1: SerialNumber: syz [ 671.116361][ T8701] usb 5-1: config 0 descriptor?? [ 671.162910][ T8701] kvaser_usb 5-1:0.0: Cannot get usb endpoint(s) [ 671.381085][ T8705] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 671.381198][ T8701] usb 5-1: USB disconnect, device number 25 [ 671.631035][ T8705] usb 2-1: Using ep0 maxpacket: 16 [ 671.764872][ T8705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 671.941415][ T8705] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 671.950652][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.959008][ T8705] usb 2-1: Product: syz [ 671.963534][ T8705] usb 2-1: Manufacturer: syz [ 671.968289][ T8705] usb 2-1: SerialNumber: syz [ 672.044763][ T8705] usb 2-1: config 0 descriptor?? [ 672.082630][ T8705] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) 09:56:26 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) 09:56:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x8035, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:26 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc0045005, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:26 executing program 2: keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2310100000000090400000137b200000000000000000000000017001000"/46], 0x0) 09:56:26 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e2452110fd0b04006f820102030109021b000108000000090400000137b2f70009050e000000000000f2b20db79af9fb872dc8d06f51afe6609dfb04fd"], 0x0) 09:56:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000000)={0x3}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) [ 672.251049][T13484] usb 2-1: USB disconnect, device number 94 [ 672.381027][T15195] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:27 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) [ 672.547845][T15223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 672.624034][ T8701] usb 3-1: new high-speed USB device number 61 using dummy_hcd 09:56:27 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc0045878, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:27 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc0045878, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x8100, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 672.904710][ T8701] usb 3-1: device descriptor read/64, error 18 09:56:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000002942f000000400000000700c87bdeb1d7ce451039c460168e00"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffc}, 0x48) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x6048010) [ 673.104251][ T8702] usb 2-1: new high-speed USB device number 95 using dummy_hcd 09:56:27 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 673.147515][T15294] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:27 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc0085504, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 673.310933][ T8701] usb 3-1: device descriptor read/64, error 18 [ 673.352670][T15299] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 673.361825][ T8702] usb 2-1: Using ep0 maxpacket: 16 [ 673.491972][ T8702] usb 2-1: config 8 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:56:28 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000540)=0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32, @ANYBLOB="08000200e0"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x6, @pix_mp={0xfffffffc, 0x0, 0x43564548, 0x0, 0x0, [{0x0, 0x20000000}, {}, {0xfffffffa}, {0x4, 0x3}, {0x0, 0x5}], 0x0, 0x0, 0x6, 0x1}}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1c6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000440)={{0x2, 0x4}, 'port1\x00', 0x0, 0x0, 0x3, 0x3, 0x7fff, 0x3, 0x8, 0x0, 0x3, 0x24}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000180)=[{0x4, 0x5c}], 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) [ 673.592619][ T8701] usb 3-1: new high-speed USB device number 62 using dummy_hcd 09:56:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x8847, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 673.706716][ T8702] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.6f [ 673.716113][ T8702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.724461][ T8702] usb 2-1: Product: syz [ 673.728820][ T8702] usb 2-1: Manufacturer: syz [ 673.733727][ T8702] usb 2-1: SerialNumber: syz [ 673.842746][ T8702] kvaser_usb 2-1:8.0: Cannot get usb endpoint(s) [ 673.911806][T15319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 673.940862][ C0] sd 0:0:1:0: [sg0] tag#7300 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 673.951555][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB: Test Unit Ready [ 673.958313][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 673.968257][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 673.978298][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 673.992277][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.002247][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.012636][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.022609][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.032664][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.042657][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.052713][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.062721][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.072701][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.083161][ C0] sd 0:0:1:0: [sg0] tag#7300 CDB[c0]: 00 00 00 00 00 00 00 00 [ 674.091238][ T8701] usb 3-1: device descriptor read/64, error 18 [ 674.099387][T15326] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 674.109680][ T8702] usb 2-1: USB disconnect, device number 95 [ 674.644731][ C0] sd 0:0:1:0: [sg0] tag#7301 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 674.655462][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB: Test Unit Ready [ 674.662269][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.672174][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.682085][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.691984][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.701892][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.711826][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.721708][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.731733][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.731899][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.751433][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.751563][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.751690][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 674.751811][ C0] sd 0:0:1:0: [sg0] tag#7301 CDB[c0]: 00 00 00 00 00 00 00 00 [ 674.985355][ T8701] usb 3-1: device descriptor read/64, error 18 [ 675.111891][ T8701] usb usb3-port1: attempt power cycle 09:56:30 executing program 2: syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:56:30 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:30 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc008ae05, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x8848, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:30 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x182, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0xa, 0x6, 0x8, 0x4}, 0x10) 09:56:30 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000540)=0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32, @ANYBLOB="08000200e0"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x6, @pix_mp={0xfffffffc, 0x0, 0x43564548, 0x0, 0x0, [{0x0, 0x20000000}, {}, {0xfffffffa}, {0x4, 0x3}, {0x0, 0x5}], 0x0, 0x0, 0x6, 0x1}}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="5300000044a6aeabc81e152000000000000007000000f64017db9820000000000000d403ffff633b27e59aa146174dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6a600000000000000c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bbb53a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff04000000000000000000000000de00009a583b79ab00f70d85463c57c5bb1f1084e683b591fc2c8b8a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643db6de62f253b1304782753de6634bf57fbe09a7eb8"], 0x1c6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000440)={{0x2, 0x4}, 'port1\x00', 0x0, 0x0, 0x3, 0x3, 0x7fff, 0x3, 0x8, 0x0, 0x3, 0x24}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000180)=[{0x4, 0x5c}], 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) 09:56:30 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc00caee0, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 675.502161][T15345] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 675.578844][ C1] sd 0:0:1:0: [sg0] tag#7302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 675.589528][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB: Test Unit Ready [ 675.597948][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.607887][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.617818][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.627794][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.637676][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.647570][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.657485][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.667388][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.677370][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.687261][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.700602][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.710549][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 675.720593][ C1] sd 0:0:1:0: [sg0] tag#7302 CDB[c0]: 00 00 00 00 00 00 00 00 [ 675.761903][ T8702] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 675.918209][T15361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.001086][ T8702] usb 2-1: Using ep0 maxpacket: 16 09:56:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x34000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 676.121644][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:56:31 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 676.282332][ T8702] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 676.291670][ T8702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.299807][ T8702] usb 2-1: Product: syz [ 676.304261][ T8702] usb 2-1: Manufacturer: syz [ 676.309011][ T8702] usb 2-1: SerialNumber: syz [ 676.369862][T15373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:31 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc0189436, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:31 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000540)=0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32, @ANYBLOB="08000200e0"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x6, @pix_mp={0xfffffffc, 0x0, 0x43564548, 0x0, 0x0, [{0x0, 0x20000000}, {}, {0xfffffffa}, {0x4, 0x3}, {0x0, 0x5}], 0x0, 0x0, 0x6, 0x1}}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1c6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000440)={{0x2, 0x4}, 'port1\x00', 0x0, 0x0, 0x3, 0x3, 0x7fff, 0x3, 0x8, 0x0, 0x3, 0x24}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000180)=[{0x4, 0x5c}], 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) [ 676.492966][ T8702] usb 2-1: config 0 descriptor?? [ 676.534530][ T8702] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 676.573382][T15377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:31 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000300)={{r0}, "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"}) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3a9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) [ 676.741188][ T8702] usb 2-1: USB disconnect, device number 96 [ 676.838119][ C1] sd 0:0:1:0: [sg0] tag#7303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 676.848951][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB: Test Unit Ready [ 676.855795][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 676.865806][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 676.875698][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 676.885758][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 676.895942][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 676.905839][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 676.916521][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 676.926417][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09:56:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x400300, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 676.936350][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 676.946430][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 676.956324][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 676.966331][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 676.976225][ C1] sd 0:0:1:0: [sg0] tag#7303 CDB[c0]: 00 00 00 00 00 00 00 00 09:56:31 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc018aa3f, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:31 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 677.472088][T15410] __nla_validate_parse: 1 callbacks suppressed [ 677.472126][T15410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 677.530879][ T8702] usb 2-1: new high-speed USB device number 97 using dummy_hcd 09:56:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 677.770842][ T8702] usb 2-1: Using ep0 maxpacket: 16 [ 677.784923][ T8654] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 677.891785][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 677.910577][T15421] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 677.974483][T15424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 678.076406][ T8654] usb 3-1: Using ep0 maxpacket: 16 [ 678.080761][ T8702] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 678.091007][ T8702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.099142][ T8702] usb 2-1: Product: syz [ 678.103740][ T8702] usb 2-1: Manufacturer: syz [ 678.108488][ T8702] usb 2-1: SerialNumber: syz [ 678.166463][ T8702] usb 2-1: config 0 descriptor?? [ 678.212786][ T8702] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 678.222583][ T8654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 678.397360][ T8654] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 678.406766][ T8654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.415490][ T8654] usb 3-1: Product: syz [ 678.419832][ T8654] usb 3-1: Manufacturer: syz [ 678.424667][ T8654] usb 3-1: SerialNumber: syz [ 678.443634][ T8702] usb 2-1: USB disconnect, device number 97 [ 678.477663][ T8654] usb 3-1: config 0 descriptor?? [ 678.522569][ T8654] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) 09:56:33 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0xa, 0xfe, {0xfe, 0x4, "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"}}, &(0x7f0000000140)={0x0, 0x3, 0xad, @string={0xad, 0x3, "8ff2978147219b4bd8d5b9c21a1f23d14381a92320524d3c6d2d09086d1c457cc2e85bcce49bc4323e5179390e00599b5745866a82162fd48b88a298847eed88409b4d0928928592bd901f913b55506ad1f447e363ecf9ca34ffe0d01b7114cf68a8e0b61061e193ec7552819e496d62eb4727e9b285833ea2735ff1457981baa23908b2cde36c2d4d21c5f880230b9a826e9eb220d864aa5f9da6b147567be5d858e83efcee359ba0bd4e"}}, &(0x7f0000000200)={0x0, 0xf, 0x58, {0x5, 0xf, 0x58, 0x4, [@generic={0x32, 0x10, 0x3, "84a96b8be69ea050675dfea25d93ade252a1018c2090bbf02c694585c42b7579aeb73f0b6c470308f32ce9467a889b"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xd, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x6, 0x81}, @generic={0xf, 0x10, 0x4, "8ff19606e2ea6213899f2c9b"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x10, 0x2, 0x1f, "45c225eb", "38dfa133"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x18, 0x81, 0x3, 0x2, 0x5e6, 0x8}}}, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x40, 0x31, 0xc, "b5ba2a9859e3ea508b59c23a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x8, 0x8, [0xf000]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000540)={0x40, 0xb, 0x2, "3c17"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xa7}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000600)={0x40, 0x17, 0x6}, &(0x7f0000000640)={0x40, 0x19, 0x2, "b22c"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000006c0)={0x40, 0x1c, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x4}}) 09:56:33 executing program 4: getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000540)=0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32, @ANYBLOB="08000200e0"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x6, @pix_mp={0xfffffffc, 0x0, 0x43564548, 0x0, 0x0, [{0x0, 0x20000000}, {}, {0xfffffffa}, {0x4, 0x3}, {0x0, 0x5}], 0x0, 0x0, 0x6, 0x1}}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1c6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000440)={{0x2, 0x4}, 'port1\x00', 0x0, 0x0, 0x3, 0x3, 0x7fff, 0x3, 0x8, 0x0, 0x3, 0x24}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000180)=[{0x4, 0x5c}], 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) 09:56:33 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc020660b, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:33 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 678.746590][T15446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 678.778625][ C0] sd 0:0:1:0: [sg0] tag#7304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 678.789383][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB: Test Unit Ready [ 678.796166][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 678.806136][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 678.816112][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 678.826105][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 678.836047][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 678.846018][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 678.856586][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 678.866552][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 678.876610][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 678.886618][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 678.896518][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 678.906425][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 678.916322][ C0] sd 0:0:1:0: [sg0] tag#7304 CDB[c0]: 00 00 00 00 00 00 00 00 09:56:33 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc020aa00, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 679.101689][T15454] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:33 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 679.200721][ T8654] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 679.440513][ T8654] usb 2-1: Using ep0 maxpacket: 16 [ 679.571937][ T8654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 679.761116][ T8654] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 679.770536][ T8654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.778676][ T8654] usb 2-1: Product: syz [ 679.783107][ T8654] usb 2-1: Manufacturer: syz [ 679.787854][ T8654] usb 2-1: SerialNumber: syz [ 679.801640][ T8654] usb 2-1: config 0 descriptor?? [ 679.852008][ T8654] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) 09:56:34 executing program 2: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:56:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:34 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:34 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc0cc5616, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x400300, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 679.975402][ T8705] usb 3-1: USB disconnect, device number 64 [ 680.093259][T15482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 680.144815][T15487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 680.358980][T15481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 680.672351][ T8701] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 680.920262][ T8701] usb 3-1: Using ep0 maxpacket: 16 [ 681.060531][ T8701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 681.241262][ T8701] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 681.250891][ T8701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.259119][ T8701] usb 3-1: Product: syz [ 681.263664][ T8701] usb 3-1: Manufacturer: syz [ 681.268399][ T8701] usb 3-1: SerialNumber: syz [ 681.283002][ T8701] usb 3-1: config 0 descriptor?? [ 681.322751][ T8701] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 681.524350][ T3217] usb 3-1: USB disconnect, device number 65 09:56:36 executing program 1: ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000040)) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000080)=""/130) 09:56:36 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348ce2ce540b277ccd1e7e4cf7a4cdc00c895247ceb2b89d9397b06ef30c58e5b46ffce0809dd8437978e44449d94f2d0165910ae6b9bc4bbcd15af092d5c"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x400300, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:36 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 682.055878][T15518] usb 2-1: USB disconnect, device number 98 09:56:37 executing program 2: syz_usb_connect(0x0, 0x1f8, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x16, 0xae, 0x46, 0x10, 0x4e8, 0xa101, 0xd8af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e6, 0x2, 0x0, 0x1, 0xc0, 0x0, [{{0x9, 0x4, 0x7a, 0x5, 0x2, 0x2, 0x6, 0x0, 0x4, [@uac_as, @hid_hid={0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x7b7}}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x6, 0x7, 0x3}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x2, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x103}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xfff8}]}}]}}, {{0x9, 0x4, 0xda, 0xff, 0x3, 0xff, 0xff, 0xff, 0x40, [@hid_hid={0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x124}}, @generic={0xc6, 0x22, "1779687668a061a07a7da0f3a29e6edeecf7155498f23d0ce9c112ef3fc30a01c8cb5c2810c28499320644f8c2a327102bc87963ef30ad60d38c4b8209c72038ac04611ffcd6e5a131131709aea1dc42f1022b537d906723a6218ae394b792f813e400f425b67b0cd12813da2184013451360776f561e7e192d89a415115765d1db22d4c902d11c4cf655f98d80db500efa02c0e9b6f9e0f4c2db1f37520859659bbe46effae99e780d9a0231ebc8690bcb3c42f24ab17fc5a44a2c06123a4f046295cdb"}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0x5f, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x20}, @generic={0xaa, 0x7, "ccf979b90dfac176a32e71e40f3b7844ef5d449cac83fb61a08770ad1695755e0311c9b17ebbe766f50388c0ccc77edaf8585657cb6e243be55a31eb62c1738ce9242be0ae13267632dad7d585ac926ae1f8609b011da9bbab854be43746e125f2963b83ed44c74d84eccfe98e6fc5380d2b67992933d10bed1b978c0b8b97f4732f76903a28305bc5775956cfae435d80dfbec72fbe1e9f45861d428ab32fce766740c040f450d8"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x0, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xcc, 0x4f9}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x80, 0x3, 0x3e}}]}}]}}]}}, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) [ 682.306559][T15530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 682.530003][T15531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 09:56:37 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 682.665053][T15534] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:37 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000180)={0x6, 0x2}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000440)=0x4) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r5 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x42, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000200)={0x2, r6}) write$binfmt_elf32(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="ff454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff0300da00110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348a9d094f9f021f8f49b258d4b0f72fdd0f2c99580487fded07babc829"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x34000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 682.900490][ T8701] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 683.029675][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 683.057224][ T5] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 683.140111][ T8701] usb 2-1: Using ep0 maxpacket: 16 [ 683.148646][T15568] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:37 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:37 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000008000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 683.270393][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 683.310679][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 683.431214][ T5] usb 3-1: unable to get BOS descriptor or descriptor too short [ 683.444108][ T8701] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 683.453710][ T8701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.462242][ T8701] usb 2-1: Product: syz [ 683.466593][ T8701] usb 2-1: Manufacturer: syz [ 683.471589][ T8701] usb 2-1: SerialNumber: syz [ 683.530182][ T5] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 683.538012][ T5] usb 3-1: can't read configurations, error -71 [ 683.605451][T15574] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 683.658683][ T8701] usb 2-1: config 0 descriptor?? [ 683.702478][ T8701] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 683.923787][ T3663] usb 2-1: USB disconnect, device number 99 [ 684.290020][ T5] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 684.530515][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 684.650032][ T5] usb 3-1: unable to get BOS descriptor or descriptor too short [ 684.710347][ T5] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 684.718251][ T5] usb 3-1: can't read configurations, error -71 09:56:39 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000006c0), &(0x7f0000000700)=0x4) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:56:39 executing program 4: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x160, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x138, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x128, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8004}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa99, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0x7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x21d5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcb0, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xae5f}}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x200f3af9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x58, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x38}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xfffffffc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x100}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x160}}, 0x8000) 09:56:39 executing program 3: ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:39 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:39 executing program 2: syz_usb_connect(0x2, 0x1b, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x1d, 0x18, 0x62, 0x10, 0x19d2, 0xff8f, 0x4707, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x3f}}]}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0x1, 0x0, 0x9, 0xfffff719, 0x4}) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) [ 684.841198][ T5] usb usb3-port1: attempt power cycle [ 684.983969][T15604] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:39 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 685.216626][T15611] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:40 executing program 4: keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={'vmac(cast6-generic)\x00'}}) 09:56:40 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) unshare(0x100) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r2, &(0x7f0000000200)=[{0x2, 0xfe00}], 0x1, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(r2, &(0x7f0000000140)=[{0x2, 0x6, 0x1000}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0)=[0x6, 0x8000]) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x8000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 685.493246][T15518] usb 2-1: new high-speed USB device number 100 using dummy_hcd 09:56:40 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 685.639812][ T5] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 685.753029][T15636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 685.754947][T15518] usb 2-1: Using ep0 maxpacket: 16 [ 685.870013][ T5] usb 3-1: unable to get BOS descriptor or descriptor too short [ 685.951062][T15518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 685.990991][ T5] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 685.999071][ T5] usb 3-1: can't read configurations, error -71 [ 686.061170][T15644] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 686.132030][T15518] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 686.141461][T15518] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.150106][T15518] usb 2-1: Product: syz [ 686.154435][T15518] usb 2-1: Manufacturer: syz [ 686.159278][T15518] usb 2-1: SerialNumber: syz [ 686.186825][T15631] could not allocate digest TFM handle vmac(cast6-generic) 09:56:40 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 686.262350][T15631] could not allocate digest TFM handle vmac(cast6-generic) [ 686.337007][T15518] usb 2-1: config 0 descriptor?? [ 686.396267][T15518] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 686.586521][ T27] usb 2-1: USB disconnect, device number 100 [ 686.731383][ T5] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 686.962955][ T5] usb 3-1: unable to get BOS descriptor or descriptor too short [ 687.089806][ T5] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 687.097709][ T5] usb 3-1: can't read configurations, error -71 [ 687.133565][ T5] usb usb3-port1: unable to enumerate USB device [ 687.370454][ T27] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 687.619840][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 687.750562][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 687.961404][ T27] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 687.971130][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.979268][ T27] usb 2-1: Product: syz [ 687.983747][ T27] usb 2-1: Manufacturer: syz [ 687.988501][ T27] usb 2-1: SerialNumber: syz [ 688.058030][ T27] usb 2-1: config 0 descriptor?? [ 688.350197][ T27] usb 2-1: can't set config #0, error -71 09:56:43 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e2312110fd0b04004f820102030109021b0001000000000904000401fe83f70009050e000000000000"], 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0x20, 0x1f, 0x3}) [ 688.422352][ T27] usb 2-1: USB disconnect, device number 101 09:56:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x8060000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r1, 0x0) write$snapshot(r3, &(0x7f0000000140)="2cf151b18001e9b6c28ec0a2f6c8b420761f0fd3b54cbd0daa381c89d7b18c0127c45fdb541b36fee80d8d6f676d6bfcf33e5138a080cd85412c6085c889b46c756a0f8fade0", 0x46) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0x4040aea0, &(0x7f00000000c0)={0x0, 0x0, [0x176, 0x0, 0x3, 0x8, 0xfdfdffff]}) dup2(r3, r2) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r6, 0x227d, &(0x7f0000000200)) 09:56:43 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 688.639024][T15685] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:43 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x115800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000280)={'wg2\x00', 0x8}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x2c, 0x64, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@TCA_RATE={0x6, 0x5, {0x80, 0xf0}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delneigh={0x30, 0x1d, 0x200, 0x70bd26, 0x25dfdbfd, {0x1c, 0x0, 0x0, r6, 0x8, 0x9f, 0x3}, [@NDA_CACHEINFO={0x14, 0x3, {0x8000, 0x8000, 0x1f, 0xffffffff}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) [ 688.746158][T15693] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 09:56:43 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40011}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002dbd7000fddbdf25020000f1070002000200000008000200020000000800010002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) write$cgroup_type(r5, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000480)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1d}}, 0x10) r7 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x18, 0x140e, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0xffffffff, {{0x2, 0x4e21, @private=0xa010102}}}, 0x88) 09:56:43 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 688.830853][ T9745] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 688.839271][T15692] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 689.061319][T15703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 689.086685][ T9745] usb 3-1: Using ep0 maxpacket: 16 [ 689.211397][ T9745] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 689.221349][ T9745] usb 3-1: config 0 interface 0 has no altsetting 0 09:56:44 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) [ 689.401883][ T9745] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 689.411259][ T9745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.416674][T15721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 689.419676][ T9745] usb 3-1: Product: syz [ 689.433294][ T9745] usb 3-1: Manufacturer: syz [ 689.438035][ T9745] usb 3-1: SerialNumber: syz 09:56:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff6377cdb5b524347c47478bdfdb968f3b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945a08ba8c552fc99a742000080812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7224609aba9e6000000000000000000c76c00000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb21be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770f4908dd3deaafaab51144c1e1b0600291f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad4000000007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e0d70be3e431198daca0f4be445cfdfcf0d12a01a9221c844e28a6c53a26058375113fdd3bb6e53262f83e7c80ba677320b12c843464f2d96463acc1f4ebcf33068b222499f8b119e2072d4efea53dc01cf640840ab9a9dd6b9c80f3c7f5b67bd20d5c0349548c64db5dddbffafe7da8b4f277dbf9d80e6e596575e6b44c483adc4b5fdeaaa47149da1a6757ed7e97544517f32a976ef3c66e033da46bfa31468eba625d264673301883128266b6201eacdfe51736c31f7feb6f6230a10e69c903927a5c11effd62911abc72d261c2eeb0a7c7f08bb280c4fc342717c43d8e2192f121cedce1b0440d42644ff87aec60a58a490e012785e2d04eba58a52cc9f15d9e9bcec24a3230a7bff038000000000003a3964045af092de789b7ef8ce392c4704d324b954be4d817cc3a5d5096e15b1aceeaf5631a8e510ad0c0467e033ce6c4e989c2e0f8b947ad687df3f5a18a26163815865e05ca718ece427f792ce459abdaf4f37ba61dc89567451000000000000000000da5fad4927bcc9a428257381d2646d6adc68cf5da791865bb3a834ecb6ed99147efcc54bcb21c16ccc8e65a5fc0b336a01c1fb7ea7632e9eef404b16867bec7ab5ed9604a5f0496f5b974848e02e7c1f1e8963cb608adb66979a5d287713371900000000000000ff28dc3541d179c85500"/885], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = dup(0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100), 0x4) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) [ 689.460964][ T3663] usb 2-1: new high-speed USB device number 102 using dummy_hcd 09:56:44 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 689.613114][T15721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 689.684165][ T9745] usb 3-1: config 0 descriptor?? [ 689.700646][ T3663] usb 2-1: Using ep0 maxpacket: 16 [ 689.733461][ T9745] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 689.824005][ T3663] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 689.855962][ C0] sd 0:0:1:0: [sg0] tag#7311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 689.866715][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB: Test Unit Ready [ 689.873558][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.883480][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.893414][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.903375][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.913725][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.923657][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.933585][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.943494][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.953392][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.963310][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.973228][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.983537][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 689.993522][ C0] sd 0:0:1:0: [sg0] tag#7311 CDB[c0]: 00 00 00 00 00 00 00 00 [ 690.040134][ T5] usb 3-1: USB disconnect, device number 70 09:56:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xa000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 690.386668][T15747] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 690.492986][T15752] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 690.542960][ C0] sd 0:0:1:0: [sg0] tag#7312 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 690.553712][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB: Test Unit Ready [ 690.560566][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.570520][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.580604][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.590558][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.600539][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.610490][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.620527][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.630507][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.640467][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.650421][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.660379][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.670326][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 690.680352][ C0] sd 0:0:1:0: [sg0] tag#7312 CDB[c0]: 00 00 00 00 00 00 00 00 [ 690.829917][ T3663] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 690.839148][ T3663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.847904][ T3663] usb 2-1: Product: syz [ 690.852325][ T3663] usb 2-1: Manufacturer: syz [ 690.857060][ T3663] usb 2-1: SerialNumber: syz [ 690.866793][ T3663] usb 2-1: config 0 descriptor?? [ 690.912275][ T3663] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 691.110352][ T5] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 691.349695][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 691.471069][ T5] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 691.481421][ T5] usb 3-1: config 0 interface 0 has no altsetting 0 09:56:46 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) read$dsp(r1, &(0x7f0000000300)=""/4096, 0x1000) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:56:46 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/885], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = dup(0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100), 0x4) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 09:56:46 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880000"], 0xd8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(0xffffffffffffffff, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r4, r5, 0x0) write$cgroup_type(r5, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r3, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x7}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:46 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 691.679669][ T5] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 691.689690][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.697898][ T5] usb 3-1: Product: syz [ 691.705501][ T5] usb 3-1: Manufacturer: syz [ 691.725973][ T5] usb 3-1: config 0 descriptor?? [ 691.750764][ T5] usb 3-1: can't set config #0, error -71 [ 691.761804][ T5] usb 3-1: USB disconnect, device number 71 [ 691.837183][ C1] sd 0:0:1:0: [sg0] tag#7313 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 691.847923][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB: Test Unit Ready [ 691.854794][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.864809][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.874742][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.884724][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.894672][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.904612][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.914555][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.924534][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.934489][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.944443][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.954418][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.964350][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.974321][ C1] sd 0:0:1:0: [sg0] tag#7313 CDB[c0]: 00 00 00 00 00 00 00 00 09:56:47 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x6, @private0, 0x80000001}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0xffffffff, @loopback, 0x7}, @in6={0xa, 0x4e23, 0x34e1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffff6d}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, @in6={0xa, 0x4e23, 0x20, @empty, 0x10000}], 0xa0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x800000) 09:56:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xb000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:47 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x199800, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r4 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0xff, 0x10803) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000100)=0x5) openat$vsock(0xffffffffffffff9c, 0x0, 0x12580, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r5 = memfd_create(&(0x7f0000000140)='@\x04\x00\x00', 0x0) write$binfmt_elf32(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da48803489cd6896b02beaa2ae9e51ad5e6ab1eb81819da4188c52865bc423bb4e2d1a6e4bd5336063036080000000000000065655bf2cdcc2b72ca11b05bfda954c9a0cd1d97a5810c69470a9c06ccaef10e2ec9f920ce1624056ca7697ce7507702e543fcc9a482c81d"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:47 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 692.325793][ T9745] usb 2-1: USB disconnect, device number 102 [ 692.419847][ T27] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 692.677189][T15793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 692.715251][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 692.862903][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:56:47 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 692.913812][T15798] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:47 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/885], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = dup(0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100), 0x4) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 09:56:47 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x40) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0xc6) dup3(r1, r2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000440)={0x1, 0x3, 0x1000, 0xf0, &(0x7f0000000340)="e6c2a951fa994e497bc890959e0095a1a71bbdd5e0853652c7d3aeac894080548738836a1da679d4b15aa3e6bcb0c64fecff6b0cfb75432834b88d0786894fe2df2f9e377478938f44c960b7e5199c1f0a4e4d54adf66e72794dbb7dace1f1666cffdf054e0168e6e26987d2efe1bda1a3680ecc6a315991908adeeb785744777c6c3411f1a9ffed8a6295132763229259c65b768cdd8f08d2772fad3565960f2e36ecbde9d8ae361985eb17e356118f7cdef6ed66fa35cd094142e9cef7fd77c06f0fc5218a353b3b69b3ca26bc0f9904167fa57f4bf18f81fae0449f82e669aa3d4915b1cccf4da554d69e0105146d", 0x25, 0x0, &(0x7f0000000200)="19948f59acdc98cfb94c59ef85243a879a5ee8be5abf6fb71b036a324373afdfba929227fd"}) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r5 = semget$private(0x0, 0x4, 0x0) semop(r5, &(0x7f00000000c0)=[{0x0, 0x8, 0x1000}, {0x2, 0x3, 0x1800}, {0x4, 0x2, 0x2800}, {0x1, 0x952a, 0x400}], 0x4) r6 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) fallocate(r0, 0x36, 0x7, 0x2) write$binfmt_elf32(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 693.053704][ T27] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 693.063388][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.072433][ T27] usb 3-1: Product: syz [ 693.076783][ T27] usb 3-1: Manufacturer: syz [ 693.081627][ T27] usb 3-1: SerialNumber: syz 09:56:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xc000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 693.181419][ T27] usb 3-1: config 0 descriptor?? [ 693.190405][ T9745] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 693.227648][ T27] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 693.268753][ C1] sd 0:0:1:0: [sg0] tag#7342 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 693.279529][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB: Test Unit Ready [ 693.286199][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.296132][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.306116][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.316071][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.325961][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.335956][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.345953][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.355857][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.365774][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.375675][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.385921][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.395984][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 693.405871][ C1] sd 0:0:1:0: [sg0] tag#7342 CDB[c0]: 00 00 00 00 00 00 00 00 [ 693.540334][T15815] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 693.699675][ T9745] usb 2-1: Using ep0 maxpacket: 16 [ 693.765296][T15822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 693.822999][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 694.000433][ T9745] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 694.009751][ T9745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.017986][ T9745] usb 2-1: Product: syz [ 694.022500][ T9745] usb 2-1: Manufacturer: syz [ 694.027242][ T9745] usb 2-1: SerialNumber: syz [ 694.091417][ T9745] usb 2-1: config 0 descriptor?? [ 694.144953][ T9745] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 694.354436][ T3663] usb 2-1: USB disconnect, device number 103 [ 695.140055][ T8702] usb 2-1: new high-speed USB device number 104 using dummy_hcd 09:56:49 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:49 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r3, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20048840) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x2040, 0x0) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000480)={0x5, 0x0, &(0x7f0000000380)="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", {0x9, 0xd8, 0x31435641, 0x7, 0x400, 0xffffffcc, 0x5, 0x8}}) r5 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f977655367ce27b90300060000000000000000b738000000570035f4c3700cc6f382200005000000040203000600000000003b000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da488"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:49 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7e05, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/885], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = dup(0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100), 0x4) mkdirat(r1, &(0x7f0000000400)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) 09:56:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 695.230558][ T3663] usb 3-1: USB disconnect, device number 72 [ 695.379237][ T8702] usb 2-1: Using ep0 maxpacket: 16 [ 695.414741][T15843] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 695.540732][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 695.596942][ C0] sd 0:0:1:0: [sg0] tag#7343 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 695.607784][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB: Test Unit Ready [ 695.614643][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.624687][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.634594][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.644549][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.654521][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.664703][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.674622][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.684535][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.694538][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.704456][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.714461][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.724380][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 695.734298][ C0] sd 0:0:1:0: [sg0] tag#7343 CDB[c0]: 00 00 00 00 00 00 00 00 [ 695.895924][T15851] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:50 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) 09:56:50 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYBLOB="7642036c8834faf47ba715521ac2b2c88d1972e47f2d5a995b25eb83cc85296e0193b4171c4ac6e171e185937c9a46b3312dfd182aec29af805ef07df9a3d1def5b6b1e4535c2b4d79ab40e43a98dc1e9a3d0fe13ad6a63e9f0eaf287c734d044e85ba15b0d71ac866246b51f439cb142781c3353fba7214a0ab00c21a695f1e2b4fbcf0fb6f66f55d580de1b4be674ccd6a2fcba125f58b943f75fce49fb4909a2eac7a66d328fde4637b220deac5ccc902925b5eb38eddebee057de6c788002af8177a284f3fa0b9bd4c3d499130", @ANYRESDEC=r1], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) sendto(r5, &(0x7f0000000180)="8d", 0x1, 0x0, 0x0, 0x0) fspick(r7, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r8, r9, 0x0) sendto(r8, &(0x7f0000000180)="8d", 0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) write$cgroup_type(r4, 0x0, 0x0) flistxattr(r3, &(0x7f0000000100)=""/104, 0x68) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0)={0xb9}, 0x1) 09:56:50 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:50 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c466000002ed8e4a7f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000119f1b0000000d60395a7088d7c27f000000a901000100000800c75d5cb82a89fea85ca63f9d43d1cce047bd6290cb9a60407e28bc045d655c4ed3cd921ed7f7226dea7eacbe31930ebab7334ed99c84"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:50 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x10000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:50 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 696.298349][T15871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 696.477319][T15879] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 696.491503][ T8702] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 696.501055][ T8702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 09:56:51 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 696.587548][ T8702] usb 2-1: config 0 descriptor?? [ 696.599917][ T5] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 696.666346][ T8702] usb 2-1: can't set config #0, error -71 09:56:51 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100)) r2 = memfd_create(&(0x7f0000000340)='\x00B\x00\xd3\xac\x19h\xc7\xd3\x00\xe2\xd2~2Kf\x93k7\xec\xf1\xbe\xdcG\xb0\xb5\x04\xdf\x0f0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f00000000c0)={0x3, 0x100, 0xd0c, 0x401, 0x4, 0x8001, 0x4, 0x8, 0x1, 0x5, 0x800, 0x80000001, 0x0, 0x6}) [ 696.715129][ T8702] usb 2-1: USB disconnect, device number 104 09:56:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x11000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:51 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 696.869797][ T5] usb 3-1: device descriptor read/64, error 18 [ 697.011389][T15895] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:51 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 697.112163][T15901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 697.139717][ T8702] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 697.280909][ T5] usb 3-1: device descriptor read/64, error 18 [ 697.379614][ T8702] usb 2-1: Using ep0 maxpacket: 16 [ 697.499908][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 697.549753][ T5] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 697.671356][ T8702] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 697.680857][ T8702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.689204][ T8702] usb 2-1: Product: syz [ 697.693511][ T8702] usb 2-1: Manufacturer: syz [ 697.698348][ T8702] usb 2-1: SerialNumber: syz [ 697.708055][ T8702] usb 2-1: config 0 descriptor?? [ 697.750852][ T8702] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 697.850176][ T5] usb 3-1: device descriptor read/64, error 18 [ 697.954882][ T8701] usb 2-1: USB disconnect, device number 105 [ 698.239903][ T5] usb 3-1: device descriptor read/64, error 18 [ 698.359359][ T5] usb usb3-port1: attempt power cycle [ 698.752222][ T8701] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 698.998839][ T8701] usb 2-1: Using ep0 maxpacket: 16 [ 699.090188][ T5] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 699.129020][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:56:54 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x2, 0x70bd26, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004004}, 0x80) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 09:56:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x12000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:54 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000240)={0x7, @capture={0x0, 0x0, {0x2, 0x5}, 0x8d, 0xbc}}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85e2333c77fa6cb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da48803481e3a88c4f832baba31b7d677b8f5a6ba1de763b6e32f3d67169604ee63535643b8b601c89e4511"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:56:54 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000), 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:54 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:54 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000002110fd0b04004beba6a622c251d4fb010183210deb3a455d038a00000000090400000137b2f70009050e0000000000003c616566aa8e0cd64ce8cd603a5cbeccc555eb68e8c7c438407a9b4c17775d9338c9985f8ec2868ec9ed3cf2da977f7695db6cc0471eb78b1ddc6e97eb1a58e6eb1745851a3657bf20d5"], 0x0) [ 699.339197][ T8701] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 699.348442][ T8701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.356846][ T8701] usb 2-1: Product: syz [ 699.361464][ T8701] usb 2-1: Manufacturer: syz [ 699.475634][ T8701] usb 2-1: config 0 descriptor?? [ 699.516912][ T8701] usb 2-1: can't set config #0, error -71 [ 699.546454][T15940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 699.585097][ T5] usb 3-1: device not accepting address 75, error -71 [ 699.629347][ T8701] usb 2-1: USB disconnect, device number 106 09:56:54 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:54 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000), 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 699.747138][T15944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:54 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000340)=@v1={0x2, "ed5c9a0cb2c8b11134d9a35cf804e20064b56759"}, 0x15, 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000000c0)={0x2, 0x10001, 0xd1, 0x50, 0x1, 0xffff, 0xfffffc09}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x50148204}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x204, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x51b01d6b}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3d8a4086}, {0xc, 0x90, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x20}, {0xc, 0x90, 0x400}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xffffffff}, {0xc, 0x90, 0x28d}}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000095) 09:56:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x13000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 699.979468][ T5] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 700.071090][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 700.076672][ T8701] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 700.109992][ T5] usb 3-1: too many configurations: 194, using maximum allowed: 8 [ 700.205373][T15972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 700.228909][ T5] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 700.236829][ T5] usb 3-1: can't read configurations, error -61 09:56:55 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000), 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:55 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) [ 700.295266][ T5] usb usb3-port1: unable to enumerate USB device [ 700.319765][ T8701] usb 2-1: Using ep0 maxpacket: 16 [ 700.439644][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 700.452971][T15974] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 700.609823][ T8701] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 700.619233][ T8701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.627383][ T8701] usb 2-1: Product: syz [ 700.631933][ T8701] usb 2-1: Manufacturer: syz [ 700.636671][ T8701] usb 2-1: SerialNumber: syz [ 700.733327][ T8701] usb 2-1: config 0 descriptor?? [ 700.784011][ T8701] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 700.999185][ T8702] usb 2-1: USB disconnect, device number 107 [ 701.779165][ T8701] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 702.028849][ T8701] usb 2-1: Using ep0 maxpacket: 16 [ 702.149635][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 702.318843][ T8701] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 702.328546][ T8701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.336796][ T8701] usb 2-1: Product: syz [ 702.341390][ T8701] usb 2-1: Manufacturer: syz [ 702.346176][ T8701] usb 2-1: SerialNumber: syz [ 702.354535][ T8701] usb 2-1: config 0 descriptor?? [ 702.400684][ T8701] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 702.606917][ T27] usb 2-1: USB disconnect, device number 108 09:56:57 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 09:56:57 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'gretap0\x00'}}, 0x1e) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=""/232, 0xe8) 09:56:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x14000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:56:57 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:56:57 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) 09:56:57 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000040)=0x9) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e2312110fd0b04184f820102030109021bac59d65c005f7a4eb4b100010000000137b207"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x71, &(0x7f0000000140)={r3}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x8, 0x8}, 0x8) [ 702.876972][T16019] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 703.048046][T16035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:56:57 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 09:56:57 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x600, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x7, @raw_data="eb85637549ae8ef6e9d64a751aed042203b934f01600800000bcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600686bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cecb72f42d0ce4e6330fce498e131844401010000e179a53509075c60e605d3b100c55800c9420ae21e6e"}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f00000000c0)) r5 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c466000003ed8e40d7865ce27b90300060000000000000000b738f40cdf94ec679435b5b275aa00000000b3d7c52ebf31a8376f05a60be85ecb000000090000f8ffffffffffffff03000000111f00000d60395a7088d7c27f000000a9dfff000000a85ca6576b9a992da4880348d34cc2f40504eb644d35c36c4d496e210515541515d8d695cf3fa1aa77d37c472c19a8915ce7a61278bab6930725c2c586b1b64f43a2e7d4595b2e2ef189d0eb40449d68dc1104885cb695d164a7837adcc15881a42eb0c2c976ed2b63e77f3adbf360f8e2534a77a7f15b2ece79cafbb990564f1900ff11d29f9374a708b65a49410feed160"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 703.169699][ T9745] usb 3-1: new high-speed USB device number 77 using dummy_hcd 09:56:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x60000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 703.289738][ T27] usb 2-1: new high-speed USB device number 109 using dummy_hcd 09:56:58 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) fsmount(r0, 0x0, 0x72) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf37a8b70be85ecb000000090000ffffefffffffffff03000000110000000d60395a7088d7c201040000a901000100e0a8962ee75ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 703.418686][ T9745] usb 3-1: Using ep0 maxpacket: 16 09:56:58 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, 0x0, 0x0) 09:56:58 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x3041, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200000, 0x0) dup3(r1, r0, 0x80000) write$cgroup_type(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 703.549324][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 703.556788][ T9745] usb 3-1: config index 0 descriptor too short (expected 44059, got 27) [ 703.566003][ T9745] usb 3-1: config 214 has too many interfaces: 89, using maximum allowed: 32 [ 703.575301][ T9745] usb 3-1: config 214 has an invalid descriptor of length 122, skipping remainder of the config [ 703.586122][ T9745] usb 3-1: config 214 has 0 interfaces, different from the descriptor's value: 89 [ 703.644316][T16047] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 703.729838][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 703.792415][T16061] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 703.814266][ T9745] usb 3-1: New USB device found, idVendor=0bfd, idProduct=1804, bcdDevice=82.4f [ 703.823621][ T9745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.832393][ T9745] usb 3-1: Product: syz [ 703.836705][ T9745] usb 3-1: Manufacturer: syz [ 703.841583][ T9745] usb 3-1: SerialNumber: syz [ 703.949558][ T27] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0006, bcdDevice=82.4f [ 703.959384][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=6 [ 703.967556][ T27] usb 2-1: Product: syz [ 703.972070][ T27] usb 2-1: Manufacturer: syz [ 703.976841][ T27] usb 2-1: SerialNumber: syz [ 704.089950][ T27] usb 2-1: config 0 descriptor?? [ 704.414579][ T27] usb 2-1: USB disconnect, device number 109 [ 705.128385][ T8701] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 705.368331][ T8701] usb 2-1: Using ep0 maxpacket: 16 [ 705.489109][ T8701] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 705.659340][ T8701] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0006, bcdDevice=82.4f [ 705.671426][ T8701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=6 [ 705.679995][ T8701] usb 2-1: Product: syz [ 705.684338][ T8701] usb 2-1: Manufacturer: syz [ 705.689227][ T8701] usb 2-1: SerialNumber: syz [ 705.699689][ T8701] usb 2-1: config 0 descriptor?? [ 705.892280][ T9745] usb 3-1: USB disconnect, device number 77 09:57:00 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) 09:57:00 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:00 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)="0b8f08b9bf251a86fe17db6688da8acbeed8172db5be", 0x16, 0x4000010, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x8, 0x1}, 0x20) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x65580000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:00 executing program 2: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x1f, 0x74a5}) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xe8d3bbbc9f9adeb0, &(0x7f0000000100)=""/159, &(0x7f0000000200)=0x9f) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000001c0)=0x7) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b2debb00fbffffffffffffff0000001fbaff35"}) syz_usb_connect(0x4, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB="12127c10da0401182d9201020301090209000000030000"], 0x0) 09:57:00 executing program 1: syz_usb_connect(0x4, 0xde4, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x25, 0x9f, 0xdd, 0x40, 0xdf6, 0x59, 0xdf4c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd2, 0x3, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4e, 0x4, 0xb, 0xf9, 0x5b, 0xe6, 0x20, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x1, 0x4, 0x3}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0xc0, "0fdeae5d22"}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x0, 0x62, "d25f3b"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x5, 0x4, [0x2, 0x1, 0x9, 0xa], 0x7f}]}], [{{0x9, 0x5, 0x3, 0x2, 0x40, 0x7f, 0x60, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x71, 0x300}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x0, 0x3f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x7f}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x9, 0x1, 0x3, [@generic={0x5b, 0x9, "7bb1cd78720fc21a9252d84ec33d19109a85706234ac051cb912b86641de54e0107958855bde34db05a33284ec8558f21897f5f930bab295bbcf4535e4f75307b8930f4e7e0639abfd65b1b35921a5e6ed3cc4472a49ad56e3"}, @generic={0xb9, 0x70708dd9142297c7, "d1d11b43962d7177d77c05620275e494cf5e792215daa1637b85f42c9aa4f9b51b938c673fdf6eef31cd47a7ce47c2a54997d594348a0f103a23a09d2e54e3e1a3af1c16e4219a892f3b1c565de1dcaf9fe2cbccae553a84de5d2409e9812f4a8a6b2047b2793de721146b1024ed32b9bd46776fb87a9cdeb4f599efd32b9574cfdeb0456da1664314e527a0e8b5cb15aa4ce2aea92122d053df09ae38f8f40e00ff6aa70b7e6272df39776b0436f594a72743d1bdee19"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x5, 0x7f, 0xff, [@generic={0xfc, 0x31, "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"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0x54, 0x7, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x9, 0xc8, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x9, 0x5}, @generic={0x4c, 0xd, "1441f0cfbe23d4952ddf7e4b4f0d28aa998bf368caf702fa514c084128b1522da65d4057c5c9d8f31580bdaf876718af53b9185a41c8252a8c1e377560f7fb53a3e65c37569ad301dcee"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x0, 0x9, 0x5, [@generic={0x3a, 0x23, "99b7fa7a8c0748fbf011dfffaed1653e02e90ed6a1a5c584deb68ddeab4cdadb0156cd744cc3237d7e4f033a00ab998a6cc0d79b7c53236d"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x3, 0xc1, 0xf4, [@generic={0x3f, 0xb4374c42cf67e6d6, "471e8da35eba6277f4acd6122d25dd7af2ae240e720ae525f30a89e5966cf87b5c794708f4df377502f25a027424b2de7ccad49977b7e9bf761861fcb1"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x30, 0x20, 0xff, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x2}, @generic={0xa1, 0xf, "17e706a63fdabb7648c927f1d9212c00caf7f5798b7936874e79885bbaf11db6aa2e4e6948b3132212e181e8932342437ef1a483f278cbe4ee62dcdf1997e89c39a8466f5dc18fa6aeeb1c4951d56afe40bb11a52eb13bb8270a27973dcc3dc0a8a278c886d424ebc1e602d0c36bc12b40d3af737973bcfaf9f304fc2ec48c691017936aa370717b53028be6d7d5fb18a8cc2ac1a195422f4a481330d1471d"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x8, 0x5, 0x3f, [@generic={0x35, 0x22, "809ee62a132c4cd9e543025c87e75eb3084cedd9bd33b1b09501f69bde998f09e73f4833e92deb39c3b93ea92451085aa0c7bc"}]}}]}}, {{0x9, 0x4, 0x1e, 0x4, 0x6, 0x2, 0xd, 0x0, 0x0, [], [{{0x9, 0x5, 0x6, 0x0, 0x0, 0x1f, 0xfd}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x4, 0x7, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x800}]}}, {{0x9, 0x5, 0x7, 0xc, 0x0, 0x1, 0x23, 0x3, [@generic={0xd0, 0x1, "e8ebde9a0c66f1c4b16601581f08d5d5f45bc9a211508d8d96e26ddd711d15de6f4cbe72514e3b16c04327626711c3f1f3d495947e43a274687f21490539e09842e023aa4eb23ab32454f35ffb0525e6d66c2ccd00bc78c872fb0f55f903ea41b760a2b366ca45aed5975262d979b75592cb0b088e1ffbfdf4b60d41acdb693deee25ad1388f2af79df6d6d3549b8264eab36ce5c8aab60e5c30f592e3c720bb9d79d03bbb900f759a07b966ef7881f79f234d3ef16d18ecc8cca4a339265648bc9aad8cddec9ed44f28c2b80ece"}, @generic={0x6c, 0x21, "3f9cc96bd93898e150e4db548dd5224312d9c1b5cb3b3545d0ad6f7b6132979e7fc37e40dd8a9497d1051d9144e09fedc5bcb65fd0af6e0373570ddb3ebba895d8d2e87c0f21de8b589648a4dfcc3d0e6ab2b50ef2b23f4af9d3fcf3a4fc8320083127c1222970910a4d"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0x81, 0x5, 0x3, [@generic={0x47, 0xc, "1c9dad5acf42dc9924bc72f10d22f8033d865b91abe2d4c9b125ea79052ade8325891c80a35ac9e5132e3b02d35d2213bca38b7f6564fe38ee8929d03d745f7ef85362dcc2"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x3, 0x81, 0x3f, [@generic={0x87, 0x21, "4817b5e0308601382358b07d5b6ac42bddebf144f3bfdc7ca834150d2c407e896bc3c6b369988b6dfbd68c73c4557f0eb9b071cc70fc041339726722e57af6b3e705b057ce7257e927172c4667d6a1ea17e75c374cba7471db3c97b8226eb65a34302ef05fe0a4e5397a0731366e209be613355a7314fab21fad70ec8655ef038035101865"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x4, 0x73, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x4}, @generic={0xae, 0x9, "00610039495240eb364d0e7477f05d634d0ed4e8a9ca4ee0bc600347d85f0d8ee88c1311f5d401325f1da88a97e05ffc44b829c48bebe8d1c59986c84712fc6600676a2a1c858f68907169841f96a1be5bf7ca7c9f949d6bcae2da670dae50fda7f3fea78ebec4fb980db7aab015e6a76e02edba65d7b6d67dda13c2544068f8b83410f82e661e89e1ffd847b64ba732058189ec0370d9aa76d6eb34ede641aa323a941f4c9a298181b07705"}]}}]}}, {{0x9, 0x4, 0xe5, 0xff, 0x10, 0xc4, 0x1b, 0x86, 0x1f, [@hid_hid={0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0xb2a}}, @generic={0xf8, 0x3, "81730ca02099c957fc8ab5d84922c49bc2603c784cba4905757cc2a322f82b50598f24375d1cbebff46e1dfd7b948c5a9463cd62c11ac9b8ac0bafbc283fb55b79533796a517c2b38929673555545b6670a31f4dd4b51b4825b53f71cc20f09ee0b9ecea6731051c6f35c54bbc8e296f2d5644689d11c422507a6d9509a0ab19851014c34d04a9cffa5dca279eb35040f649483e65469cda26773072060db6175e74cf00b74a7f2418dcfa0c972e0e3062482d6fb17893f4faa563b32ec4be00c76e817812a152037a1c376a1d897111cdcf87688f57aa6c881d2bd9120c76a529b6c68531440fe5735b71cc741b09a2febe84850011"}], [{{0x9, 0x5, 0xb, 0x3, 0x20, 0xbc, 0x7f}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x4, 0x3, 0x6}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0xa, 0x1f, 0x6b, [@generic={0x8a, 0x2, "81e2d0ff73ca75fa9f3e74803359d0df6c1610630816f6e6dc7a6570bdb5da9303840b67573c09e42cc48451b3b6e84a8ce26793858bb4ab67f6dece4674f2ec940da1fa91209e72d585663a8925460740163406fe67e11747c3dc41a085f88000d4c9e9117481adde945b65d08039be2d4e7130f3a00eb360aefa4499d7febaf53cf4a8369416e0"}, @generic={0xf0, 0x30, "070fb2e160769a17eb7de76016d6a32bf2867d1180d9c5680934b46d0e0bc71236a1babd525050b95ec6465b78884efcbe2a06b8ce8d3848a16dee020334884e8618e6ee03fb86f6c2084e52b02d31380584099c105353e06ea3c53a8b5533173b27715b6d8484f90190a1bf36bd2468d455d8b703359b7ae50d64c72de16d02e344430c78bf85bf0015ba37245652fc2fc5a5359a6533b5a6d1e9826d394a67ed97e7d9c91957d29cd8d0330ddcf59da605359f292aa3765ef11f46039cc84d5204b1c04865d6b9bafa3ba6ac554637a520cf21f06599e633b7f9a18c5d1421f02d2b0e52ae8545d02f0ec8fad9"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x7f, 0x5, 0x82}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x1f, 0x9, 0x8}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x20, 0x8, 0x7, [@generic={0xdf, 0x23, "1640fff3afceac73353f95db3564c01e25493adb04428e221065cf60cbb9a29b7f03f3d220320b617eaf45bed21b269d58d2d898a1ef78090a2cd62e54f14cb553e604375a423b01137af66339ba65ea2759ef0db9993d8b0930700f4cd98efadec9d8a667d9ba93b230619fd5bbecfb300ac902516849a0dab8b3517045b79141e44a302304248bbd6076f82f7b6fff7c35b34db683d837e74c75619827b75767f117a5fc95824a5b93b10a5480c27fe323adc63f45e412a8ec0bae6129513a5e231e5c9ce7175d850db03821b452b73ed20864226c81eac22f08dd18"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x0, 0xf7}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x0, 0x88, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2a, 0x600}, @generic={0xfb, 0xf, "845cb1370e0b042e94afec5491029e59be054252ce431c57f4803da16c1c1e48463687093cfeb28b6b931c605f731655a990dfe99f14d58664e32df5040017c3473f18ab31f14094f1aa1f98df1fda096c7e3b549ec0b5377398ff43c88f732f7ce4117d608bb267a0c552786478f3eb1e3e6b9df2464b1b95f0a1cedfaf8dd55f9ba22e308ada878e9e7581c9b2fbde6f0fb51f4afccea72dee03ac76230d5d2f7d333fc8ab73c860a8fe76782934435ce783a962c0d6bad2597c871f33b2338f8ea447b061fc826383b83ed3af340b234580fa9aae5c7d8ab3df134af5823f1ccafee9fab3fea7a81a9cc1dbae91287246e427892e6ea402"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x40, 0x1f, 0x3, [@generic={0x2b, 0x24, "fb2c7a1dea2407f8ce36330bc13c951beacbbc7c761de4716372aa91dc573b63b6a478b9f6ae4a6bcd"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x81}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x20, 0x20, 0x4c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8b, 0x20}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x8, 0xeb8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x66, 0x81, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x9}, @generic={0x58, 0x35, "2f90dc88c4b4017abe2a67aaa45500a1a6ab046bd7b978caa965532b4eb05c24581ea81e0aa6f8094a3cac19eecac9a031a707de096de1171894797a0c5f3265b35fa49624847620b65402b67fd6fefd696e32a1161e"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x5, 0x92, 0x81, [@generic={0xa5, 0x22, "56110ef081c684bd4469be7a8c0ad18780bdfdf50e9a3871a256885d5d2387c3ba9d662926f3b61e38b39bdd4fc9a516fa6a3e35ea5ec7a81a56422ab719cb4be7e1254056177d7eb3072a43baf027d0211951e12c8b6f5d77c86f1800f16329d2eb7d8977a3059cba954e227e440c17cfe0a15a96e4c9f95e5e65ce5b4177fa96ded8addb5d46c489ef78d6ae065dffc6df864d2c13400b7df2d429f3368bf024509a"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0x8, 0x40, 0x3}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xa5, 0x6, 0x1f}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1f, 0x20, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x20}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x9, 0x8, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x9, 0x8}]}}]}}]}}]}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000e00)) [ 706.085247][ T8701] usb 2-1: USB disconnect, device number 110 09:57:00 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x7, 0x1}, 0x90) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x54, 0x15, 0x10, 0x70bd27, 0x25dfdbfd, {0x9, 0x1f}, [@INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "24bdebacbae46e5bd2e5ce7aeefb346d030e69e168260ba6f0b0acf949c3d5bf8329938e4ccda4ba4334ee5a5605300b6cd7d713657d8d372caaae"}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x48010) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0xe, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 706.182455][T16103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 706.244876][T16107] QAT: Invalid ioctl 09:57:01 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 706.408981][T16113] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x76884f95, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:01 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) dup3(r0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x309800, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x200, 0x0) bind$can_raw(r3, &(0x7f0000000100), 0x10) write$binfmt_elf32(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da48803481664756ef22a4d34f04b2ecab2889c6ba2cb6f181bba53af11638ed60312c1ece602958177692d22435a7d093cc21abc313db28cbf0cc038ec3f849d9b4a"], 0xd8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) dup3(r5, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000340)={0x1, @pix_mp={0xd1, 0x6, 0x50565559, 0x7, 0x9d395ef4ea48aafd, [{0xe52, 0xfffffffa}, {0x1, 0x5}, {0x9, 0x7b}, {0x3f, 0x10001}, {0x200, 0x3f}, {0x3ff, 0xfffffff9}, {0xe96, 0xf778}, {0x8001, 0x9}], 0x5, 0xb4, 0xffffffffffffffff, 0x1, 0x4}}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 706.746227][T16126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:01 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 706.810531][T16132] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 706.862503][T16133] QAT: Invalid ioctl 09:57:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x80350000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:01 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:01 executing program 2: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000001180)={0x81, 0x0, {0x1, 0x3, 0x2, 0x1, 0xffff}, 0xe5a}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000001080)={@can, {&(0x7f0000000040)=""/4096, 0x1000}, &(0x7f0000001040), 0x38}, 0xa0) 09:57:01 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000000)={0x50, 0x6, 0xfffc}) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0xff, 0xaa, 0x28, @empty, @ipv4={[], [], @local}, 0x8000, 0x7, 0x7fffffff, 0x401}}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000440)={@ipv4={[], [], @private=0xa010102}, @ipv4={[], [], @empty}, @loopback, 0x6000000, 0x3, 0x9, 0x0, 0x5, 0x200c0, r4}) r5 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r6 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) r7 = syz_io_uring_complete(0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000e1400012cbd7000fbdbdf25080001000100000008000300000000000000080001000100000008000000984f000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4044) write$binfmt_elf32(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xd8) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x1f, 0x5, 0x9, 0x7, 0x7, 0x62, 0x5, 0x58, 0x3f, 0x20, 0x1, 0x7, 0x3ff}, {0x0, 0x20, 0x40, 0x38, 0xff, 0xc, 0xf1, 0x44, 0x2, 0x6, 0x40, 0x2, 0x1000}, {0x80080009, 0x4, 0x49, 0x9, 0xf9, 0xf7, 0x1, 0x7, 0xff, 0x9, 0x9}], 0x40}) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000680)={'filter\x00'}, &(0x7f0000000700)=0x54) execveat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x800) 09:57:02 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, 0x0, 0x0) [ 707.366308][T16142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 707.560477][T16146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:02 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r0 = syz_usb_connect(0x4, 0x6c8, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0xf2, 0x97, 0xfb, 0x20, 0x9710, 0x7840, 0xa6da, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b6, 0x3, 0x3, 0x0, 0x80, 0x7f, [{{0x9, 0x4, 0x2e, 0xfe, 0x2, 0x3e, 0x85, 0x3c, 0xda, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1f, 0x1, 0x8, 0x29, "d4c183"}]}, @hid_hid={0x9, 0x21, 0xe0, 0x0, 0x1, {0x22, 0xf}}], [{{0x9, 0x5, 0x6, 0x1, 0x10, 0x29, 0x9e, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x7}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x2, 0x0, 0x8}}]}}, {{0x9, 0x4, 0xd6, 0x0, 0xa, 0x9a, 0x21, 0x11, 0x9, [], [{{0x9, 0x5, 0x2, 0x10, 0x397, 0xff, 0x9, 0x3}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x4, 0x20, 0x7, [@generic={0xd4, 0x6, "da1fcae2e94370167b1748b64a7a6c514c072c82d991a759186944e9791aeb78bd03500a851b9edb986d713da6cecce247c9a1bff001019f455f8ff0f295b761dda63d4345935dcfb597786e5e549926a3c3ecce65fa7cfc3b2fc171173457f1813c3f822e4154fc7a7688c645e9962f3bf2dc219f51c28cb30ec6932551d0c9d5cd6eae2fd7bc26081c9f2a6419afd770402af892ec317e70be95988b142bbad92e78557dd7618f4e239a90b50a252e8b222dd1fe54a6ed33478d71e3ba26b761eca9a157e68aba3a3ebdba268b4cd066b3"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x1, 0x9, 0xff, [@generic={0x45, 0x2, "384cee351fbd462f05f417df4e075e2ecec3f8002ec24a3f96ca248c3297c6206d17002eb149304f5e54d70db1b9863f8feba16b3b55a3a1f367da1fad4b32a9f4533a"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x5, 0x7, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x86, 0x40}]}}, {{0x9, 0x5, 0x6, 0x2, 0x618, 0x7, 0xff, 0x8, [@generic={0xe, 0x21, "5f42a20ef334a46ced0080cf"}, @generic={0x9f, 0xc, "206a0e5255c317f1715e4054b44a3e14ad7ff681fc863f5795eb6d96b0719624b02c10fc115db6b4588c32727f079e29c878ac62f013256c4e2d452e5572e19c29225ce3e7b79f9ec96bcf435e6a5b50a93589ff2f2d71a4e296395864aecb072a74dc92ffbc134372ec3637b40a8ba5d3e67e987e71c205b230d2b899facbf50edeb7331e535bfbdb149fec72113f5b1e0989581c150636d36ac850d3"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x1, 0x9a, 0xff, [@generic={0xd0, 0x8, "433b1b4cc079aee35665b18ab5bfe78a38be664966c15dcda1148dd227163e15f8e58fab7413007d5134e415aaccd9841872a230159fdc27511ed83a99085f5f461c78d64da8ae015d918748f42a903ddd77f0e8f0c5052d87fcd7b0f868a6ade3e92fe0af7c7527d0ef2f514a3b78e063c40a9b58c1d75ffb67b0a2acd589c6cfd7f76eab0d2bad899bc8800290deb8135566b927d221c60dccc93da1e39eacc2a26217c3b49cec2cd9c8045319a9fb5045eb18378acb843e13385a68cce6ad5ac9b159cfd6bd05505f1b390d0f"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x6, 0x8, 0x27, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x0, 0x3}]}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0xdb, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x0, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x76, 0x9, 0x8, [@generic={0xe0, 0x18, "ea11e3337b2a47d8186726d5104be176bd98649a3201faf802304a4d5ec2fe78306316ba5906fa43a56afc4b8cdd3d01d2152fd7c08036ff861504137732fc445b6af2f4201ced6c251ff680bb0249fa03d0bfa5f11e649991d706ee25670c62948e506215836729446120e58bbc418118db1c28b909a62f10860a25b2872e2e54df2510c79c306c27ecbec664f0cffbf6d184b047f5e67439d868221a966d28759512bef3357f2feb6b81b5b191784d7d36e6645d175af1be0082bec3c89975c32c140d9a565c6e2adf19db04dbabb81b80d95f1b2c4fa421e0ff542081"}, @generic={0xa5, 0x2, "8ca37e258317c151d1dfae547bfc1dfbcb5d5e2229f45679d80fac37b088943f26f4716b1e792b2289cf137b4ec0ab6c13379e1e95aed1e8fcd9de6346478461e1a97578571b3c8d1449b3a944797f64a153057cc9f8b23d7fe9d65cdbfeaeb8efe20db2c28eaf40b2ffd53a22064a87d6153e46e6034c8440ebdda17c81475436274d2dc432c7ed6c607c3d8aa0a7019c9fb410e65ef8c416aa4dfe8976f16a627506"}]}}]}}, {{0x9, 0x4, 0xf5, 0x9d, 0x3, 0x86, 0x60, 0x4f, 0x4, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xcf, 0x1, 0x1, 0x48, "181d", '_'}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x200, 0x0, 'g'}, @as_header={0x7, 0x24, 0x1, 0x2, 0x81, 0x2}]}], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x4, 0x0, 0x8, [@generic={0x8d, 0xb, "0d52ce1dafa6abef5a403194ace0ed7696ec9842f0562af609499a2d7f221e3bd814c6e9cc9669512a8a75cf841b1d69221527b2cc06b03b06c4d7726f8f4097549d15c722e855a7b46a9628e2573a18d3a24e5580abff294b5dcf8a289d10b86d9d30915fee7d641cf74e2efbfd83423cae83424c3958987b23f5c5659cc492f8e3a7a2454109b15c733c"}, @generic={0xfb, 0x0, "49f72869e98b0be1038c81121ca5305668bf4dd67ca015c9f96709afc1e67a118850d598815c28b1746c35b44bad373a05064ad4d20c3802796f92e0dbb2ec4f3637ab0a07944d6f6ac5251293a18dc468f173999196fe4496ba1fdebfc36861fabef531343824938600d0ee2d08236c17151c3a3ed4b93e63e0be20d661fb596b6a290e6da62eae1e09ca09700c01843142f4b01a3643d10e2445e59ba2f89bf441168dee7768a64b0c0ff4377876ebc574b3564a2b3453c715a9511ee3bb937199e025800b7e9b0ae46f378f8eeba067e2744af2161ea3767f58593c185f79180944c8fd0d1313eedf4b07da61c989c01064ecc1b1afb3b8"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x80, 0x9}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x5, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x61, 0xf9}]}}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x3, 0xbf, 0x81, 0x8, 0x1f}, 0x1d, &(0x7f0000000040)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x5275f43, 0x1e00f, 0x3f, [0xf, 0xc0c0, 0x3fc0]}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1801}}]}) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000001140)={0x40, 0x8, 0x102, {0x102, 0xe, "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"}}, &(0x7f00000001c0)={0x0, 0x3, 0xa6, @string={0xa6, 0x3, "0a5169cb9e27c932cb14dc2dfee916473bf73e34eeddffc741ceacfc31ac5080a0e371ad6ef369d3da00f18a2951b36ca40a06f14711416458bb4535636c5c788b9db62dfe1e84c997a8015c268a561a2d5aed02b7ba2e8c82899a1c7012e5b55690c5529af583a998b29bdf9b2f495265ca2796d1507f89347c3e7c0a430c400264eb3dc98e7d22af6e22a1465580203e2475a928435e2bc074a9f5f119dd6facfa4c91"}}, &(0x7f0000000a00)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x81, 0x0, 0x1, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xb9, "c62633874273812000"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x10, 0x8, 0x3, "30b01909", "407768d8"}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x7, 0xfe, 0x7, 0x40, 0x2}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)={0x0, 0x0, 0x9e, "8611231a26097c52b4c7cb4a866bc5dc1e79ba53e57131bd96f2cbd924356dff946e1bb7817bf1b7191a8258fa7454ea1af708e3516d18a59b8889355ba3895b1cb4fe9228c61e8f2af209995dc99081022a3aec21e76558df46872c9bc991158cc11a70978a210ad3ff4f25e82979be0d15f39c91540af23acefbc48815032485aaa2ac55cbd4f00d0ad57d2207a51d64d55089d1be341f1f9008b63867"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x48}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x1c44, 0x40}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000000d00)={0x40, 0x9, 0x1}, &(0x7f0000000d40)={0x40, 0xb, 0x2, '0,'}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @random="db9c7ae2107f"}, &(0x7f0000000e00)={0x40, 0x17, 0x6}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "8934"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x4}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) fstatfs(r1, &(0x7f0000001040)=""/201) 09:57:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x81000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:02 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xc6, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:02 executing program 4: socket$inet6(0xa, 0x806, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) 09:57:02 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000100)={0x0, 0x3, 0x101, [], &(0x7f00000000c0)=0x81}) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 708.113795][T16172] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:02 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) [ 708.228367][ T8702] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 708.281689][T16179] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:03 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 708.468523][ T8702] usb 3-1: Using ep0 maxpacket: 16 09:57:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x81ffffff, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:03 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 708.589137][ T8702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:57:03 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000004000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000560395a7088d7c27f000000a90100010000a85ca6576b9a992da488034851abec2b9607bcabdddc7d1e4d6fc09cedb4d5dab540ca43eb2639620c32fa8207651b72238c6cf522d461339e2468ce6e4a0b86c82432bcfc6b8415ab107e5b08680c53b42181df3b819d095b7f7c41f5e1c174d5ed"], 0xd8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x4200, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000200)={{0x9, 0x2}, 0x10}, 0x10) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000340)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)=0xe4) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 708.759683][ T8702] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 708.769142][ T8702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.778105][ T8702] usb 3-1: Product: syz [ 708.782419][ T8702] usb 3-1: Manufacturer: syz [ 708.787152][ T8702] usb 3-1: SerialNumber: syz [ 708.816456][T16194] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 709.012278][ T8702] usb 3-1: config 0 descriptor?? [ 709.051229][ T8702] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 709.088844][T16189] dccp_close: ABORT with 84 bytes unread [ 709.108627][T16199] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:03 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 09:57:04 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:05 executing program 2: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:57:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x84ffffff, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:05 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_elf64(r3, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xc8, 0x8, 0x6, 0x5, 0x2, 0x3, 0x7ff, 0x1f1, 0x40, 0x160, 0x7, 0x6, 0x38, 0x2, 0x0, 0xff, 0x4}, [{0x70000000, 0x8, 0xffffffffffffff7f, 0x1, 0x1f, 0xc5, 0x5, 0xfff}, {0x5, 0x1, 0x3, 0x4, 0x2, 0x3, 0x5}], "916decd68bdbfc5ad9dd5e2c1dc237db096f0fa2182d55a7ada51a9a7ccbc0ad771b0d4a380b1026baded6954f0842040c7d32802c7a6ae38252b6e36ef8021dfc30c784ddc61eb55ed91568d1f35bab65d9f37a86e58227e444f273ef0f6979b931c57bd5dc6dfb2c4bf91b98adf652e7aaa9e41fdec2e4d0099339566d6b6bb41b81b65bb17609b2b55d4512eff371cc7bc4b995e172cdb7a1f82c8d6a1cf653e116054a2390dd49d0af007a3f86dd6aee202a9f0409a89e3f496da5178599579716aefabf87b2d5102304a02516af03de11e9d69137c5acaa0e369838df8d92e012edc59543bb1f1a64947c32de03a3ad88dee4f1c6aa1c7fa29eb41e46425a44c423ab66cfa3bd921231936fd0cef18df79ba13b4e6c3ae02c33e8a8530c9b413b77633a0b5938a00b526f674bbb217e8630b874276688f1bbfc381563bf9ada7abad80ba085bc0575b0457bb50ed6349739b2c955f08dc2d3a5e3b09046a65ce1a275252b1aeecaa03b546105e77da8ea534a06b48a5decadde74a9a9e2b003e22622bf613a10f3e3a1e397aa93cda0fe838434fd9aa0ca27407831f48871904acd64ad9d238b152aedd5a6e77a45a87fd45cf42844d1d8dbadbb2782063bafe11e0a18a296404d8c424cad5ec1cf63660785511119b0b4fa6956c2334edd431c1b1987dd73f74bc0f9865a0928156d02af382c4001e7a8ac841a4630b2bc623efe3fe11b038445433b8c273f698231b60192982acc7e927f805aac9ea728062a401dfd2839e00f4ae0e8037bb08265cfaec074ae944af4297a46f130a734b4d36013c49df791c5ddd8ec1ec7e57592b4a93cb2f32bbb08ac26169cab467cc20a2214ae232eceeceef0671b8b9ab6b5fefad0cacdd9bf09641d07140f7d038bf2235e5b2d6e693482fde6b7aeb660e3830fa18da2e48cc7d75199e5b5a6c39424dc4aa2ea5c74b633f933d4dd5a62650bd0b2e7d481687d891afd3f1fa1ac0a2355b0c9f0548fcaf4745bb27a69b0e49400fccdfc72a0d386e3b0b81912dc5119c2b8fb5bc4cf0dfa0d59493300c9a1fdb2fd8c549415f0774e64a3505d092c734dd3c90a8ad197a927c3a0239ba0dc8cde02498ab943cdb3e95212c0970198dfb0c1194b00dda19720a6715ba2853aef01d255c2d5e4ee46e219c7900d90955295430330ceaeae88a5ac24f4d355bc92b752d96fb977336392f73261212a39b65f0f0b55b0bdce3a4095e66a9cd4745dac5d631a5e0efa1fd799ba2726dbf12d6134dc240679cb5bd48552d030fb89bbab9885c1b5602430ba134a764891da9d5c1b41125fea02771ccd4ef48bda5aced6a59f93781f485b17a9c31a83b6440880f6de01c34c08b9dd7b02269d49965e6d5b65544e413da9681e05942a6c930bb7c05d080d6584746a7b5a4be7b2dad59ef6b596fb8ff64d723f4dd2a590136f625f9aafe0aa40de4df44b1d95058900cf41fb0ddb63ad44644e45a75e4b81fa96f7a4e0ca07d00f0097b0d390fa689f6402d233fcb5d70bede2d9bf38e6a2560988afc9ba21a5e8cd3c23f0a67a92458bc1840417765b32a2ebdcd6b03694bad2996dddf3ffba6ff0b9379ce352e03a48f83ad7d4433d4f94ec348d93a3feb47ba9869dfa6e59db07db146aaa8baba0edd6e3706ffaa246a2c5b5f905e5cfe9cf6f357d537a3dfd1dd8da30ebdb4584d90e0e6dce6896298db97994714ee57de384c9ce61640e38c332345ed139b53ed84bc4b7c1ccb125c0f28a7f29283cbabcc989d3bd82c33a9020ccbcf40df0a2ad44624195d53dd50e5030000e7bd7b61f40e0120bb2c2f080461ca8350a9be32249341c175d335adb8c14edc9a028deb09932509da65722a017c9af5843df82f764f417809d8eb3c0b8b0c3afe2132a585f5d97020aafe5643716da88dae3545395dd44deaa99f34c708d80fad2eddf1854cb0ed5ae2082f6430e78778dc272bd1c242720c1b3a4c10279ce9e7c3291fb61433bb475da5ef50548d613cd93ff86d06c5c81e9b53bf4cf6c21fb3fde40e3f006b11f1d8348f3c6ba894ec177863ba9dfeff486decff4503afb5a2491a593e464be2b9ca2d6bf73241568e5ac91db469f28dd5b83e6d27d595b3ac2661673b470ca308d2885aa12c2bb7bb2e3e752428b3f33e2b27d4dda96154dceab4cbdef56c22c974c59a35c45bcdb6949ad5cbfd45831530dd9994461a05e79121cda004bf768201710d6ddb3b13660fe963a15ed8091da4fc040a5abf41beb4e9642556c027d0412f92f1a0397768ab7b2200df65826f9582224b20abb6a9b4946b4ee45bdee1e88e6e8988e238683d2bd211462a77182f385d13beb6dc3f887596a62fcee2ff1d1b33b72d50ac8061c9693ce9440f08c80c841cfc481bcb6239c883699267d26d1827817bf129c8d856a0268f41d287a502633cf9d6abfe37c4a20a986d2eeaff6cf882ced1d4e3b5ed99dcebc380169ec36c3f301b7b9679a273b61e39a9636368bc1e6e804e7e56353ed5725dfc4d3d4ca4b600cc8a04a9cb35788c0deb971e0d056270b82f19253845bcc5c242bc3c1d9121cf1b60ac0e62d32268d35bc3f8cd00bcda332d913b8eb679eb70dc31946d703615ddcd9721bbb60c3e9ab035414dfe00d61a0020c8efbdaa59601d7bada2049601b11134d40d6f30120010be9e9d869405a40c6067f6b90e80a5d1b21796473fc8558c3ae6282565465004dc8a4939c9aeb43b0a27b7fbd5e797c8bbda5916bec3685ecdc3174f6f065974aa071e5ff57aa4d5ba00a7732657a77d1171a1df20598b9e5896d9ebecd76cacc48fd476a424714f78155396644d1a793a153b7d102fa8b9980cc5a3be10970aedcc7e23c0bca14844c6721f7a7be65834b722b5a2e08e343c6264744f30845fd481bc79005e95b8918d1d85c3677b4659840d520912266a68238e668bf8a87c1cd9a804d37325a9bb652c173d24e6a9140255e4e6529ddf53f2a2ca0d769e79beb9ff1eac61dd98fbd5a6efeeb021d8eb6d262ba7623ae6fad584cea3168c39923147d7d8f1cf67a5dfa9d95c759515418c2821dcbe0b9b9d9225a6bdcdf737d3232504226adbcb9c2459c9844d5f6db9d88e538478f062fff38bed42960f6819eb7d4ab6e84ac0fa38e5182ed498c90a2c295970a1314e9a5e7be65772369965afd02b581281e3db7478fb22174e74dbfcecf8355b00b0d7fdbc09b6233009864558f2aa70cc392b6176028d022fafd2fa409b1018c86caa8e9ef5791ce3c8b54ceea421a41a471c93028af391131c04e6e4f972e70a83e0563f282e20866645b67c9010dae71a1055cd6b524f88cf1ad045d734eeeebc235de8e22566ce5a1c7cbe744376910c358931883c6b72eba6fb5ea51f78ebe242c70b1f6bec9bc8e6e862989c6f81441c231b318475693865afd26996f4526b7608a2dc323fc1691e0e9ce50c0fdbacd72c58af922e9a28dc30a35b1a003872ed57ea66081f0d84bf07d68f39ae79113befb13646b2b38b15bbe0134c68097f950798152a2ee5475797b2cd6f24ad91b691077a770d53e8b10be71fe3bdaeccd9f3a9de31722c2b0f2526a6a6e9860ad89fe991e14dfbebe3df6c07b602df89fc32a0e518e676c9a6f14a4615c4ee827d5201b55d2089f53a572c1f0dad4262ede67eff62504dd7abd95d891de43672a943ec93753899c08b81339ccfb9948f26e5f97b7bf95a769b98f40693d6373372957d535e1bcef3013f225164c1badd6e99fd80c8c0bb476d63646f03a5217d7f604cce76e732e55cf43a6baac2c9f967aa89973a3cf176020da4b5dcbcae1dd0922fdff128e8d56b73e3834799ef3f9f79e6562620a858e2db5f4fbce79924489437c91639f7e8e1e5237df1649563e6b0be644cc2ec45bc5d83c9051bdfbf5f4ee0f49acf4426d38fc99f7b6ab04b33ec37c5386e45270bd600097acf793af133cd3e2b80efd5f38d88bb2f975c860e647d2c37f0b605d7511a12fff0c3d9b2e15adfb9a1af70f5d04acaf7470388d0f948693783b9ff951a7284219f911de756d1a116b0d519c488d182e41ea50e70654da2c6a5321015d473de1d8be2cfe09ce8868d9ba93d60dc24141f6c42e1b2019ae66031d4744fefe354057f18c7707124f111dbdcb02e525cd7560e3901d3ae987aff0d4d88abd9944b4691dcda4f3505ebe6c30c0c5657e4e994cb68c17bb9745546bf72f55229f83709e8a614b8d10222b1990c5f4441706eb8a8d9ebfb53a3a3b5b202eec1447dbfed82a8b19701f232d9a60b41e59ec72abd578745c7f21b13245c3862357074c5af470787678c8bd9f3d2972167af312a09a3326682db99d55d29059eddca1cb259a8b88865bfaac3deeb7bcbc1b764668b096068d15b0684fe9ef90708a89da9ef94e8ca19e863bf668b7c6b0b8c2a6631c05c6b119135131332dbd44efb3f786c7a297dae69f72ee0b29115ff71ec29e0ed05eef29182016cf465402ebb2239d90deec043c3c6f816fa370edb6bfee10147e1f6bdef6087416fb378997beb6acb8c80d245c0421da398ddc909df765404db10f3c048b081e5413997954a5e78cfdbfeeb66e91cd26105b28434848b5d08b4c614beb661cae37cd069b2b8a08413ea16495c38222a8ae8a76fd30bb02882a77c005c10992c7fdb2c1d4f9a44a3e76b7557d7e7d21c4c1d31a3d628f3bc6f8e76a7015de2a1fa9c3b79fcb6fefe11a2d78afacaa4a01f4501f773f1480e16ff1c9f391413e796cb213819558069725ab8cfa7b25f915432c5cc86c23809149fe02ca651adac2dbbb288410b859525ab0b5d9edecf5093f308cf51c7a66f1fb8f027e22b962f2fa6b868770994dc2ab4b6c8c05d613ba31c655b2079761980ec86cfb98c2cfe8bd0f9cc195df020709265d95d9f807738168988016b0ecf89609af147836308b2e5b8f3ad8dad83dff79b0190b8df3e1d8e7eaa73c96e7de512bdb0ed01df8d144589f27417e880dc118c3685e3a783a6c02cfecc1f9ff6824cebf9e7e4b31137c86143396756f6ba5f81cb35520c8fff8bd772652473e96f402ce1115c3d28cbbf0293cdde500da505a33f880370a43af6fb8fbb7d25b796eb8ec2de9e6e6a621223d34bf1b12590bfa0a3913b56fd9d920d16d6d0704dc0f99070b1c2d573fd8c94fb4d0b97d7502c2757a9322b918eb4dd2a3772258f4858018e3928b42c79a991d6997e8a0017c83165e78cef751aab627a2fdb702fd59b1d9813d6d25fdaac137df3ce1355be79a6a0a82d4b9389f83bf54833c431f0cd0d777a82b2a3ba03fac88340e36b39b2ee395b3eb253bb540ba87589b79e70e5e69d9312ba4c2282de9d559603478bd3d2f174b409e6774b44656e72f8e9c8ce184a15f66af8e36a38b67aa78a5b83132f31ba29f256ba05917b12afcb6bd1db535213f5e3e1c129137cccc3ad43b56e3b93ca2e3e9e3e8e434718493b68b26b1a61f5e9de64111b60be386bf13991bd24eb0af0c8e943097206ef0c1a33dd1cc00cc43a67d6c8c9bf5ca12b7457a93651785893df21913f207b1440c7f765d6d338a59bd4163dba2ec9e1266037322fe30c48ddd8c3618ba105d7d18c90ff34677a79fb7476304bd38bdfa044e27a9e5ac55a636826929068aa403bc737f5ae965cf255d9694f3c708d00ddd8e9ecfc2a9c5649d34696b2d35c9029aff32439eac054f16de1fa73bc72a20a65d24327aeb6fb045e6d5897ddff06cbbf842412939c8d91a285b771176db35ea3698c3ea765e9967da31f6ce24a21797703cc1e1466c", [[], [], [], [], [], [], [], []]}, 0x18b0) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r4, &(0x7f0000002100)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b73800000057003582ddf3a57fa92d58288bf4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb0000000900000700110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da488034894ea57dcc0086597fbc44fdd12b57e505f10278c6043f2b7b7ddd70f1c6df5bf661abf603dd37527371e17512797058b8daf3ca5a42a4b9f2ce0e26a327dfb8a09758c636ddf4ba98cc09fb260020000000000400044967957d8411c6a65c78d777fcd3482978e2a288646779e128477e71f00136d1a676a0e8ea8ab75027044e17e97273573d7d7888618c51113482fb3b7ed959174d7f3c3ea82da510f4b9017e39ff3ae7761c800555da9c20d2ad0364dc8d607dce5ecbf6977c00459d7d75244e1a2ccdcfc89afcbb0736fe0064ed4bc8a91d4c09d5514d922dd0490f26637d5ea80fb74076a226e3b1c556137dc26a2c65b7c95cdfc8758df251bd98323f9610dbc0cb93866722deb8ed2d763f98f7ade9debfaf608affa9f4598c7e55b49e072f67e03eeb98ecf31d81c61c062e55910fcfdff1b387c3e9f83772c22d90daa413c2761ece201ced84c24fc397462b4da70cdfbe11f0b1b45cbb7e3602c4935ed8056ed0ca5752a03c14812504e3a7c62772d495bcaae093c2ee49744e6cfd19065b4c26301f1d3949ea4706ee0722c0f2b19aa7483ad5956efcf789071d40afe808b5d0f912183d52ba6c4fee15ec1b0f0c882fe755b3379bb5a5d81327642cf64f8f2df7682e2c56a7ff366d2141ee7a53c50a665cf038997ccb1a39c7bb6591f25d4466788d6cfdec5e123a3b6d60cfc28dcd6429097c15d1bd2a217e0ddab34bb9d927b70a35658b04e4b0c6ba577f958760fe09380b7eb8a05ea4814a1a7006c53f56843edd1"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:05 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 09:57:05 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 710.983528][ T8701] usb 3-1: USB disconnect, device number 78 [ 711.365819][T16245] __nla_validate_parse: 1 callbacks suppressed [ 711.365856][T16245] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:06 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:06 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYBLOB="7642036c8834faf47ba715521ac2b2c88d1972e47f2d5a995b25eb83cc85296e0193b4171c4ac6e171e185937c9a46b3312dfd182aec29af805ef07df9a3d1def5b6b1e4535c2b4d79ab40e43a98dc1e9a3d0fe13ad6a63e9f0eaf287c734d044e85ba15b0d71ac866246b51f439cb142781c3353fba7214a0ab00c21a695f1e2b4fbcf0fb6f66f55d580de1b4be674ccd6a2fcba125f58b943f75fce49fb4909a2eac7a66d328fde4637b220deac5ccc902925b5eb38eddebee057de6c788002af8177a284f3fa0b9bd4c3d499130", @ANYRESDEC=r1], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = dup3(r5, r6, 0x0) sendto(r5, &(0x7f0000000180)="8d", 0x1, 0x0, 0x0, 0x0) fspick(r7, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r8, r9, 0x0) sendto(r8, &(0x7f0000000180)="8d", 0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) write$cgroup_type(r4, 0x0, 0x0) flistxattr(r3, &(0x7f0000000100)=""/104, 0x68) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0)={0xb9}, 0x1) 09:57:06 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x5}, 0x8) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000100)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050065000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x86ddffff, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 711.657887][ T9034] usb 3-1: new high-speed USB device number 79 using dummy_hcd 09:57:06 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 711.913421][ T9034] usb 3-1: Using ep0 maxpacket: 16 [ 711.961990][ T9745] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 711.991654][T16263] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:06 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x400, 0x0) execveat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 712.069041][ T9034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 712.223169][T16269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:07 executing program 3: clone(0x9040000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 712.268833][ T9034] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 712.278255][ T9034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.286413][ T9034] usb 3-1: Product: syz [ 712.291035][ T9034] usb 3-1: Manufacturer: syz [ 712.295886][ T9034] usb 3-1: SerialNumber: syz [ 712.302327][ T9745] usb 5-1: device descriptor read/64, error 18 [ 712.433620][ T9034] usb 3-1: config 0 descriptor?? [ 712.502665][ T9034] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 712.689060][ T9034] usb 3-1: USB disconnect, device number 79 [ 712.708520][ T9745] usb 5-1: device descriptor read/64, error 18 [ 712.988152][ T9745] usb 5-1: new high-speed USB device number 27 using dummy_hcd 09:57:08 executing program 2: clone(0x0, &(0x7f00000000c0)="c57b4ed19ca97ce94d071c9391e72079ba5a2053ff9a36bb680ef536b95d5d9ffb3ed46a8fc3a50c495a3908eb9c", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="cc0d7aae66b7c649ea758dffeb9e186a801cd748a14d4441eef188eede9ffb2182e2ab88fe8787f9ffbc3fc640bdec5f33b614465c1335eff4d6db32afe2f20d") syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2312110fd0b04084f1b000100000000090400000137b2f70009050e000000000000d42708b1839dd1886c20190bdd1fa3dec130ceb2179502682d621900f94f8532c0a7080a53cf45f071cfc38d0fef078552a8da0601b9e97f1fb150fbcec94fad586fcfd28de3513787c478805db7936ea596f626aee9bf9c9c35100f4d738cf65f6f53bbac2b8984aea7f5ba1b62c34c7312d4178fd07597dcda79821cdcc53601fe9a698b257c8dda553fbceb9f"], 0x0) sysfs$3(0x3) [ 713.267985][ T9745] usb 5-1: device descriptor read/64, error 18 09:57:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x88470000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:08 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:08 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000100)={0x9, 0x0, 0x2, 0x101}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000400)={0x1, 0x3, 0x1000, 0xbe, &(0x7f0000000340)="f1f4422cb440d632429b0cf3d50fc0f8b4c4617b399eb39ebf19c573f69b7c099b28fae9f44bab54aa8cbb6fd6b547bbbd454424fa1031a93fbe6504302161b8d0d650a6217ec1b38eab44f5d73b067fd5d02321c57c20c2434dadc91f482a1b20b72516e6c373d4ebc76905043e6857a79d8b36d579e45fa55650bd8d42b95eab6d3c2d4171b451d7ab8f0cfd8c4ae4a2d4ba73e5527cc4e20abc65412d3a6e388fb6090cfa67f9daabbb36c0aa4eb16b218d319740721efc8f2c38e7a6", 0xc, 0x0, &(0x7f00000000c0)="78be6c86fb208dfb359e0029"}) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 713.480350][T16296] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 713.640177][T16309] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:08 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 713.698060][ T9745] usb 5-1: device descriptor read/64, error 18 09:57:08 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x5b7283, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x4, 0x80000000, 0x3c5}}, 0x28) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000340)=""/173, &(0x7f00000000c0)=0xad) write$binfmt_elf32(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97f65ce27b90300060001000000000000b738000000570035f4c3701985d3abc86f716f8a1f4c89f00cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 713.818818][ T9745] usb usb5-port1: attempt power cycle [ 713.930458][ T8702] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 714.178674][ T8702] usb 3-1: Using ep0 maxpacket: 16 [ 714.222248][ T8702] usb 3-1: no configurations [ 714.227149][ T8702] usb 3-1: can't read configurations, error -22 [ 714.401833][ T8702] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 714.547651][ T9745] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 714.647683][ T8702] usb 3-1: Using ep0 maxpacket: 16 09:57:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x88480000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:09 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ed65a751aede23468c9ee84aaab1f403552e280587b4ac09b1e9c2eba1d9f764816ffd697bd0eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11470600000000000000e72cebe45ad52950d2ecf8c8dd03da30825eef1b08970aff01ccb72f42d0ce4e6330fce433a762de037d61c586e179aa350d075c60e605d3b137c518ddc9420ae21e6e00"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b385d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000010d60395a7088d7c27f000000a90100010000a85ca6576b9a992da48803"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:09 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 714.688669][ T8702] usb 3-1: no configurations [ 714.693469][ T8702] usb 3-1: can't read configurations, error -22 [ 714.732781][ T9745] usb 5-1: device descriptor read/8, error -71 [ 714.747713][ T8702] usb usb3-port1: attempt power cycle [ 714.861508][T16330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:09 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000340)=""/95) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000020570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffff00000d60395a7088d7c27f000000a90100f4f600a85ca6576b9a992da488034800"/126], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 714.997906][ T9745] usb 5-1: device descriptor read/8, error -71 [ 715.026853][T16336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:09 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00d\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000030000000b000100666c6f776572000018000200140002006d616373656330000000000000000000d4990af45c36a5f7a4cc2717b66d97bfd188494a14455d74804311753a0941d57dca2b875e73f1c15e68a17b7c34e86d0965d03080744d2e45b26a8f5b736e539ab09f0c0b547fddce698f84cfd704738c8dd73b380f88306a5e528ee7dcc9f35846dab3c276f4d159fefc437def915dad3e59d8e31b18417a5ae54fb8119347c578c50702657a7c1b17f8c6432559612737b4ba153f0e14bc5efac902331503f86affc51831c7afdd77c099939feeff71c7a38a"], 0x48}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40015}, 0x24040081) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x20, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x4, 0x1}, 0x0, 0x0, &(0x7f00000005c0)={0x1, 0x3, 0x92, 0x6c7}, &(0x7f0000000600)=0xf83d, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=0x7}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1a, 0xa, &(0x7f0000000000)=@raw=[@alu={0x4, 0x0, 0x7, 0x5, 0x5, 0x80, 0x10}, @alu={0x7, 0x0, 0xa, 0x3, 0x9, 0xfffffffffffffff0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x6a}, @jmp={0x5, 0x0, 0x6, 0x0, 0x4, 0xfffffffffffffff0, 0x8}, @alu={0x7, 0x0, 0xd, 0x6, 0x3, 0x80}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7fff}, @generic={0x5, 0x0, 0x1, 0x5, 0xac8}, @generic={0x2, 0x7, 0x4, 0xa, 0x3}, @generic={0x7, 0x8, 0x8, 0x8, 0x20}], &(0x7f0000000080)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xd, 0xfffffff7, 0x1}, 0x10, r6}, 0x78) [ 715.086115][T16339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 715.497880][ T8702] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 715.528581][ T9034] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 715.588680][ T8702] usb 3-1: Using ep0 maxpacket: 16 [ 715.628651][ T8702] usb 3-1: no configurations [ 715.633444][ T8702] usb 3-1: can't read configurations, error -22 [ 715.788443][ T8702] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 715.807834][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 715.888617][ T8702] usb 3-1: Using ep0 maxpacket: 16 [ 715.943225][ T8702] usb 3-1: no configurations [ 715.948269][ T8702] usb 3-1: can't read configurations, error -22 [ 715.950505][ T9034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 715.969095][ T8702] usb usb3-port1: unable to enumerate USB device [ 716.149128][ T9034] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 716.158880][ T9034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.167029][ T9034] usb 2-1: Product: syz [ 716.171662][ T9034] usb 2-1: Manufacturer: syz [ 716.176411][ T9034] usb 2-1: SerialNumber: syz [ 716.249656][ T9034] usb 2-1: config 0 descriptor?? [ 716.309614][ T9034] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 716.516618][T16347] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 716.653031][ T9034] usb 2-1: USB disconnect, device number 111 09:57:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x88a8ffff, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:11 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:11 executing program 4: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) 09:57:11 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) socket$packet(0x11, 0x2, 0x300) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="77454c466000002ed8e4f97765ce27b90300060000000000000000b73c000000570035f4c3700cc6f382200005000000040203000600f6ff000020000400b3d7c52ebf31a8b7d9e85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca63b6b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:11 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) sendto(r2, &(0x7f0000000180)="8d", 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348", @ANYBLOB="7cdc2284cfd394314ea4b9e705b60ba8c891c79e4c4463155ab9a40ceec48505", @ANYRESHEX=r1], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0x8004510b, &(0x7f00000000c0)) [ 716.978702][T16382] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:11 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:11 executing program 4: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000340)=""/95) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000020570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffff00000d60395a7088d7c27f000000a90100f4f600a85ca6576b9a992da488034800"/126], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:11 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904000002ffffff00090581000000000000090506"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000001374ee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xd9, &(0x7f0000000580)=@generic={0x5, 0x0, 0xd1, "8e409cd5", "cf167a343ef3a4dce8c6552bc7a13cbc3f0af15f523a68d7e34361976e8c98f62022e5e450a761ef5b7b43feb143a13d97afacb3300ed2a5e43ff241266c8e2b39ebf995db0e8ed4b03de69384703972f6ca7becd187bc96c7fb955746734ee92a97060d3823cb4361e78f718d4688592fa2a82def6bc329c3c0dcc7a56afe9d7d55cdb65fcfd9b727274552712214819b7133541fabaf203fce17b3b17b229be1475d4cd2dc2e34b9c2dbc45ca0a5d7286bd14e51ff13b7c1892e440fe79f492cea04c6befa6db8dc02d5cc7518b05bf2"}) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\xacB\xb4\xec\xff\xb9\xbd\xe5\xe5(\x99e{@j\xfa8\xfc2,~\xdb\x9d\xa8\xc8\xf4\xdb\x0e\xf7\f\xefPw\x8d\xb4\xcd\xc3?\xb0\xce&k\xe7\xc8\x94<\x01m\xc6\xb0Z\xe2o\xaap\xd2\xc8\xf7[l\xe9\xb6\x17v\xed:}\xfc', 0x3) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/79, 0x4f}, {&(0x7f0000000440)=""/66, 0x42}], 0x3, &(0x7f00000004c0)=""/120, 0x78}, 0x2) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000540)={0x0, 0x2}, 0x8) write$binfmt_elf32(r4, &(0x7f00000000c0)=ANY=[], 0xd8) r6 = openat2(r2, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x20, 0x0, 0x2}, 0x18) ioctl$KDGKBTYPE(r6, 0x4b33, &(0x7f0000000700)) [ 717.181844][T16392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x954f8876, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:12 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) [ 717.428414][ T5] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 717.667791][ T5] usb 2-1: Using ep0 maxpacket: 16 09:57:12 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 717.746736][T16409] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 717.795536][ T8701] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 717.828369][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 717.929381][T16414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 717.998332][ T5] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 718.008772][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.017069][ T5] usb 2-1: Product: syz [ 718.021633][ T5] usb 2-1: Manufacturer: syz [ 718.026433][ T5] usb 2-1: SerialNumber: syz [ 718.178396][ T8701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.188592][ T8701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 718.198633][ T8701] usb 4-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 718.207946][ T8701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.249359][ T5] usb 2-1: config 0 descriptor?? 09:57:13 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040)) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x204b00) ioctl$TIOCCBRK(r0, 0x5428) 09:57:13 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) 09:57:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:13 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 718.347627][ T5] usb 2-1: can't set config #0, error -71 [ 718.373708][ T5] usb 2-1: USB disconnect, device number 112 [ 718.389838][ T8701] usb 4-1: config 0 descriptor?? [ 718.444718][T16424] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 718.585212][T16435] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:13 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x2) [ 718.637955][ T8701] rtl8192cu: Chip version 0x10 09:57:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xefffffff, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:13 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x2000000) 09:57:13 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 718.977839][ T9745] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 718.981798][T16445] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:13 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r0, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) r4 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x68) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r5 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) rmdir(&(0x7f0000000200)='./file0\x00') execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:14 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x200000000000000) [ 719.233917][T16450] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 719.258345][ T9745] usb 2-1: Using ep0 maxpacket: 16 09:57:14 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 719.401172][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 719.437355][ T8701] rtl_usb: reg 0xfe66, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 719.593791][ T9745] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 719.603125][ T9745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.611462][ T9745] usb 2-1: Product: syz [ 719.615825][ T9745] usb 2-1: Manufacturer: syz [ 719.620638][ T9745] usb 2-1: SerialNumber: syz [ 719.647398][ T8701] rtl_usb: reg 0xfe67, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 719.656438][ T8701] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 719.664139][ T8701] usb 4-1: This Realtek USB WiFi dongle (0x0bda:0x317f) is untested! [ 719.672962][ T8701] usb 4-1: Please report results to Jes.Sorensen@gmail.com [ 719.714888][ T9745] usb 2-1: config 0 descriptor?? [ 719.763701][T16468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 719.766002][ T9745] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 719.898262][ T8701] usb 4-1: Unsupported USB TX end-points [ 719.904315][ T8701] usb 4-1: Fatal - failed to identify chip [ 719.911103][ T8701] rtl8xxxu: probe of 4-1:0.0 failed with error -524 [ 719.970769][ T9745] usb 2-1: USB disconnect, device number 113 [ 720.002163][ T8701] usb 4-1: USB disconnect, device number 6 [ 720.757220][ T9745] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 721.007121][ T9745] usb 2-1: Using ep0 maxpacket: 16 [ 721.148369][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 721.319561][ T9745] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 721.328976][ T9745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.337394][ T9745] usb 2-1: Product: syz [ 721.342163][ T9745] usb 2-1: Manufacturer: syz [ 721.347171][ T9745] usb 2-1: SerialNumber: syz [ 721.400027][ T9745] usb 2-1: config 0 descriptor?? [ 721.448807][ T9745] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) 09:57:16 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000)) 09:57:16 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:16 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x8000000000000000) 09:57:16 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xfcffffff, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 721.741517][ T8702] usb 2-1: USB disconnect, device number 114 [ 721.857734][T16502] __nla_validate_parse: 1 callbacks suppressed [ 721.857771][T16502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:16 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f00000000c0)) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 722.103115][T16511] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:16 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:16 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) connect$inet(r0, 0x0, 0x0) 09:57:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xffff0000, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 722.427573][ T8702] usb 2-1: new high-speed USB device number 115 using dummy_hcd 09:57:17 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 722.697314][ T8702] usb 2-1: Using ep0 maxpacket: 16 09:57:17 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 722.817607][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:57:17 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', '%---]\x00'}) [ 722.926183][T16534] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 722.987906][ T8702] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 722.997505][ T8702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.005669][ T8702] usb 2-1: Product: syz [ 723.010733][ T8702] usb 2-1: Manufacturer: syz [ 723.015488][ T8702] usb 2-1: SerialNumber: syz [ 723.101921][T16536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 723.182100][ T8702] usb 2-1: config 0 descriptor?? [ 723.248792][ T8702] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 723.443655][ T8701] usb 2-1: USB disconnect, device number 115 [ 724.231058][ T8702] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 724.479678][ T8702] usb 2-1: Using ep0 maxpacket: 16 [ 724.597640][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 724.767103][ T8702] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 724.776333][ T8702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.785094][ T8702] usb 2-1: Product: syz [ 724.789585][ T8702] usb 2-1: Manufacturer: syz [ 724.794395][ T8702] usb 2-1: SerialNumber: syz [ 724.805665][ T8702] usb 2-1: config 0 descriptor?? [ 724.848561][ T8702] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 725.060520][ T8702] usb 2-1: USB disconnect, device number 116 09:57:19 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000066f43210d11287a1a02d0102031709021b00010000700009040b0001ff031a0009050e010000000000"], 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) 09:57:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xffffa888, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:19 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r3, 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) pread64(r4, &(0x7f00000004c0)=""/179, 0xb3, 0xf) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r5, r6, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r7 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:19 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:19 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r5, r6, 0x0) dup3(r4, r6, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r7, r8, 0x0) write$cgroup_type(r8, 0x0, 0x0) connect$inet(r1, 0x0, 0x49) 09:57:19 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000002840)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000002880)={r3, 0x3}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={r3, &(0x7f0000000300)=""/72}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000000)={r3, 0x1}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) [ 725.294200][T16581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:20 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:20 executing program 4: setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000000)="b78862737ea76fd139013674e4ef611bbada8f2142d822b67837d6bdac15039b4b9f590e0c3f369f537726e3b09bd137b9aa4fad80c804a1e030c662949ab4", 0x3f) socket$inet_dccp(0x2, 0x6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) accept(r0, &(0x7f0000000040)=@ax25={{0x3, @rose}, [@rose, @rose, @bcast, @bcast, @rose, @null, @netrom, @bcast]}, &(0x7f00000000c0)=0x80) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x40, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000140)={0x0, 0x9}) 09:57:20 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r0, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 725.557661][ T9034] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 725.564164][T16591] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xffffdd86, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 725.747028][ T5] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 725.836862][ T9034] usb 3-1: Using ep0 maxpacket: 16 09:57:20 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 725.966205][T16610] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 725.978092][ T9034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:57:20 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 726.009124][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 726.052762][ T5] usb 2-1: too many configurations: 23, using maximum allowed: 8 [ 726.064232][T16612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 726.140879][ T5] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 726.153275][ T5] usb 2-1: config 0 has no interface number 0 [ 726.159852][ T5] usb 2-1: config 0 interface 11 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 726.178432][ T9034] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 726.187820][ T9034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.196148][ T9034] usb 3-1: Product: syz [ 726.200861][ T9034] usb 3-1: Manufacturer: syz [ 726.205617][ T9034] usb 3-1: SerialNumber: syz [ 726.358101][ T5] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 726.366449][ T5] usb 2-1: config 0 has no interface number 0 [ 726.373178][ T5] usb 2-1: config 0 interface 11 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 726.394072][ T9034] usb 3-1: config 0 descriptor?? [ 726.454195][ T9034] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 726.518395][ T5] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 726.526816][ T5] usb 2-1: config 0 has no interface number 0 [ 726.533155][ T5] usb 2-1: config 0 interface 11 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 726.667300][ T5] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 726.675633][ T5] usb 2-1: config 0 has no interface number 0 [ 726.676356][ T27] usb 3-1: USB disconnect, device number 84 [ 726.682478][ T5] usb 2-1: config 0 interface 11 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 726.810890][ T5] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 726.819368][ T5] usb 2-1: config 0 has no interface number 0 [ 726.825695][ T5] usb 2-1: config 0 interface 11 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 726.921164][ T5] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 726.929698][ T5] usb 2-1: config 0 has no interface number 0 [ 726.936048][ T5] usb 2-1: config 0 interface 11 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 727.027931][ T5] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 727.036231][ T5] usb 2-1: config 0 has no interface number 0 [ 727.042903][ T5] usb 2-1: config 0 interface 11 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 727.127865][ T5] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 727.136353][ T5] usb 2-1: config 0 has no interface number 0 [ 727.143201][ T5] usb 2-1: config 0 interface 11 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 727.307244][ T5] usb 2-1: New USB device found, idVendor=12d1, idProduct=a187, bcdDevice=2d.a0 [ 727.317059][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.325272][ T5] usb 2-1: Product: syz [ 727.329984][ T5] usb 2-1: Manufacturer: syz [ 727.334781][ T5] usb 2-1: SerialNumber: syz [ 727.408883][ T5] usb 2-1: config 0 descriptor?? [ 727.450482][ T5] option 2-1:0.11: GSM modem (1-port) converter detected [ 727.655709][ T27] usb 2-1: USB disconnect, device number 117 [ 727.667160][ T27] option 2-1:0.11: device disconnected [ 728.436703][ T9034] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 728.706635][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 728.766973][ T9034] usb 2-1: too many configurations: 23, using maximum allowed: 8 [ 728.866755][ T9034] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 728.874981][ T9034] usb 2-1: config 0 has no interface number 0 [ 728.881510][ T9034] usb 2-1: config 0 interface 11 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 09:57:23 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000200)=@v2={0x2000000, [{0x10000, 0x1f}, {0xffffffff, 0x81ee}]}, 0x14, 0x1) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f6, 0x8, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004004}, 0x60000000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x1, 0x3, 0x2, 0x4, 0x82, 0xfffffff8, 0x7}, 0x9c) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85eb8000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:23 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:23 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000000)={0x0, 0x6bef, 0x3f, 0x3, 0x3, 0x85, 0xad0, 0x80000001, 0x8, 0x2, 0xffffffff, 0x10000}) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f00000000c0)=""/216) 09:57:23 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) pread64(r0, &(0x7f00000001c0)=""/33, 0x21, 0x8) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) recvfrom$phonet(r4, &(0x7f0000000300)=""/4096, 0x1000, 0x20, &(0x7f0000000200)={0x23, 0x1, 0x88, 0x3}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x71, &(0x7f0000000140)={r2}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={r2, 0x2, 0x5, 0x10001, 0x20, 0x4}, 0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r5, r6, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4058}, 0xc, &(0x7f0000001380)={&(0x7f0000001580)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendto(r5, &(0x7f0000000180)="8d", 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000000)="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") 09:57:23 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) [ 729.097616][ T9034] usb 2-1: unable to read config index 1 descriptor/all [ 729.104791][ T9034] usb 2-1: can't read configurations, error -71 [ 729.137518][T16664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:23 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd8) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x8, 0x400000) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:24 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 729.332972][T16676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 729.366714][ T9745] usb 3-1: new high-speed USB device number 85 using dummy_hcd 09:57:24 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x20442) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, 0x0, 0x0) 09:57:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xffffff81, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 729.628080][ T9745] usb 3-1: Using ep0 maxpacket: 16 09:57:24 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000340)={0x7, [[0x8, 0x30, 0x8000, 0x8001, 0x0, 0x1, 0x7, 0x1], [0x2, 0xfbaa, 0xff, 0xff, 0x6, 0x7, 0x80000000, 0x72accc8], [0xfff, 0x10001, 0x0, 0x8, 0xffff75db, 0x0, 0x791edfa, 0x6]], [], [{0x7, 0xc45, 0x0, 0x0, 0x0, 0x1}, {0x4c, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x6, 0x1}, {0xd037, 0x8000, 0x1, 0x0, 0x1}, {0x6, 0x141, 0x0, 0x1, 0x1}, {0x2, 0x764, 0x1, 0x1}, {0x4, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x2, 0xb8}, {0x9, 0x3, 0x1}, {0x1, 0xfffffffc, 0x0, 0x0, 0x1, 0x1}, {0x6, 0xfff, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x9, 0x0, 0x1, 0x0, 0x1}], [], 0x7fffffff}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 729.781492][ T9745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:57:24 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 729.895271][T16697] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 729.897412][ T9034] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 729.968280][ T9745] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 729.977691][ T9745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.985838][ T9745] usb 3-1: Product: syz [ 729.990483][ T9745] usb 3-1: Manufacturer: syz [ 729.995226][ T9745] usb 3-1: SerialNumber: syz 09:57:24 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x200000000000001, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x3f, 0x34343459, 0x0, @stepwise}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0xc81, 0x9, 0x1], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$CHAR_RAW_FLSBUF(r5, 0x1261, &(0x7f0000000340)=0x2) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r6 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:24 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) connect$inet(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0xe9, 0x4) [ 730.050120][ T9745] usb 3-1: config 0 descriptor?? [ 730.098745][ T9745] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 730.167180][T16697] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 730.269714][ T9034] usb 2-1: device descriptor read/64, error 18 09:57:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xffffff84, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:25 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 730.618056][T16726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 730.667734][ T9034] usb 2-1: device descriptor read/64, error 18 [ 730.760195][T16735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 730.790129][ T9034] usb usb2-port1: attempt power cycle [ 731.526970][ T9034] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 731.707494][ T9034] usb 2-1: device descriptor read/8, error -61 [ 731.996568][ T9034] usb 2-1: device descriptor read/8, error -61 09:57:26 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e2312110fd0b04004f820102030109021b0001000000000904fc26df39b2f70009050e000000000000"], 0x0) [ 732.093205][ T8702] usb 3-1: USB disconnect, device number 85 [ 732.276594][ T9034] usb 2-1: new high-speed USB device number 121 using dummy_hcd 09:57:27 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x230e83, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) sendto(r2, &(0x7f0000000180)="8d", 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:27 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000080)="6ecfd36c14050c7c84279447a1d7b3eab853779c0d610e8266104f133cc9ed571fffd4fcae7968a122917f32261f048a03cb8017a16c9b", 0x37) connect$inet(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x4c72fc37, 0x4) 09:57:27 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x0, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:27 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000300)=""/4096) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5294, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x30, 0x0, 0x408, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000001740)='/dev/vcsu#\x00', 0x1, 0x200800) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/vlan1\x00') setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000280)={0x6}, 0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e2312110fd0b041d4f8201020391a0e98786442d9b0000090400000137b2f70009050e000000000000"], 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000001300)=[@in6={0xa, 0x0, 0x3f, @rand_addr=' \x01\x00', 0x1}, @in6={0xa, 0x4e21, 0x0, @mcast1, 0xffffff80}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x71, &(0x7f0000000140)={r5}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r5, 0xff}, 0x8) [ 732.396889][ T9034] usb 2-1: device descriptor read/8, error -71 09:57:27 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0xa8, 0x4, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3e}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_UDP_REPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x80}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000011) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 732.567288][ T8702] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 732.593940][T16765] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 732.609672][ T9034] usb 2-1: device descriptor read/8, error -71 09:57:27 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) geteuid() r1 = dup3(r0, r0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x58, 0x20, 0x800, 0x70bd2b, 0x25dfdbfb, {0xa, 0x10, 0x80, 0x7, 0x3, 0x0, 0x0, 0x8, 0x8}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'geneve0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x404c081) [ 732.727034][ T9034] usb usb2-port1: unable to enumerate USB device 09:57:27 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x0, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 732.825559][T16771] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 732.837084][ T8702] usb 3-1: Using ep0 maxpacket: 16 [ 732.961251][ T8702] usb 3-1: config 0 has an invalid interface number: 252 but max is 0 [ 732.969721][ T8702] usb 3-1: config 0 has no interface number 0 [ 732.976077][ T8702] usb 3-1: too many endpoints for config 0 interface 252 altsetting 38: 223, using maximum allowed: 30 [ 732.987550][ T8702] usb 3-1: config 0 interface 252 altsetting 38 endpoint 0xE has invalid wMaxPacketSize 0 [ 732.997920][ T8702] usb 3-1: config 0 interface 252 altsetting 38 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 733.011539][ T8702] usb 3-1: config 0 interface 252 has no altsetting 0 09:57:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xffffffef, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:27 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x612400, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mISDNtimer\x00', 0x6547c2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r4, r5, 0x0) write$cgroup_type(r5, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000200)={0x4, r5, 0x1}) write$binfmt_elf32(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b73800feff560035f4c3700cc6f3822000050000000402030006090000000020000400b3d7c52e58d1174008138e4f0000ffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a9987a4880348824a72d3690c6dc66ce1f63f74db58368801000000000000002bd540d0a1331948b9c8fc1c6bf66c51706c68a7c7b84087fc69e7c9413913494b"], 0xd8) [ 733.136665][ T9034] usb 2-1: new high-speed USB device number 122 using dummy_hcd 09:57:27 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) [ 733.358010][ T8702] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 733.367343][ T8702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.375498][ T8702] usb 3-1: Product: syz [ 733.380139][ T8702] usb 3-1: Manufacturer: syz [ 733.384886][ T8702] usb 3-1: SerialNumber: syz [ 733.396483][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 733.429685][T16789] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 733.447299][ T9034] usb 2-1: too many configurations: 145, using maximum allowed: 8 [ 733.565178][ T8702] usb 3-1: config 0 descriptor?? [ 733.607935][ T9034] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 733.610262][ T8702] kvaser_usb 3-1:0.252: Cannot get usb endpoint(s) [ 733.615839][ T9034] usb 2-1: can't read configurations, error -61 [ 733.658049][T16792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 733.810920][ T8702] usb 3-1: USB disconnect, device number 86 [ 733.899603][ T9034] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 734.156276][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 734.199796][ T9034] usb 2-1: too many configurations: 145, using maximum allowed: 8 [ 734.326736][ T9034] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 734.334514][ T9034] usb 2-1: can't read configurations, error -61 [ 734.350513][ T9034] usb usb2-port1: attempt power cycle [ 734.636882][ T27] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 734.881621][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 735.016418][ T27] usb 3-1: config 0 has an invalid interface number: 252 but max is 0 [ 735.024782][ T27] usb 3-1: config 0 has no interface number 0 [ 735.031355][ T27] usb 3-1: too many endpoints for config 0 interface 252 altsetting 38: 223, using maximum allowed: 30 [ 735.042785][ T27] usb 3-1: config 0 interface 252 altsetting 38 endpoint 0xE has invalid wMaxPacketSize 0 [ 735.053207][ T27] usb 3-1: config 0 interface 252 altsetting 38 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 735.066963][ T27] usb 3-1: config 0 interface 252 has no altsetting 0 [ 735.074338][ T9034] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 735.177113][ T9034] usb 2-1: Using ep0 maxpacket: 16 09:57:29 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:57:29 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3f000000000, 0x121801) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000140)=ANY=[@ANYBLOB="fdebe195bc68c5135914958004ef9028af"]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) unlink(&(0x7f0000000100)='./file0\x00') r2 = socket$xdp(0x2c, 0x3, 0x0) dup3(r2, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) 09:57:29 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x0, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:29 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)) dup3(r2, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000100)={0x400, {0x3, 0x0, 0xf356, 0x0, 0x6, 0xff7ffffe}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0xa6, @time}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f00000000c0)) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 735.236254][ T9034] usb 2-1: too many configurations: 145, using maximum allowed: 8 [ 735.296495][ T27] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 735.305742][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.314353][ T27] usb 3-1: Product: syz [ 735.407037][ T9034] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 735.414792][ T9034] usb 2-1: can't read configurations, error -61 [ 735.430743][ T27] usb 3-1: config 0 descriptor?? [ 735.464736][T16826] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 735.531540][ T27] usb 3-1: can't set config #0, error -71 [ 735.594574][ T27] usb 3-1: USB disconnect, device number 87 [ 735.697191][ T9034] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 735.785140][T16834] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:30 executing program 1: socket$isdn_base(0x22, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:57:30 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x0, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:30 executing program 4: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0xa43) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) 09:57:30 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x34) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r3, 0x0, 0x1) r4 = dup(r2) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0x9, 0x1, 0x80, 0x7, 0x0, 0xc3a, 0xa0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x200, 0x3ae79f26, 0x0, 0x4, 0x31e6e5a, 0x0, 0x800}, r3, 0x3, r4, 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0xfffffffc, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 736.009761][ T9034] usb 2-1: device descriptor read/8, error -71 [ 736.126320][ T27] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 736.226256][ T9034] usb 2-1: device descriptor read/8, error -71 09:57:31 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x0, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 736.346516][ T9034] usb usb2-port1: unable to enumerate USB device [ 736.361395][T16858] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:31 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)=""/127, &(0x7f0000000080)=0x7f) [ 736.403479][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 736.539318][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 736.600239][T16863] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 736.718073][ T27] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 736.727542][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.736009][ T27] usb 3-1: Product: syz [ 736.741195][ T27] usb 3-1: Manufacturer: syz [ 736.746070][ T27] usb 3-1: SerialNumber: syz [ 736.839152][ T9034] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 736.895767][ T27] usb 3-1: config 0 descriptor?? [ 736.951449][ T27] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 737.099196][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 737.163179][ T5] usb 3-1: USB disconnect, device number 88 [ 737.246873][ T9034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 737.426342][ T9034] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 737.435583][ T9034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.444102][ T9034] usb 2-1: Product: syz [ 737.448511][ T9034] usb 2-1: Manufacturer: syz [ 737.453277][ T9034] usb 2-1: SerialNumber: syz [ 737.517705][ T9034] usb 2-1: config 0 descriptor?? [ 737.561712][ T9034] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) 09:57:32 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2312110fd0b04004f820102030109021b000100000000090400000137b2f70009050e000000000000364c7d117fd5786a5718ea53e7b849742dfc67901ed9bfadd7e9c149796b6a7a21192839d5d8458da78f49f464b7147f0b40d119411c31095f41a28d2d9777e06ef322736c37279657b6f9149da8b0862f740db39b2771f36573f9a40b9882a06afb730d8599d6d0e92ffe12"], 0x0) 09:57:32 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) msgrcv(0xffffffffffffffff, &(0x7f0000000340)={0x0, ""/4096}, 0x1008, 0x3, 0x2000) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x100) 09:57:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x10, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:32 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x0, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:32 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) [ 737.762376][ T8701] usb 2-1: USB disconnect, device number 126 [ 737.901550][T16899] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 738.051754][T16910] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:33 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x0, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:33 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) poll(&(0x7f0000000000), 0x0, 0x7) connect$inet(r0, 0x0, 0x0) 09:57:33 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = inotify_init() fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x24, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:33 executing program 1: r0 = syz_io_uring_setup(0x5b47, &(0x7f0000000080)={0x0, 0xfcd7, 0x20, 0x3, 0x183}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000180)={0x0, 0x80}) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r1) [ 738.455897][ T27] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 738.496131][T16922] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:33 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x3) [ 738.686127][T16931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 738.716485][ T27] usb 3-1: Using ep0 maxpacket: 16 09:57:33 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) [ 738.848113][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 739.017426][ T27] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 739.026939][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.035079][ T27] usb 3-1: Product: syz [ 739.039922][ T27] usb 3-1: Manufacturer: syz [ 739.044935][ T27] usb 3-1: SerialNumber: syz [ 739.083974][ T27] usb 3-1: config 0 descriptor?? [ 739.127849][ T27] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 739.330728][ T27] usb 3-1: USB disconnect, device number 89 [ 740.116105][ T27] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 740.366090][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 740.486929][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 740.673688][ T27] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 740.683167][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.691612][ T27] usb 3-1: Product: syz [ 740.696286][ T27] usb 3-1: Manufacturer: syz [ 740.701139][ T27] usb 3-1: SerialNumber: syz [ 740.727060][ T27] usb 3-1: config 0 descriptor?? [ 740.767565][ T27] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 740.969495][ T9034] usb 3-1: USB disconnect, device number 90 09:57:35 executing program 2: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x80000001, 0x2000) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:57:35 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x0, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0xc0, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:35 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) rt_sigqueueinfo(0xffffffffffffffff, 0x2e, &(0x7f0000000000)={0x3e, 0x2, 0x4}) 09:57:35 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 09:57:35 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "b5a05d7572391db9", "2918c5a4a8ae36eedf1416bac10ebce4", "595bf558", "b3132850d1d862aa"}, 0x28) write$binfmt_elf32(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f00000000c0)={@empty, @broadcast}, &(0x7f0000000100)=0x8) 09:57:35 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x111b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 741.202485][T16980] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:36 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:36 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x0, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 741.374475][T16986] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:36 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvram\x00', 0x400400, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 741.615983][ T9034] usb 2-1: new high-speed USB device number 127 using dummy_hcd 09:57:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0xec0, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:36 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) dup3(r5, r6, 0x0) write$cgroup_type(r6, 0x0, 0x0) r7 = fcntl$dupfd(r3, 0xd41bd9d472b61a55, r1) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x8, 0x70bd29, 0x25dfdbf9, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc0000) dup3(r0, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52e8231a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348497fcf828bf6f2897bc99890d1eb1a594f9b25802655ca14e95d41c43345c2692d6a96aa380d214e0a944ed33de2db1da057881a4d14ea65dd23f4a04b4a1de9e98a3fba61326f47c7cb75638b453cc6371b65b7c665e561b607feb2faaf4e7fd20e7e15fd1a00870b6d1e786a589fe25fab8b994e7efd49af2bd3e68efb3216c3b5e07042e8d50634a9be91de43811cde019b82fa7a91dd763cedb0b924b2ea57927562a99a0f132c75c25cf1a823b67577be16ad5942112d74aa75eb0acc4f364ee4e9cb6dba"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="4b00000061e6be72d5a5e47dc8a5e749041d19d2159c9294ef620b7b76072baa82e94cc42fb000002887f13d8357c7ba533fe2acc8569568874b3d8c346e0b26000000000000000000001fb342c38429724fa550068e3a7d202200000000"], &(0x7f0000000200)=0x53) [ 741.755941][ T3663] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 741.886125][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 741.996148][ T3663] usb 3-1: Using ep0 maxpacket: 16 [ 742.036633][ T9034] usb 2-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 742.049097][ T9034] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 742.074088][T17018] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 742.157436][ T3663] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 742.230405][T17025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 742.248687][ T9034] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 742.258345][ T9034] usb 2-1: New USB device strings: Mfr=1, Product=62, SerialNumber=3 [ 742.266752][ T9034] usb 2-1: Product: syz [ 742.271315][ T9034] usb 2-1: Manufacturer: syz [ 742.276281][ T9034] usb 2-1: SerialNumber: syz [ 742.327440][ T3663] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 742.338680][ T3663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.340014][ T9034] usb 2-1: config 0 descriptor?? [ 742.348153][ T3663] usb 3-1: Product: syz [ 742.359609][ T3663] usb 3-1: Manufacturer: syz [ 742.365484][ T3663] usb 3-1: SerialNumber: syz [ 742.441336][ T3663] usb 3-1: config 0 descriptor?? [ 742.488780][ T3663] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 742.595153][ T5] usb 2-1: USB disconnect, device number 127 [ 742.692189][ T3663] usb 3-1: USB disconnect, device number 91 09:57:37 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r4, r5, 0x0) write$cgroup_type(r5, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r6 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:37 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) read$alg(r0, &(0x7f0000000040)=""/255, 0xff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) r4 = pidfd_getfd(r3, r0, 0x0) connect$inet(r4, 0x0, 0x0) 09:57:37 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0xec1, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 743.399569][T17055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.406448][ T9034] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 743.649525][T17063] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.675955][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 743.820163][ T9034] usb 2-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 743.832193][ T9034] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 744.009300][ T9034] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 744.019701][ T9034] usb 2-1: New USB device strings: Mfr=1, Product=62, SerialNumber=3 [ 744.029369][ T9034] usb 2-1: Product: syz [ 744.036367][ T9034] usb 2-1: Manufacturer: syz [ 744.041493][ T9034] usb 2-1: SerialNumber: syz [ 744.123229][ T9034] usb 2-1: config 0 descriptor?? 09:57:38 executing program 1: syz_usb_connect(0x0, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="12016502907fc2940356831e1099111590abba01020301090209000000000000"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000240)) write$P9_RSTAT(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="410000007d020000003a0005000100000008010000000500000000000000000020b0bd000000030000000600000000000000000000000200442d0500407b7b2b5cefa74d81f2f39dc875d24e78"], 0x41) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6b47}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x80) 09:57:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x33fe0, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 744.281318][ T3663] usb 2-1: USB disconnect, device number 2 09:57:39 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) 09:57:39 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:39 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup2(r0, r3) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f00000000c0)) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r5 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 744.489188][T17080] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:39 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) unshare(0x2a000400) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCSETAF(r2, 0x5408, 0x0) connect$inet(r0, 0x0, 0x0) [ 744.658853][T17086] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:39 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:39 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r5, r6, 0x0) sendto(r5, &(0x7f0000000180)="8d", 0x1, 0x0, 0x0, 0x0) getsockname$tipc(r5, &(0x7f0000000100), &(0x7f0000000200)=0x10) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0xc, @output={0x1000, 0x0, {0x4, 0x1f}, 0xfff, 0xb4}}) preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000380)=""/98, 0x62}, {&(0x7f0000000400)=""/135, 0x87}, {&(0x7f00000004c0)=""/80, 0x50}, {&(0x7f0000000540)=""/72, 0x48}, {&(0x7f00000005c0)=""/100, 0x64}], 0x6, 0x3ff, 0x5) r7 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)=']\xca\x00', 0x0, r3) 09:57:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x20000348, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 744.885566][ T9034] usb 2-1: new high-speed USB device number 3 using dummy_hcd 09:57:39 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000340)='AsLsA\xcdC\x1bF L\x00\x04\x00\x00\xd2\xdb\xf80\x93\xd5\x848\xd0\xe0\xf8}\x1a\xb9\v\xbe\x00\x00\x00\x00\xa4\xeb\x1d\x1d\xb3\xf9\xe1\xe7\x1b\x92\xc1\x04I\x92\xbc\x94\'\x80\xb77=\xab\x18\xd6\xdd1\xae_}\x19\"\x95T\x88\xce\xa7hUBU4N\xdb\xc1@\xb35m;\xc9K-O\x8a|\xd7\xabY\xddwR\xe1\xb2\xcb`\v\x98e\x02Ud\x99\x8b\x90(8\n\xaeF\xe9\xf6\xbc\xfa\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KH\xa0\xae\xe3|\xf4A\x17o\xa7\xd7\\\xe3\x9b\x0ed\x1eA\xe5\xf6\xb0\x1a*\xa0\xc8\xb1\x9c\x9fq\xb8\xcdj\xced\xfd\x83\f\xd5z\xc89\xe4FR<\r\x94\xbe\x06\xfb\xcd\xb7\x14\xb0\x9a\xe6[\x16\xfd\xbdeQ&g1\xef\xdf\x8eO\x9a\x9e\x1a\xf8\xa0G\x99\xd4\xe6\x0f\x16\xa3\xe3\xca.\xd2\xdf\xd9\xd4\xdb\x89\xf4:9\x8e9\xa9?\x1a\xa1\t\xa2g\xc4\xf9\x9e\x81\xe0IHG\xb9P\xa4\xec\xd2\xe0\xb5\x1b\x83\xc7\fs\xf4\x068}5\x84>\xa5\xe7S\xe2\xe9T\xd2vb\x99@W\xf48\xac,\x03P\xb6\xb7\x12\xbd\xe5\x91\xad[\xe8\xc1\xa9J\xccnC/\"\x8e\xecb\xb8\xb9`\x01\x96\x17\xbc6\x12`\xbd\f\x88\x85\x0f\x8b\xe0\x8e\xaaz1\xcc\xbb\x9f\xb3!\x19\x93\xf9u0\a\xbc\xb2B\xb1\x8c\x92V\xbc\xe6\xfcl.\x1e\xa2bq\x8a\r:v\xc1u\x1a\xa0\x98\xa9\xbb\x18\xda\xeciKC\xf3\x1c;w\xa4m\xc4\xb2;R\x8a1\xe1R\xedE\x17nT\x9d\xb1\'\xb2\xa1a\xc8i\x9b\xc3\xf7?oW\xdd\xce\x11E*|\xe20\x0e4\xe4fE\x1d\xc1\x0fZ\xb9\"`q98!\xd3/\xcb\xe7t\xc40\xb9\x7f\x95qF\xe3Y0\xd0\xed\x84\a]j\x1c\xf7\xb8\n5L\x81\xed\x9f\x86\'', 0x7) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 745.123757][T17105] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:39 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84800) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x6}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xffffef21, 0x9, 0x80000001, 0xffffffff, 0x10001, 0x100, 0xfffffffb, 0x6], 0x8, 0x800, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x9, [0xffff, 0x9, 0x5, 0x9, 0x9, 0x0, 0x4, 0x9, 0x8001]}, &(0x7f00000000c0)=0x16) [ 745.175757][ T9034] usb 2-1: device descriptor read/64, error 18 09:57:40 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 745.292222][T17113] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 745.595519][ T9034] usb 2-1: device descriptor read/64, error 18 [ 745.866165][ T9034] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 746.198695][ T9034] usb 2-1: device descriptor read/64, error 18 [ 746.615405][ T9034] usb 2-1: device descriptor read/64, error 18 [ 746.741491][ T9034] usb usb2-port1: attempt power cycle [ 747.476078][ T9034] usb 2-1: new high-speed USB device number 5 using dummy_hcd 09:57:42 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2312110fd0b04004f820102030109b1f5a2716f4134ad1189021b00010000000009045a95a5389a00000137b2f7"], 0x0) 09:57:42 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b903000600000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da488034800000000"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x7ffff000, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:42 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000200030a1f0300080c1008000800060012000000140000001a00ffffba16a0aa1c09000000000000", 0x38}], 0x1}, 0x0) connect$inet(r0, 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) 09:57:42 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 747.746171][ T9034] usb 2-1: device descriptor read/8, error -71 [ 747.883338][T17136] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 747.960364][ T9034] usb 2-1: device descriptor read/8, error -71 09:57:42 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:42 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x17) connect$inet(r0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)={{0x1000, 0x3000, 0xe, 0x2, 0xff, 0x6, 0x7, 0x2, 0x20, 0x8, 0x3f}, {0x1000, 0x100000, 0xd, 0x4, 0x80, 0x7f, 0x1, 0x3, 0x5, 0x66, 0x3f}, {0x2, 0x0, 0xa, 0x3, 0x5, 0x20, 0xf3, 0xfe, 0x40, 0x7, 0x6}, {0x100000, 0x10000, 0x8, 0x1, 0x0, 0x0, 0x7f, 0x1, 0x1, 0x6, 0x1, 0x2}, {0x5000, 0x5000, 0xc, 0x5, 0x80, 0x78, 0x2, 0x3, 0x3f, 0x1f, 0x0, 0x7}, {0x0, 0x3000, 0xf, 0x89, 0x9, 0xb7, 0xc7, 0x8, 0x3, 0x5, 0x3, 0x2}, {0xd000, 0xf000, 0x8, 0x8, 0x3f, 0xa2, 0x7, 0x9, 0xe9, 0x1, 0x7, 0x40}, {0xf000, 0x1, 0xa, 0x5, 0x5, 0xfc, 0x8, 0x8, 0x7, 0x6, 0x0, 0x5}, {0x2000, 0xfffe}, {0x2, 0x3f}, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x801, 0x1, [0x8, 0xf7c, 0x3ff, 0x8001]}) 09:57:42 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4e2700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395e7d7088d7c27f000000a90100010000a85ca657849a992da488034886b9b2e5092cda645872f8346b22354bf86dd2853891e708000000f2f4a1bda1bbfc728f55ec4b19e30e6f33181f444913eaaef798d9dc799e147c74a103e9183d93a50accdca2c1090000000119b35a5ecc5b35d41a0c5485ffe6687a61332d702da894888c624d5f7ca3fcb390f0e5ee64f188c35b876ac4051b63168ec3732b3119f3627cccf5c3f561d85cf18515b6b579927e981322fe0e29051c045592beb3590206f0ded8c2a4b9291d403d42c54babe7ddc0efb68f98b08c0a06fce8922332fb8490730573bafa640ad3bb875dc62295358275"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 748.110569][T17149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0xfffffdef, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:43 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 748.455206][ T9034] usb 2-1: new high-speed USB device number 6 using dummy_hcd 09:57:43 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') fchmod(r1, 0x108) connect$inet(r0, 0x0, 0x0) [ 748.555454][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 748.601632][T17161] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:43 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="edfb823fd6a28f8718b7b8bad7e07b547c09c29dbfceb63a3ce95b8382dea7f0805c68424f547bd8c4a231cddf990685e1dc368ee564c51252dc3f16a37c8d6ab14058e09c84fe2840a06533e111bd", 0x4f}, {&(0x7f0000000340)="46d085e60862664772bafd2104b37ca271321eb4cc45d63110c2c64f4a3e763f8f64a5087f7f72786e6ed99314b0cf5810abfa11a589651d9e42037d3761ec662805d6ccc040ef071a3513491c7ad414151da40b4092d84af9d38bf06c9420b02633abf6b2af0e056c115c79b96ab96f9a19127ae871eb9dd222745186444ae49ce558dda037b23ad461b08999a3f19f776590aa9543e69e552ab8053f104f028eac29170a5cb6100ddbd8b80f1d7a03f926e4881143568b28f6c944df4e3d8d81a985a6c62078333b033b52ba70db1a027f3948e0a37d3d51dc25fb89bc95df948e8cf1d6a65e7d5417d70b746ade54d56a", 0xf2}], 0x2, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x78, 0x117, 0x2, 0x64, "8e2038024ad43d419fe43d12f488cd5cd7f4af627ae8a52a527651f66a52d6fe7d51901ee5d3229de4836ad71b8fa3f20cd2fb818c66bebbdade3ed3a443f4a06935cf3f79265b45d2f992c632ca90e085c0680a25b967bda52f53f8a2f86ed1863ed930"}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}], 0xc0, 0x800}, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822080050000000402030006000000000020000400b3d7002ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 748.729808][ T9034] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 748.737924][ T9034] usb 2-1: can't read configurations, error -61 [ 748.807773][ T9034] usb usb2-port1: unable to enumerate USB device [ 748.891973][T17167] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:45 executing program 1: syz_usb_connect(0x1, 0x1b, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xef, 0xda, 0xf2, 0x10, 0x403, 0xdafe, 0x2d77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x8000, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) 09:57:45 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000100)={'nat\x00', 0x0, 0x3, 0xa0, [], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=""/160}, &(0x7f0000000180)=0x78) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, 0x0, 0x0) 09:57:45 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x10, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:45 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:45 executing program 2: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000002840)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000002880)={r1, 0x3}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={r1, &(0x7f0000000300)=""/72}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f0000001140)="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", &(0x7f0000000200)=""/192, &(0x7f0000000100)="fba505847e76f70fd4840d3ff2bf2ce96498ad69775c60", &(0x7f00000003c0)="4a980954c28b1050501bb65c92bca028e23322da62a4d136a2e28780a84bc66fbb82d2b92fad184cbbf47e5ed650b93feda4829d06c80c128cede0763ebece87ddb76ab31b9cc3842aaa96ecf1336cbefc89f7a954d18118283c1329c18f24cb67ea9b808318a4600065ee3f89e2439a31a3c2e7b6cec2f1cc1a47c8a9c91fb1c161cef837aab50a452e9d1ca47d723853d4418d8da02143d617b21459347cca20f4394a896531f69a5d47eaa54427d4a1a10486775643793586f5f06ba53fcf5db41aa76ad88af598b38e8dd60e2d3dab5e4426a6d0704b122a7b5948b23ec24cec0358f7ee97cb0d419c1b91fd517e4387ca9a5f", 0x0, r4, 0x4}, 0x38) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f00000000c0)=0x2) keyctl$get_persistent(0x7, r6, 0x0) write$FUSE_ATTR(r2, &(0x7f0000000180)={0x78, 0x0, 0x0, {0x5de2, 0x2, 0x0, {0x6, 0x2, 0xfffffffffffffffa, 0x40, 0x200, 0x388f, 0x800, 0xfffffffa, 0x100, 0x1000, 0xf7dc, r6, 0xee00, 0x4, 0x4}}}, 0x78) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={r1, 0x1}) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000140)=0x3f) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000500)) [ 751.182004][T17194] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 751.229680][T17200] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:46 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)={0x1}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)=0x2) 09:57:46 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 751.388302][T17211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 751.409856][ T3663] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 751.420742][T17200] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:46 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x3ff) r2 = socket(0x21, 0x4, 0x8) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000100)={0x9, &(0x7f0000000180)=[{@none}, {@fixed}, {@fixed}, {@none}, {@fixed}, {}, {@fixed}, {@fixed}, {@none}]}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738c3700cc6f3822000050000000402030006000000000020000400b3d7c52e51aabf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348248485735ec5a84388a080780739900cc1c923eda20ef6c4fc214d29b00c4f2dff78a6e4cecc2a3c814532a1e77ab6070f1cee40d4325992a4a55c3479aea6b1dba03599cde1fa53606a6eb3e33478a36c648ba7ae6a1eb40e11"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 751.572597][ T9034] usb 2-1: new low-speed USB device number 7 using dummy_hcd 09:57:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x65, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 751.695121][ T3663] usb 3-1: device descriptor read/64, error 18 09:57:46 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 751.815150][ T9034] usb 2-1: Invalid ep0 maxpacket: 16 [ 751.902838][T17223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 751.975056][ T9034] usb 2-1: new low-speed USB device number 8 using dummy_hcd 09:57:46 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x10001, @empty, 0x5}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x71, &(0x7f0000000140)={r6}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000100)={r6, @in6={{0xa, 0x4e20, 0x53, @empty, 0x9}}}, 0x84) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000080)=""/106, 0xfffffffffffffffe) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'\x00', {0x2a, 0x0, 0x3fff}}) [ 752.050852][T17230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 752.178712][ T3663] usb 3-1: device descriptor read/64, error 18 [ 752.214996][ T9034] usb 2-1: Invalid ep0 maxpacket: 16 [ 752.221056][ T9034] usb usb2-port1: attempt power cycle [ 752.487090][ T3663] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 752.785816][ T3663] usb 3-1: device descriptor read/64, error 18 [ 752.955195][ T9034] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 753.047828][ T9034] usb 2-1: Invalid ep0 maxpacket: 16 [ 753.194954][ T9034] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 753.241946][ T3663] usb 3-1: device descriptor read/64, error 18 [ 753.285886][ T9034] usb 2-1: Invalid ep0 maxpacket: 16 [ 753.291764][ T9034] usb usb2-port1: unable to enumerate USB device [ 753.365041][ T3663] usb usb3-port1: attempt power cycle [ 754.074889][ T3663] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 754.189132][ T3663] usb 3-1: device descriptor read/8, error -71 09:57:48 executing program 1: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000140)=0x1f, 0x4) syz_usb_connect(0x6, 0x11c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf1, 0x71, 0x49, 0x10, 0xbfd, 0x22, 0x25b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x63, 0x0, 0x1, 0xd1, 0xdb, 0x1a, 0x0, [], [{{0x9, 0x5, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xe8, 0x56b76c542da752bc, "38f7b68f96beb403aedb5ba266a845ab92f5a783f3cfe21fa0c11c9384daec1bd540ee9879ef13a0db43f2d4bc6d40083089e2d7b5a74e50940af0c95eea64fe1b53855d84a665b7764ed74d9824ed842f337e0f7d43571d00013ecc027b7d9726aca9da41c770215c9ae14acdb99e5031953779c876de447936b6e7cfd31106d113f1dfcd60c4994519feb82b332aa79a18235c0ea1e3fa4066c545794f36a8b5c10fee5ffc8f49c421226432c40431db057eddf8fec3a7d56ec5a0f27f91ae912dc9fc7c3ab58dd96a57c70afb38e95e5c46594e259cd4cbcb97d9b5a07e3aad46be71ff67"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}]}}]}}]}}]}}, 0x0) 09:57:48 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b903000600000000000000b738000000570035f4c3f00cc6f382200005000000040203af060000faffff1f000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffff233c0a7d7d752cffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da488034800"], 0xd8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) read$qrtrtun(0xffffffffffffffff, &(0x7f00000001c0)=""/31, 0x1f) write$cgroup_type(r4, 0x0, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x400200) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000180)={0x6000, &(0x7f00000000c0), 0x1eb0de37f43a8940, r5, 0x7}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x66, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:48 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:48 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f00000001c0), 0x3d}], 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x48001, 0x0) clock_gettime(0x0, &(0x7f0000000140)) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r6}, 0x8) ppoll(&(0x7f0000000180)=[{r5, 0x9240}, {r1, 0x2000}, {r8}, {r4, 0x51}, {r7, 0x12000}, {r4, 0x601}, {r7, 0x8000}], 0x7, &(0x7f00000000c0), &(0x7f0000000100)={[0x43]}, 0x8) keyctl$negate(0xd, 0x0, 0x9, 0xfffffffffffffffb) connect$inet(r0, 0x0, 0x0) 09:57:48 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8d, 0x45, 0xa2, 0x10, 0x50d, 0x825b, 0xa561, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0xe7, [{{0x9, 0x4, 0x6f, 0x0, 0x1, 0x83, 0xc6, 0xb, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x80) [ 754.404894][ T3663] usb 3-1: device descriptor read/8, error -71 [ 754.437347][T17252] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.571566][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:49 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:49 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000000c0)) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x73, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:49 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8b7, 0x10800) execveat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) [ 754.895738][ T3663] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 754.987703][ T3663] usb 3-1: Using ep0 maxpacket: 16 09:57:49 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) [ 755.063459][T17279] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:49 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 755.145827][ T3663] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 755.154284][ T3663] usb 3-1: config 0 has no interface number 0 [ 755.160874][ T3663] usb 3-1: config 0 interface 111 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:57:50 executing program 1: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x800) syz_usb_connect(0x4, 0xfffffffffffffd64, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d09a71087b07b408504f0102030119021b0001000000000904e00001c3953d0009050e000000020000"], 0x0) r0 = semget$private(0x0, 0x2, 0x241) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0x9, 0x800}], 0x1, &(0x7f00000001c0)={r1, r2+60000000}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000280)={{{@in=@empty, @in=@rand_addr=0x64010100, 0x4e21, 0x7, 0x4e24, 0x2, 0xa, 0x80, 0xa0, 0x8, r4, 0xffffffffffffffff}, {0x8001, 0x10000, 0x10001, 0xf4d, 0x9, 0xfffffffffffffffd, 0x6, 0x1ff}, {0x512d4be4, 0x200, 0x5, 0x41318941}, 0x7, 0x6e6bbf, 0x0, 0x1, 0x1, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x2b}, 0x2, @in=@loopback, 0x0, 0x3, 0x3, 0x9, 0x8000, 0x7, 0x9}}, 0xe8) [ 755.300247][T17287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 755.366729][ T3663] usb 3-1: New USB device found, idVendor=050d, idProduct=825b, bcdDevice=a5.61 [ 755.376084][ T3663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.384242][ T3663] usb 3-1: Product: syz [ 755.388762][ T3663] usb 3-1: Manufacturer: syz [ 755.393516][ T3663] usb 3-1: SerialNumber: syz [ 755.596488][ T3663] usb 3-1: config 0 descriptor?? 09:57:50 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) write$hidraw(r2, &(0x7f00000000c0)="f5f1b535d1bdceb76f0bfdf852bfdd52f687599eeb0b168722877e7c67cae0f92bbf9d826e55e8f95c7f81553d891e413dfc38c22c39023d2a699314d30003c7b1f09e7d3fb51d2b47c4cd5394f9ec2d3da2287bd9c6372a2bfcd6ce016163d872e40b82d3ce88dd3d1b14a8787bb472bc8a98567e98f4cc0a5856a1888e17aaba478972eb01cfda11b53afaf94b36c92939d25abb168484141662c75db4284e", 0xa0) mq_getsetattr(r2, &(0x7f0000000040)={0x4, 0x244, 0x43, 0x2}, &(0x7f0000000080)) connect$inet(r0, 0x0, 0x0) 09:57:50 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:50 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 755.784931][ T3663] usb 3-1: reset high-speed USB device number 95 using dummy_hcd [ 755.983249][T17309] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 756.072798][T17321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 756.785509][ T3663] usb 3-1: device descriptor read/64, error -71 [ 757.155411][ T3663] usb 3-1: Using ep0 maxpacket: 16 [ 757.417057][ T3663] ieee80211 phy7: rt2x00usb_vendor_request: Error - Vendor Request 0x07 failed for offset 0x1000 with error -32 [ 757.429658][ T3663] ieee80211 phy7: rt2800_probe_rt: Error - Invalid RT chipset 0x0000, rev 0000 detected [ 757.440194][ T3663] ieee80211 phy7: rt2x00lib_probe_dev: Error - Failed to allocate device 09:57:52 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:52 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r5, r6, 0x0) write$cgroup_type(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000), r2}}, 0x20) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000280)=@req3={0x9, 0x5, 0x5, 0xffff8000, 0x1, 0x286, 0x100}, 0x1c) connect$inet(r0, 0x0, 0x0) 09:57:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:52 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x808080}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x34, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x804) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x80) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb00004c7e0000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348cb"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:52 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010027f95b20a6d171209100e2312110fd0b04004f820102030109021b080000000000090400000137b2f70009050e000000000000dd9b7c7f62cbc9eb187577624b7889b86e483da17f75d5266afce1878d7f6ae4c4ae8c69ca38fee041fdd50a8a11ec28efb2449fd996837a"], 0x0) 09:57:52 executing program 1: syz_usb_connect(0x3, 0x17c, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) [ 757.622099][ T3663] usb 3-1: USB disconnect, device number 95 [ 757.738545][T17347] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:52 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 757.992709][T17361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:52 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84010}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/vlan/config\x00') connect$inet(r2, 0x0, 0xffffffda) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000280)={0x0, @aes128}) write$cgroup_type(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10, 0x80800) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x71, &(0x7f0000000140)={r7}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r7, 0x5}, 0x8) 09:57:52 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x2000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000200)) pipe(&(0x7f00000000c0)) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) [ 758.064706][ T8705] usb 2-1: new high-speed USB device number 11 using dummy_hcd 09:57:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x3, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:52 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x5c, 0x4, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}}, 0x44) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x200000, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f00000009c0)={&(0x7f0000000400), 0xc, &(0x7f0000000980)={&(0x7f0000000440)={0x524, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xdc, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeee0e22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4694b0b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50b34b8d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55863337}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdf72bba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11f2e0ca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14f02a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ddb8e55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74c85e5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64875f6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe10e814}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16646d06}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa5f3a7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13b9cbb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c1237c0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbece}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6fc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb8e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x171f2a6e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x428d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42f7}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc67c8db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42ec599d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d1a366a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a371adc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ef5953e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2dd7}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47667498}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b4a8acb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa989}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19649c14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a3f1a7c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x395311c2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad03}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x588c1d77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a37549f}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa908}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3763aee7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ac93a0f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc360}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d55}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdf1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x891}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7a6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x140, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21df15cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79811e5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75e945a5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69848e73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d595406}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a819502}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x777617bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fbf62a1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x418b53da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x93831f5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71ff36da}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6150ecd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14c586ac}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x722cecee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f5610e2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x12c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfaf1f6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33be1d87}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b18f2d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e3a3ab2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20a5883e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57305301}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ac3b69a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5846b362}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5189a573}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a387f32}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4990e396}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x225a2d97}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5076b196}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6287391f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x144718d0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25104fb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x524}, 0x1, 0x0, 0x0, 0x10}, 0x41) r4 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 758.255248][T15518] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 758.310866][ T8705] usb 2-1: Using ep0 maxpacket: 16 09:57:53 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 758.446896][ T8705] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 758.455436][ T8705] usb 2-1: config 0 has an invalid descriptor of length 228, skipping remainder of the config [ 758.466185][ T8705] usb 2-1: config 0 has no interface number 0 [ 758.472536][ T8705] usb 2-1: config 0 interface 15 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 758.522265][T17383] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 758.575643][T15518] usb 3-1: device descriptor read/64, error 18 09:57:53 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) alarm(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0xa, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000340)='[\x00\x04\x00\xd4\x00\xda\xc6L\xafs,\x9a\x18\xf8:\x0ek\xa4\xc8\xb4\x10&\n\xd2\xf15\x9f@\x1c\xd7\xe4\xe6\xcd\xe9\f\xdeX\xcf\xc3.\x99B\b\x01H\xf5\xd3i\xbe\x16u\x14j\f)\xafY\xe3\x14Dt\x7f\xfe\xff\xdf\xeb\x8c:\x16<\xed\x13\x16z\x1a\x1b{\xa0b0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r5, r6, 0x0) write$cgroup_type(r6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x6e, 0x4, 0x8, 0x9, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000400)={r7, 0x0, 0x7, 0x400, 0x0, 0xff, 0x8000, 0x3, {r8, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x1ff, 0x5, 0x7f, 0x7, 0x928b}}, &(0x7f00000004c0)=0xb0) write$binfmt_elf32(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 758.722805][T17388] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 758.759424][ T8705] usb 2-1: New USB device found, idVendor=0471, idProduct=2126, bcdDevice=37.54 [ 758.768852][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.777571][ T8705] usb 2-1: Product: syz [ 758.781977][ T8705] usb 2-1: Manufacturer: syz [ 758.787004][ T8705] usb 2-1: SerialNumber: syz [ 758.811386][ T8705] usb 2-1: config 0 descriptor?? [ 758.995803][T15518] usb 3-1: device descriptor read/64, error 18 [ 759.014519][ T8705] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 759.274906][T15518] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 759.555092][T15518] usb 3-1: device descriptor read/64, error 18 [ 759.984615][T15518] usb 3-1: device descriptor read/64, error 18 [ 760.014867][ T8705] usb 2-1: device descriptor read/64, error -71 [ 760.107581][T15518] usb usb3-port1: attempt power cycle [ 760.384465][ T8705] usb 2-1: Using ep0 maxpacket: 16 [ 760.674692][ T8705] ieee80211 phy8: rt2x00usb_vendor_request: Error - Vendor Request 0x07 failed for offset 0x1000 with error -71 [ 760.686879][ T8705] ieee80211 phy8: rt2800_probe_rt: Error - Invalid RT chipset 0x0000, rev 0000 detected [ 760.697047][ T8705] ieee80211 phy8: rt2x00lib_probe_dev: Error - Failed to allocate device [ 760.752857][ T8705] usb 2-1: USB disconnect, device number 11 [ 760.854404][T15518] usb 3-1: new high-speed USB device number 98 using dummy_hcd 09:57:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:55 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:55 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x7, 0x10800) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:57:55 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000000)={0x2}) connect$inet(r0, 0x0, 0x0) 09:57:55 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) r1 = add_key$fscrypt_provisioning(&(0x7f0000000280)='fscrypt-provisioning\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)={0x0, 0x0, "49310f429ad51fba16f158a9fbd7f601d1add43e8c63ac759ea9ce4d8107dae0205e2507fc4209897b80873cd4c64122c3750f0ed74125b6ff0952745dd16766689cd0c0ccdab8eb461845caac455d8878537e11749520906003628924a29f94394275251011238719173e22c04ed30fb0028b1d52cadb64ad46ae1ddd5c3084f9f395eb2d17eda42db8bb4b7c543e9574bd8a9f3b816358bf69880bbb44ebe75859f1ef2b2f61ccf3e109b351e99cd3bc45eb1556afcca0f6e9a67f"}, 0xc4, 0xfffffffffffffff8) keyctl$revoke(0x3, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDDISABIO(r3, 0x4b37) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8000, 0x60500) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x1, 'bond0\x00', {}, 0x7}) dup3(r0, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r5, r6, 0x0) write$cgroup_type(r6, 0x0, 0x0) preadv(r6, &(0x7f0000000680)=[{&(0x7f0000000100)=""/129, 0x81}, {&(0x7f00000001c0)=""/164, 0xa4}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000380)=""/145, 0x91}, {&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000500)=""/171, 0xab}, {&(0x7f00000005c0)=""/187, 0xbb}], 0x7, 0x90, 0x1) 09:57:55 executing program 1: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000000c0)="c9253d99a681f661b54d280ba8557f8c05f16a52d9d6c50e3083af171f77508870d2e639769a5a0c46ababe08bed032c93820937a9e8da2e7c2760cd2aa0131cafe9f6aefbc75f427e1df4a673e8c828b663f77e9de576f74c8f5fdcb5cd65c804155fcf2a91118bf6f239db77da55957bbb479cc8362936949225066c3c190f4df80d02e222b1e9eaf9768f0829c9103626d87e2d8c9b071ce27b9f97d3cc09f6a3fbe9f2bcf0e01f97df61752ea54a0dc7b9584d434838a383725dbfecfbe46c", 0xc1}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x100, 0x9, 0x7], 0x3, 0x800, 0x0, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="2b0f00000000000000001100000007007f26dc7dbac8451a619a0e1e65ada921c446ad1afbe9f79c4f56d32d3d25d3e8a0d01efbd8f5b5968619d2336441eae632f315fed7fb6a4dae95ea221ecd1b8b1d03a4153812cc67313aefe63e3fe839c4340945836614c88255bedd2276ce844b642fc4bdad909d0f31566b2be14dde12954119c1503dc219942967"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x64, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) fremovexattr(r4, &(0x7f0000000440)=@random={'btrfs.', 'nl80211\x00'}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000080)={r0}) [ 760.994774][T15518] usb 3-1: device descriptor read/8, error -71 [ 761.061309][T17425] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 761.209340][T15518] usb 3-1: device descriptor read/8, error -71 [ 761.237669][T17437] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:56 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:56 executing program 3: clone(0xc10a2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x0, 0x104, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @capture={0x1000, 0x0, {0x9, 0x80000001}, 0x5, 0x4}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x241, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x1) fcntl$setown(r3, 0x8, 0x0) r5 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6374a01acbb8962800402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 761.384778][ T8705] usb 2-1: new high-speed USB device number 12 using dummy_hcd 09:57:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x5, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:56 executing program 4: ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc080) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r4, r5, 0x0) write$cgroup_type(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r8, 0x8008f512, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="395bccf7057dd9fdbd02c9f793383c24342c392eaf81831e132ab0bc3a4c7ffccbd35abcf07df9c670152caf7c02f1f1a512f936bdffcd212dd8bacdaefde614f53d33491298e0038c933d17d6ecb256de185a539662835ab09cb3ace43397af05c1b289eb82f721d6940a629edbe8b33ea8eaa4bdd939e7eb011c3430bd858c38f6a7ff58c2be952e933d721c", @ANYRES16=r9, @ANYBLOB="02002abd7000fddbdf2507000000080008007f00000106000b001e00000006000b0001000000"], 0x2c}}, 0x800) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) connect$inet(r0, 0x0, 0x0) [ 761.571862][T17447] IPVS: ftp: loaded support on port[0] = 21 [ 761.644678][ T8705] usb 2-1: Using ep0 maxpacket: 16 [ 761.729455][T15518] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 761.776514][ T8705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 761.844733][T15518] usb 3-1: Using ep0 maxpacket: 16 09:57:56 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 761.889366][ T933] tipc: TX() has been purged, node left! 09:57:56 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000040)) connect$inet(r0, 0x0, 0x0) [ 761.965856][ T8705] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 761.975267][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.983405][ T8705] usb 2-1: Product: syz [ 761.989414][ T8705] usb 2-1: Manufacturer: syz [ 761.994243][ T8705] usb 2-1: SerialNumber: syz [ 762.000184][T15518] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 762.069143][T17478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 762.187564][ T8705] usb 2-1: config 0 descriptor?? [ 762.217620][T15518] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 762.226926][T15518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.235175][T15518] usb 3-1: Product: syz [ 762.239492][T15518] usb 3-1: Manufacturer: syz [ 762.244313][T15518] usb 3-1: SerialNumber: syz [ 762.260302][T17480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 762.263000][ T8705] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 762.359336][T17447] IPVS: ftp: loaded support on port[0] = 21 [ 762.414478][T15518] usb 3-1: config 0 descriptor?? [ 762.464177][T15518] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) 09:57:57 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x1, 0x5, 0x9}) connect$inet(r0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4080, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r5, r6, 0x0) write$cgroup_type(r6, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(r7, 0x4018ae51, &(0x7f00000000c0)={0x2, 0x1, 0x5}) 09:57:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x6, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 762.793083][T15518] usb 3-1: USB disconnect, device number 99 09:57:57 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 763.023244][T17528] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:58 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r2, &(0x7f0000000200)=[{0x2, 0xfe00}], 0x1, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(r2, &(0x7f0000000140)=[{0x2, 0x6, 0x1000}], 0x1) semop(r2, &(0x7f00000000c0)=[{0x2, 0x1000, 0x1000}, {0x2, 0x0, 0x800}, {0x1, 0x7, 0x800}, {0x3, 0x1, 0x800}], 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 763.376052][T17538] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 763.594176][ T9034] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 763.845040][ T9034] usb 3-1: Using ep0 maxpacket: 16 [ 763.968766][ T9034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 764.095978][ T8702] usb 2-1: USB disconnect, device number 12 [ 764.150827][ T9034] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 764.161430][ T9034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.169820][ T9034] usb 3-1: Product: syz [ 764.174264][ T9034] usb 3-1: Manufacturer: syz [ 764.178997][ T9034] usb 3-1: SerialNumber: syz [ 764.259240][ T9034] usb 3-1: config 0 descriptor?? 09:57:59 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120109021b000100000000090400000137b2f708000000000000000000"], 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x6, 0x5}) 09:57:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0fbba429b00fae42c1c14308ec2f01a2664f060f03de6766c7442400f14700006766c7202402373f00006766c744242d000010009d9d0f011c24baf80c66b844be018c66efbafc0ced0fc732", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x61, 0x4280) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000002340)={&(0x7f00000001c0), 0xc, &(0x7f0000002300)={&(0x7f0000000200)={0x48, 0x0, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x24000001) getsockopt$inet_int(r5, 0x0, 0x22, &(0x7f0000000140), &(0x7f0000000180)=0x4) connect$inet(r4, 0x0, 0x0) 09:57:59 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x24, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10005) 09:57:59 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x8, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:57:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@delchain={0x2c, 0x65, 0x220, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0xb}, {0xe, 0xfff2}, {0x9, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="ff00e21d4bf2ff", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007800000008000100", @ANYRES32=0x0, @ANYBLOB="b00002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400001000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b000028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400f79e000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=r4, @ANYRESDEC, @ANYRES32=r9, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400670000000800070000000000"], 0x3e4}, 0x1, 0x0, 0x0, 0x4004140}, 0x4048000) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) [ 764.366749][ T9034] usb 3-1: can't set config #0, error -71 [ 764.429536][ T9034] usb 3-1: USB disconnect, device number 100 [ 764.520521][T17563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 764.586449][T17572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 764.633520][T17562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 09:57:59 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:57:59 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000280)=0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8080a1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x801, 0x0, 0x0, {0xc, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r5, r6, 0x0) write$cgroup_type(r6, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f00000002c0)={0x0, 0x5, 0x1ff}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/108}) [ 764.883984][T17573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:57:59 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x71, &(0x7f0000000140)={r5}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r5, 0xffffffff}, &(0x7f0000000100)=0x8) r6 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 764.958871][ T933] tipc: TX() has been purged, node left! [ 765.024205][ T9745] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 765.064385][ T8702] usb 3-1: new high-speed USB device number 101 using dummy_hcd 09:57:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x9, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 765.304092][ T9745] usb 2-1: Using ep0 maxpacket: 16 09:58:00 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:00 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000000)={{0x2, 0xffffffff, 0x9, 0x0, 0x400, 0x400}, 0x15, [0x7fffffff, 0xfffffe00, 0x10000, 0x8, 0x20, 0x6, 0x4, 0x7, 0xfffffff9, 0x77, 0x0, 0x101, 0x7, 0x80000000, 0x9a07d1eb, 0x9, 0x6, 0xfffffffa, 0x3, 0x8001, 0x81, 0x10001, 0x1, 0x3, 0x7, 0x8, 0x80, 0x4, 0x5, 0xd15, 0x5, 0x8, 0x3, 0x0, 0x2, 0x6800000, 0x4, 0x897, 0x80, 0x2, 0x7, 0x1, 0xcebd, 0x5, 0x9c8e, 0xffffffff, 0x1, 0x8, 0x1, 0x81, 0x2, 0x5, 0x2053, 0x7, 0x1, 0x0, 0x3, 0x71, 0x1000, 0x8, 0x59, 0x3, 0x3, 0x2, 0x1, 0x7ff, 0x3f, 0x3f, 0x7fffffff, 0x0, 0x10000, 0x0, 0x80, 0x2, 0xc30, 0x8001, 0x2, 0x7f, 0x22, 0x5679fabb, 0x6, 0xffffffe3, 0x1, 0x9, 0x1, 0x7, 0x4, 0x200, 0x10000, 0x6, 0x80000000, 0x5, 0x6e8, 0x1ff, 0x1000, 0x8, 0x2, 0x3, 0x6, 0x2, 0x9, 0x7fffffff, 0x100, 0x7ff, 0xfff, 0x80000000, 0x8, 0xfffffff8, 0x5, 0x3f, 0x7, 0x8, 0x1, 0xfffffffe, 0x81, 0x56, 0x0, 0x800, 0x5, 0xffffffff, 0xfffff72d, 0xffff, 0x6, 0x9, 0x0, 0x5, 0xfffffece, 0xbc8, 0x1ff, 0x9, 0x6, 0x80000000, 0x1, 0x2, 0x3ff, 0x6, 0x7, 0x88, 0x6, 0x1, 0xff, 0x4, 0x0, 0x400, 0x20, 0x10001, 0x81, 0x5, 0x100, 0x8, 0x2, 0x1f, 0x6, 0x3f, 0x8, 0xffffffff, 0x0, 0xc9, 0x8, 0x3f, 0xfff, 0x3c, 0x4, 0x8, 0x80, 0x2743, 0xd5f5, 0xfffffffd, 0x4, 0x80000001, 0x0, 0x3, 0x20, 0x6, 0xffffffff, 0x0, 0x0, 0x3c4, 0x1, 0x43d07b2a, 0x8a9b, 0x0, 0xa79, 0x48, 0x7f, 0x4, 0x6, 0x3f, 0x1, 0x4, 0x0, 0x0, 0x0, 0x8, 0x3, 0x8001, 0x55, 0x40, 0x0, 0x6, 0x7, 0xe3be, 0x3ff, 0x4, 0x5, 0x4, 0xffff, 0x1000, 0x1, 0x6, 0x180bd3e9, 0xd413, 0x2, 0x2, 0x6, 0x9, 0x7, 0xd32f, 0xfffffff8, 0xf0000000, 0x4, 0x20, 0x0, 0x3, 0x5, 0x20, 0xfffffffd, 0x0, 0x1541, 0x1ff, 0x6, 0x1, 0x7, 0x9d, 0x80, 0x0, 0x4a, 0x100, 0xe9, 0x81, 0x63f, 0xffff7fff, 0x3, 0x3ff, 0x2, 0x0, 0x10000, 0x1000, 0x3, 0x7fff, 0x400, 0x2, 0x3, 0x1, 0x100, 0x90, 0x4, 0x7, 0x4, 0xca, 0x200, 0x1ff, 0x6, 0x800, 0x20, 0x80, 0x9e, 0x40, 0x8, 0x3, 0x6, 0x3, 0x4, 0x7, 0x10001, 0x9, 0x8, 0x8, 0x1ff, 0x80, 0x101, 0x5, 0x2, 0x7ff, 0x200, 0x2, 0x2, 0x8, 0xff, 0x2, 0x8, 0x5, 0x2, 0x0, 0x1, 0x2, 0x101, 0x800, 0x1, 0xfffffbff, 0x9, 0x0, 0x0, 0x10001, 0x1ff, 0x1000, 0x9c, 0xfffff57a, 0x7fffffff, 0xc, 0x3, 0x400, 0x5, 0x7, 0xffffffff, 0x5, 0x6aff3e5e, 0x7ff, 0xf0, 0x0, 0x20, 0x9, 0xa1a6, 0x3, 0xa441, 0x0, 0xffffffff, 0x7, 0x0, 0x7f, 0x2, 0x8, 0xfff, 0x8, 0x1, 0xe82, 0x6, 0x1, 0x200, 0x5, 0x0, 0x400, 0x8, 0x100, 0x1596, 0x5, 0x8f55, 0x1ff, 0x5264, 0x8, 0xff1f, 0x9, 0x9, 0x1, 0x8, 0x0, 0x3ff, 0x6b0, 0x9, 0x1000, 0x3, 0x2, 0x2d, 0xa3e5, 0x9, 0x2, 0xff, 0x81, 0x7, 0x9, 0x80000001, 0x6, 0x7, 0x10001, 0x8, 0x9, 0x8, 0xfff, 0x7, 0x2, 0x9, 0x1, 0x7, 0x3, 0xff, 0x7fff, 0x7, 0xfffffff7, 0x2, 0xb3, 0x4, 0x7ff, 0x6, 0x7, 0x80000001, 0x7fffffff, 0x691b, 0x10001, 0x8, 0x4, 0x2, 0x81, 0x86, 0x8, 0xfffffc2d, 0x8000, 0x7, 0x2, 0x400, 0x0, 0x0, 0x10000, 0x81, 0x4, 0x40, 0x4, 0xfffffffe, 0xfffffffa, 0x200, 0x80, 0x4, 0x2, 0x40, 0x0, 0x7, 0x10001, 0xfffffbff, 0x1, 0x3, 0x685, 0x8001, 0x7, 0xd5f0, 0x4, 0x4, 0x1, 0xfe5, 0x8, 0xfffff9cb, 0x8000, 0x40, 0x1, 0x7ff, 0xfd66, 0x81, 0x9, 0x0, 0x1000, 0x4, 0xffffff2b, 0x28f, 0x1, 0x5, 0x40, 0x1, 0x80000001, 0x5, 0x7fffffff, 0x401, 0xfffffffe, 0x1, 0x6f5, 0x7a89, 0x7, 0x1, 0x6, 0x5, 0x400, 0x8, 0x6, 0x40, 0x6, 0xffff0000, 0x1f, 0x2, 0x8, 0x37, 0x2, 0x0, 0x9, 0x80000001, 0x40, 0x94de, 0x7, 0x6, 0x9, 0x8f, 0x10000, 0x4ce6, 0x1, 0x4, 0x1, 0x0, 0x200, 0x1, 0xfffffffe, 0x1ff, 0x5, 0x81, 0xffff, 0x9, 0x100, 0x3f, 0x2, 0x80, 0x0, 0x5, 0x1, 0x3ff, 0x2, 0x8, 0xffffffff, 0x8, 0x6, 0x5, 0x7, 0x6, 0x3f0000, 0x3, 0x2, 0x1, 0x5, 0x20, 0x1, 0x12, 0x5, 0x6f834930, 0x8, 0xc071, 0xcd, 0xffffffff, 0x7, 0x81, 0x101, 0x7fffffff, 0x9, 0x7, 0x7d3, 0x4, 0x7, 0x1f, 0x8, 0x9, 0xfffffff8, 0x3f, 0x1, 0x7, 0x6, 0x100, 0x0, 0x7, 0x2, 0x0, 0x9, 0x8, 0x1f, 0x3, 0x1, 0x7fffffff, 0x7fff, 0x6, 0x5, 0x40, 0x10000000, 0x1, 0x4, 0x8001, 0x400, 0x0, 0x1f, 0x6, 0x6, 0x9, 0x3f, 0x80000000, 0x4, 0x100, 0xffff, 0x8, 0x6, 0x6, 0x8000, 0x3, 0x2, 0x1ff, 0x6, 0x2, 0x4202, 0x5, 0xfffffffa, 0xc9bd, 0x226, 0x92, 0xfff, 0x8, 0x20, 0x9, 0xd25, 0xffffffff, 0x2, 0x2569, 0x8, 0x1, 0x5, 0x6, 0x9, 0x8d, 0x2, 0x1, 0x8, 0x9, 0x6, 0x800, 0x3ff, 0x9, 0x9, 0x1ff, 0x1, 0xfffff801, 0x3, 0x8000, 0x3, 0x80000001, 0x10001, 0x9, 0x2, 0x3f, 0x4, 0x1, 0x14, 0x16c7, 0x1, 0x3, 0x8336, 0x7fff, 0xfffffffb, 0xfffffff9, 0x80000000, 0x200, 0x8000, 0x9, 0xfffffffc, 0x3, 0x5, 0x1f, 0x1, 0x7fffffff, 0x289d3059, 0xac47, 0x8, 0x7, 0x4, 0x5, 0x7, 0x7279145a, 0x9, 0x8, 0x7fffffff, 0x9, 0x2167c1e4, 0x8, 0x7, 0x5, 0x6, 0x9, 0x3, 0x6, 0x1, 0x6, 0x9, 0x6, 0x100, 0x8, 0x5, 0x1, 0x9, 0x6, 0x7fffffff, 0x0, 0x5a, 0x8, 0x2, 0x5, 0x2, 0x80000000, 0x1ff, 0xfff, 0x1, 0x7f, 0x2, 0x5, 0x5a80, 0x0, 0x40, 0x7ff, 0x8, 0x8, 0x4, 0xfff, 0x100, 0x7, 0x1, 0x6, 0x20, 0x8001, 0xbdc, 0x7f, 0xffff, 0x3, 0x6, 0x7f, 0x8, 0x8, 0x12, 0x8001, 0x2, 0x12, 0x81, 0x3, 0x9, 0x7ff, 0x88, 0x7, 0x4ff5, 0xfffffff7, 0x4, 0xffffffff, 0x100, 0x80, 0x81, 0x9, 0x7fffffff, 0x9, 0x1, 0x2, 0xffffff7f, 0x81, 0x7, 0x38000000, 0x8, 0xc8e1, 0x5b5, 0x80, 0xcee9, 0x8, 0x10001, 0x101, 0x1800000, 0x613d, 0xffffff01, 0x1000, 0x4, 0x7fffffff, 0x40, 0x1, 0x2, 0xfff, 0x5, 0x0, 0x4, 0xfffffffc, 0xb1, 0x1ff, 0x0, 0x3, 0x2, 0x9, 0x3, 0x7, 0x598e, 0x0, 0xfff, 0x0, 0x200, 0xfff, 0x5, 0x3, 0xae000000, 0x61, 0x1, 0x3f, 0x9, 0x7, 0x85, 0x8, 0xfffffff9, 0x9, 0x2, 0x1, 0x1, 0x282, 0xbf, 0x0, 0x7, 0xdf08, 0x3, 0x614, 0x4, 0x81, 0xfffffff9, 0x29, 0x2, 0xfffffff7, 0x1000, 0x5, 0xffff, 0x4, 0x3, 0x1, 0x3, 0x5, 0xffffffc9, 0x101, 0x7, 0x0, 0x8000, 0x6, 0xb5, 0x2, 0x80, 0x75, 0x7, 0x3f, 0x1b1d, 0x70, 0x1000, 0x8, 0xd1, 0x6b, 0x10001, 0x9, 0x8, 0x0, 0x100, 0x0, 0x1, 0x6, 0x9, 0x8e, 0x8, 0x3f, 0x37409640, 0x72b3, 0x1, 0xd03e, 0xffffffff, 0xff, 0xed0a, 0x800, 0x4, 0x6, 0x1, 0x0, 0xeca6, 0x10000, 0x8, 0x2, 0x2, 0x8, 0x3f, 0x10001, 0x2, 0xfffffc01, 0x800, 0x0, 0x80000000, 0xfb2, 0x1, 0x4, 0x8, 0x3ff, 0x3ff, 0x5, 0x8, 0x80000001, 0x1, 0x5, 0x9, 0x8001, 0x6, 0x6, 0x5db, 0x4e5, 0x7, 0x5, 0x7fffffff, 0x7ff, 0x1, 0x9, 0x8, 0x2, 0x8000, 0x1, 0x3, 0x8, 0x6, 0x80, 0x5, 0x8, 0x9eb8, 0x6, 0x2, 0xc00, 0xe22, 0x9, 0x2, 0x3f, 0x9, 0x3d658000, 0x9, 0x3137153a, 0x2, 0x1, 0x8001, 0xfef2, 0x1, 0x4f3a000b, 0x9, 0xffffffff, 0x7, 0x1, 0x20, 0x8, 0x9b, 0x9b9, 0x0, 0x3, 0x10000, 0x9, 0x3, 0xff, 0x5, 0x6, 0x6, 0x1, 0x4, 0x6, 0x1, 0x3ff, 0x3, 0x6, 0x80000001, 0x60e, 0xc9e0, 0x1, 0x6, 0x0, 0x7, 0x8, 0x5, 0x7, 0x79, 0x2, 0x9, 0x0, 0x506e, 0x250, 0x2, 0x1, 0x9, 0x4, 0x5, 0x2, 0xffffff81, 0xd042, 0x55, 0x64e9, 0x1059, 0x7fff, 0x300, 0xfff, 0x7, 0x8000, 0x44, 0x3, 0x1000, 0x1, 0x5, 0x400, 0x5e795cfc, 0x8, 0x0, 0x2, 0x3, 0x9, 0x1, 0x3, 0x8000, 0x9, 0x8a03, 0x0, 0x1f, 0x2, 0x4847, 0x2d6, 0x1, 0x101, 0x6e8dca77, 0xf44, 0x80000000, 0x5234, 0x7, 0x7, 0x3f, 0x7501deeb, 0x7, 0x3, 0x6, 0xffffffff, 0x5, 0x3, 0x40, 0xffff, 0x9, 0x7fff, 0xfffff587, 0xffffff7f, 0x0, 0x6, 0x4000000, 0x6314, 0x83f2, 0x21f3, 0x20]}) [ 765.334306][ T8702] usb 3-1: device descriptor read/64, error 18 [ 765.425121][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 765.595248][ T9745] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 765.604862][ T9745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.613007][ T9745] usb 2-1: Product: syz [ 765.617588][ T9745] usb 2-1: Manufacturer: syz [ 765.622593][ T9745] usb 2-1: SerialNumber: syz [ 765.724050][ T8702] usb 3-1: device descriptor read/64, error 18 [ 765.783772][ T9745] usb 2-1: config 0 descriptor?? [ 765.840812][ T9745] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 765.994232][ T8702] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 766.051877][ T9745] usb 2-1: USB disconnect, device number 13 [ 766.264778][ T8702] usb 3-1: device descriptor read/64, error 18 [ 766.554436][T17562] __nla_validate_parse: 2 callbacks suppressed [ 766.554474][T17562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 766.588830][T17590] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 766.655400][ T8702] usb 3-1: device descriptor read/64, error 18 [ 766.778188][ T8702] usb usb3-port1: attempt power cycle [ 767.523987][ T8702] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 767.634416][ T8702] usb 3-1: Invalid ep0 maxpacket: 0 [ 767.784870][ T8702] usb 3-1: new high-speed USB device number 104 using dummy_hcd 09:58:02 executing program 2: syz_usb_connect(0x4, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x7e, 0x58, 0x60, 0x10, 0x403, 0xed71, 0x4751, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)=""/87, &(0x7f00000000c0)=0x57) 09:58:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0xa, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:02 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x240000) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) fcntl$addseals(r1, 0x409, 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000200)={r3}) 09:58:02 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:02 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000100)=0xc0c1002) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x4400, 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:58:02 executing program 1: ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0) [ 767.914384][ T8702] usb 3-1: device descriptor read/8, error -71 [ 768.050710][T17651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 768.124163][ T8702] usb 3-1: device descriptor read/8, error -71 [ 768.244615][ T8702] usb usb3-port1: unable to enumerate USB device 09:58:03 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) [ 768.426910][T17661] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:03 executing program 4: connect$inet(0xffffffffffffffff, 0x0, 0x3e) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000100)={[{0xfffffffa, 0xf04, 0x0, 0x4, 0x3f, 0x81, 0x9, 0xfc, 0x9, 0x9, 0x4, 0x80, 0x401}, {0x1, 0x9, 0x3f, 0x9, 0x3, 0x80, 0xa8, 0x97, 0x1, 0x9b, 0x1, 0x81, 0x101}, {0x7, 0x9e12, 0x62, 0x8, 0x9, 0x8, 0x7, 0x40, 0x1, 0x2, 0x9, 0x6, 0xcf42}], 0xd2}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r2, 0x800, 0x10, 0x5, 0x1ffe000}, &(0x7f00000000c0)=0x18) 09:58:03 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:03 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:58:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0xb, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:03 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r3, r4, 0x0) write$cgroup_type(r4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') r5 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_elf32(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000440)=0x2) [ 768.986306][T17685] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 769.023901][ T9034] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 769.163226][T17688] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:03 executing program 2: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x3, 0x8, 0x4, 0x4}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x149400, 0x20) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x2b, 0x4, 0x0, {0x2, 0x800, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) 09:58:03 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x851}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:03 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) connect$inet(r0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) [ 769.264025][ T9034] usb 2-1: Using ep0 maxpacket: 16 09:58:04 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x7, [@broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x40}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local]}, 0x2c) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 769.394828][ T9034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:58:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0xc, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r2, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4116, 0x1014}], 0x1) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, 0x0, 0x0) [ 769.564717][ T9034] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 769.574075][ T9034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.582220][ T9034] usb 2-1: Product: syz [ 769.586744][ T9034] usb 2-1: Manufacturer: syz [ 769.591485][ T9034] usb 2-1: SerialNumber: syz [ 769.746959][T17715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 769.770408][ T9034] usb 2-1: config 0 descriptor?? [ 769.837052][ T9034] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 769.874112][ T8701] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 769.895543][T17721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 770.033196][ T9034] usb 2-1: USB disconnect, device number 14 [ 770.056854][T17726] not chained 270000 origins [ 770.061494][T17726] CPU: 1 PID: 17726 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 770.070169][T17726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.080214][T17726] Call Trace: [ 770.083509][T17726] dump_stack+0x21c/0x280 [ 770.087834][T17726] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 770.093896][T17726] kmsan_internal_chain_origin+0x6f/0x130 [ 770.099608][T17726] ? kmsan_get_metadata+0x116/0x180 [ 770.104800][T17726] ? kmsan_internal_check_memory+0xb1/0x3d0 [ 770.110684][T17726] ? kmsan_internal_set_origin+0x75/0xb0 [ 770.116333][T17726] ? __msan_get_context_state+0x9/0x20 [ 770.121785][T17726] ? kfree+0x2d/0x3000 [ 770.125849][T17726] ? ____sys_recvmsg+0x9fe/0xcf0 [ 770.130809][T17726] ? kmsan_get_metadata+0x116/0x180 [ 770.136003][T17726] ? kmsan_set_origin_checked+0x95/0xf0 [ 770.141545][T17726] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 770.147610][T17726] ? _copy_from_user+0x201/0x310 [ 770.152544][T17726] ? kmsan_get_metadata+0x116/0x180 [ 770.157734][T17726] __msan_chain_origin+0x50/0x90 [ 770.162667][T17726] do_recvmmsg+0x11ba/0x22c0 [ 770.167284][T17726] ? ktime_get_ts64+0x79f/0x8d0 [ 770.172148][T17726] ? __msan_poison_alloca+0xf0/0x120 [ 770.177429][T17726] ? __se_sys_recvmmsg+0xd3/0x410 [ 770.182443][T17726] ? __se_sys_recvmmsg+0xd3/0x410 [ 770.187464][T17726] __se_sys_recvmmsg+0x247/0x410 [ 770.192410][T17726] ? __prepare_exit_to_usermode+0x16c/0x560 [ 770.198384][T17726] ? kmsan_get_metadata+0x116/0x180 [ 770.203579][T17726] __x64_sys_recvmmsg+0x62/0x80 [ 770.208429][T17726] do_syscall_64+0xad/0x160 [ 770.212925][T17726] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 770.219165][T17726] RIP: 0033:0x45d579 [ 770.223045][T17726] Code: Bad RIP value. [ 770.227125][T17726] RSP: 002b:00007f153adc2c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 770.235814][T17726] RAX: ffffffffffffffda RBX: 0000000000026980 RCX: 000000000045d579 [ 770.243951][T17726] RDX: 0000000000000344 RSI: 0000000020005c80 RDI: 0000000000000004 [ 770.251914][T17726] RBP: 000000000118d030 R08: 0000000000000000 R09: 0000000000000000 [ 770.260151][T17726] R10: 0000000000010122 R11: 0000000000000246 R12: 000000000118cfec [ 770.268132][T17726] R13: 000000000169fb6f R14: 00007f153adc39c0 R15: 000000000118cfec [ 770.276103][T17726] Uninit was stored to memory at: [ 770.281826][T17726] kmsan_internal_chain_origin+0xad/0x130 [ 770.287550][T17726] __msan_chain_origin+0x50/0x90 [ 770.292491][T17726] do_recvmmsg+0x11ba/0x22c0 [ 770.297070][T17726] __se_sys_recvmmsg+0x247/0x410 [ 770.302003][T17726] __x64_sys_recvmmsg+0x62/0x80 [ 770.306845][T17726] do_syscall_64+0xad/0x160 [ 770.311359][T17726] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 770.317230][T17726] [ 770.319545][T17726] Uninit was stored to memory at: [ 770.324560][T17726] kmsan_internal_chain_origin+0xad/0x130 [ 770.330269][T17726] __msan_chain_origin+0x50/0x90 [ 770.335205][T17726] do_recvmmsg+0x11ba/0x22c0 [ 770.339783][T17726] __se_sys_recvmmsg+0x247/0x410 [ 770.344712][T17726] __x64_sys_recvmmsg+0x62/0x80 [ 770.349551][T17726] do_syscall_64+0xad/0x160 [ 770.354047][T17726] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 770.359916][T17726] [ 770.362256][T17726] Uninit was stored to memory at: [ 770.367283][T17726] kmsan_internal_chain_origin+0xad/0x130 [ 770.372990][T17726] __msan_chain_origin+0x50/0x90 [ 770.378049][T17726] do_recvmmsg+0x11ba/0x22c0 [ 770.382636][T17726] __se_sys_recvmmsg+0x247/0x410 [ 770.387566][T17726] __x64_sys_recvmmsg+0x62/0x80 [ 770.392444][T17726] do_syscall_64+0xad/0x160 [ 770.396938][T17726] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 770.402809][T17726] [ 770.405165][T17726] Uninit was stored to memory at: [ 770.410183][T17726] kmsan_internal_chain_origin+0xad/0x130 [ 770.415891][T17726] __msan_chain_origin+0x50/0x90 [ 770.420817][T17726] do_recvmmsg+0x11ba/0x22c0 [ 770.425394][T17726] __se_sys_recvmmsg+0x247/0x410 [ 770.430334][T17726] __x64_sys_recvmmsg+0x62/0x80 [ 770.435177][T17726] do_syscall_64+0xad/0x160 [ 770.439680][T17726] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 770.445550][T17726] [ 770.447875][T17726] Uninit was stored to memory at: [ 770.452906][T17726] kmsan_internal_chain_origin+0xad/0x130 [ 770.458616][T17726] __msan_chain_origin+0x50/0x90 [ 770.463555][T17726] do_recvmmsg+0x11ba/0x22c0 [ 770.468135][T17726] __se_sys_recvmmsg+0x247/0x410 [ 770.473064][T17726] __x64_sys_recvmmsg+0x62/0x80 [ 770.477905][T17726] do_syscall_64+0xad/0x160 [ 770.482398][T17726] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 770.488284][T17726] [ 770.490600][T17726] Uninit was stored to memory at: [ 770.495640][T17726] kmsan_internal_chain_origin+0xad/0x130 [ 770.501358][T17726] __msan_chain_origin+0x50/0x90 [ 770.506291][T17726] do_recvmmsg+0x11ba/0x22c0 [ 770.510882][T17726] __se_sys_recvmmsg+0x247/0x410 [ 770.515827][T17726] __x64_sys_recvmmsg+0x62/0x80 [ 770.520667][T17726] do_syscall_64+0xad/0x160 [ 770.525159][T17726] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 770.531051][T17726] [ 770.534059][T17726] Uninit was stored to memory at: [ 770.539194][T17726] kmsan_internal_chain_origin+0xad/0x130 [ 770.544914][T17726] __msan_chain_origin+0x50/0x90 [ 770.549854][T17726] do_recvmmsg+0x11ba/0x22c0 [ 770.554434][T17726] __se_sys_recvmmsg+0x247/0x410 [ 770.559360][T17726] __x64_sys_recvmmsg+0x62/0x80 [ 770.564201][T17726] do_syscall_64+0xad/0x160 [ 770.569041][T17726] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 770.574927][T17726] [ 770.577240][T17726] Local variable ----msg_sys@do_recvmmsg created at: [ 770.583988][T17726] do_recvmmsg+0xbf/0x22c0 [ 770.588581][T17726] do_recvmmsg+0xbf/0x22c0 [ 770.644896][ T8701] usb 3-1: Using ep0 maxpacket: 16 [ 770.765372][ T8701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 770.934869][ T8701] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 770.944490][ T8701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.952630][ T8701] usb 3-1: Product: syz [ 770.957137][ T8701] usb 3-1: Manufacturer: syz [ 770.961867][ T8701] usb 3-1: SerialNumber: syz [ 771.057000][ T8701] usb 3-1: config 0 descriptor?? [ 771.096427][ T8701] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 771.288683][ T9745] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 771.299696][ T8701] usb 3-1: USB disconnect, device number 105 [ 771.563730][ T9745] usb 2-1: Using ep0 maxpacket: 16 [ 771.694555][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 771.875379][ T9745] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 771.884703][ T9745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.892837][ T9745] usb 2-1: Product: syz [ 771.897571][ T9745] usb 2-1: Manufacturer: syz [ 771.902310][ T9745] usb 2-1: SerialNumber: syz 09:58:06 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20\x00', 0x501400, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0), 0xc) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000a44eaa10d21978129f66010203d6596269e701090200090ce600"], 0x0) r1 = socket(0x2b, 0x1, 0x3) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000140)={@none}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r4 = creat(&(0x7f0000000180)='./file0\x00', 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xe9, 0x1000}, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x28, r5, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x30008811) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000300)=""/225) 09:58:06 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:06 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0xf4) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000100)) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r3 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b72c085208627dd4bac3700cc6f3822000050000000402f5ff05000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffe7ffff03000000110000000d6039077088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:58:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0xf, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:06 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000040)=""/4096) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001040)='/dev/hwrng\x00', 0x84800, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, 0x0, 0x400, 0x70bd28, 0x8000, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff001}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048001}, 0x44055) ioctl$int_out(r0, 0x6, &(0x7f0000000000)) [ 771.984237][ T9745] usb 2-1: config 0 descriptor?? 09:58:06 executing program 2: syz_usb_connect(0x0, 0xfffffffffffffe3e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa9, 0xb3, 0xde, 0x10, 0x6e1, 0xa190, 0xe21f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0xa5, 0x27, 0x8d, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x7}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x3, 0x3, [0x3, 0x4, 0x1], 0x5a}]}], [{{0x9, 0x5, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, [@generic={0x63, 0x23, "3e1794bcbb4108182711bad61a2ed29dba7c92308ae3deff623dfe179b4d466eab7d56383c6d7d169e9f1c0973a0a7dd4dcc98a584c72c7a67f3e820740526f43763ebcab26efdff8a9c5b0807a1a5798b67eabcb206fcbf7d6833737015f56425"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x6}]}}]}}]}}]}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x8, 0x0, [{0x4, 0x3, 0x0, 0x0, @adapter={0xffff, 0x1000, 0x869, 0xd2c8, 0x8}}, {0x4, 0x1, 0x0, 0x0, @irqchip={0x5, 0x100}}, {0x0, 0x1, 0x0, 0x0, @irqchip={0xf2fa, 0x1}}, {0x321, 0x1, 0x0, 0x0, @irqchip={0x7fff, 0x5}}, {0xffffffff, 0x4, 0x0, 0x0, @msi={0x9, 0x8000, 0x80, 0x8}}, {0xff, 0x1, 0x0, 0x0, @adapter={0xffff, 0xffff, 0xfda6, 0x4, 0x9}}, {0x6, 0x4, 0x0, 0x0, @adapter={0xffffffff, 0x8001, 0x8, 0x3, 0xfffffff8}}, {0x20, 0x3, 0x0, 0x0, @irqchip={0x1, 0x7}}]}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x2, 0x3, 0x6, 0x2, 0x2}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x8041) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x0, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) [ 772.056090][ T9745] usb 2-1: can't set config #0, error -71 [ 772.074673][ T9745] usb 2-1: USB disconnect, device number 15 [ 772.193673][T17766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 772.427490][T17777] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 772.453974][ T8702] usb 3-1: new high-speed USB device number 106 using dummy_hcd 09:58:07 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:07 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0xa0b82, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x4000, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) dup3(r3, r1, 0x0) pidfd_send_signal(r4, 0x20, &(0x7f0000000180)={0x32, 0x1, 0x8001}, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r5 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da488034855796c34ccb25eb246cde3952aa04e1e76866e37069ea983323b53"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:58:07 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75985f69643d", @ANYRESDEC=0x0, @ANYBLOB="2c3a71e900f9931f203ba96eddfb036afbb876f0400bdd47584d2364e39fa194bb86652dda1e092dc797585dfb1cf71eebd5f3262f1709a7650e"]) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2}, 0x50) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000180)=""/40) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)="31a8a74c68e0576d9cd0c4741a0f6839f84fc6baa465a3f1153fbe538f25a929d282536660351a3581028e66de385e10e131124fe3f5ba72073e2d3c3f96cfb6d13ca9b9c6d5a0fee2b32c81839ef87b1843cf32bb270e925b79761d84da87242cd3d97cf159acc29f558ec395850eaaaa9061726fb30646066dd00503f0eec9f7c956570dddedbf0e6692cbf6427e52855de62360ab42e3", 0x98}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a5", 0xb1}], 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3028b179f516000000", @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9012169d0c"], 0xa8}], 0x1, 0x0) setgid(r5) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x70400, 0x0) sendto(r6, &(0x7f0000000300)="7766ffd19b597faafc435473f9ed1db2c1197bde764e16cc26de91cd80158f9d2dc828b4fb9f94d774969c125cd57686de1cd08c969ef079702eff8f357b105d95b72791271b1ca519", 0x49, 0x40000, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000000c0)={0xa0, 0x0, r2, {{0x1, 0x0, 0x8, 0x2, 0x64, 0x6, {0x5, 0x8000, 0x80000000, 0xfffffffffffffff8, 0x5, 0x0, 0x20, 0xfffffeb9, 0x5, 0xa000, 0x6, r3, r5, 0x1}}}}, 0xa0) connect$inet(r0, 0x0, 0x0) r7 = accept(r0, &(0x7f00000001c0)=@ethernet={0x0, @multicast}, &(0x7f0000000240)=0x80) ioctl$sock_bt_cmtp_CMTPCONNDEL(r7, 0x400443c9, &(0x7f0000000280)={@fixed={[], 0x10}, 0x4}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) 09:58:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 772.704151][ T8702] usb 3-1: Using ep0 maxpacket: 16 [ 772.734123][ T9745] usb 2-1: new high-speed USB device number 16 using dummy_hcd 09:58:07 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 772.866134][ T8702] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 772.874389][ T8702] usb 3-1: can't read configurations, error -22 09:58:07 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x40080) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 772.993926][ T9745] usb 2-1: Using ep0 maxpacket: 16 [ 773.018726][T17794] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 773.043574][ T8702] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 773.063640][ T9745] usb 2-1: too many configurations: 214, using maximum allowed: 8 [ 773.187058][ T9745] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 773.194956][ T9745] usb 2-1: can't read configurations, error -61 [ 773.254441][T17800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 773.293724][ T8702] usb 3-1: Using ep0 maxpacket: 16 [ 773.395922][ T9745] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 773.454625][ T8702] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 773.462755][ T8702] usb 3-1: can't read configurations, error -22 [ 773.502927][ T8702] usb usb3-port1: attempt power cycle [ 773.643794][ T9745] usb 2-1: Using ep0 maxpacket: 16 [ 773.694209][ T9745] usb 2-1: too many configurations: 214, using maximum allowed: 8 [ 773.814252][ T9745] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 773.822065][ T9745] usb 2-1: can't read configurations, error -61 [ 773.862833][ T9745] usb usb2-port1: attempt power cycle [ 774.233690][ T8702] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 774.324031][ T8702] usb 3-1: Using ep0 maxpacket: 16 [ 774.483712][ T8702] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 774.491862][ T8702] usb 3-1: can't read configurations, error -22 [ 774.603660][ T9745] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 774.673519][ T8702] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 774.705444][ T9745] usb 2-1: Using ep0 maxpacket: 16 [ 774.744683][ T9745] usb 2-1: too many configurations: 214, using maximum allowed: 8 [ 774.805831][ T8702] usb 3-1: Using ep0 maxpacket: 16 [ 774.888647][ T9745] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 774.896688][ T9745] usb 2-1: can't read configurations, error -61 [ 774.964667][ T8702] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 774.972756][ T8702] usb 3-1: can't read configurations, error -22 [ 775.004691][ T8702] usb usb3-port1: unable to enumerate USB device [ 775.109743][ T9745] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 775.218684][ T9745] usb 2-1: Using ep0 maxpacket: 16 [ 775.284385][ T9745] usb 2-1: too many configurations: 214, using maximum allowed: 8 09:58:10 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e2312110fd0b04004f820102030109021b0001000000eb451b1d739d00090400000137b2f70009050e"], 0x0) 09:58:10 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x158, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000040) r2 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x10000, 0x402100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, r4, 0xd5bf98d0fc1ca92f, 0x0, 0x0, {{}, {}, {0x8, 0x2, 0x100}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x17, {0x14, 0x0, @l2={'ib', 0x3a, 'hsr0\x00'}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x1480) 09:58:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x11, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:10 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:10 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x54826ef472451d68, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000180)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fd6e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b0007000000060011007a0800000800150078000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b002300000006001100020000000800150006000000"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) read$midi(r0, &(0x7f00000001c0)=""/232, 0xe8) 09:58:10 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$CHAR_RAW_SECTGET(r1, 0x1267, &(0x7f00000000c0)) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:58:10 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f00000000c0)={0x9, 0x4, "f5cb28641877330606403f4e7395a53eb6137c6951aa2ea4d2eb060fa49dfc4d", 0x42c7a48c, 0x9, 0x0, 0x5, 0x40}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 775.393798][ T9745] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 775.401560][ T9745] usb 2-1: can't read configurations, error -71 [ 775.478894][ T9745] usb usb2-port1: unable to enumerate USB device [ 775.519941][T17828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 775.724633][ T8702] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 775.799628][T17846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:10 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) [ 775.973491][ T8702] usb 3-1: Using ep0 maxpacket: 16 [ 775.983743][ T9745] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 776.095819][ T8702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:58:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x12, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:10 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) sendto(r2, &(0x7f0000000180)="8d", 0x1, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f00000000c0)="44cdabe0602b038a5f4548465ab2f0c429078a55311b7e467eaa238ba1f723b18b4fbac0dc51", 0x26, 0x631, 0x0, 0x4, r1}]) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 776.233357][ T9745] usb 2-1: Using ep0 maxpacket: 16 [ 776.264933][ T8702] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 776.274282][ T8702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.282512][ T8702] usb 3-1: Product: syz [ 776.287378][ T8702] usb 3-1: Manufacturer: syz [ 776.292300][ T8702] usb 3-1: SerialNumber: syz 09:58:11 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200040, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) shmget(0x1, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000040)={r2, 0x8}) 09:58:11 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x0) [ 776.363624][ T9745] usb 2-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 776.374465][ T9745] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 776.391710][T17854] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 776.403066][ T8702] usb 3-1: config 0 descriptor?? [ 776.447699][ T8702] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 776.607170][T17871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 776.645062][ T9745] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 776.654570][ T9745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.660274][ T8702] usb 3-1: USB disconnect, device number 110 [ 776.662720][ T9745] usb 2-1: Product: syz [ 776.662832][ T9745] usb 2-1: Manufacturer: syz [ 776.662947][ T9745] usb 2-1: SerialNumber: syz 09:58:11 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 776.842821][ T9745] usb 2-1: config 0 descriptor?? [ 777.088242][ T8705] usb 2-1: USB disconnect, device number 20 [ 777.513478][ T8702] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 777.754141][ T8702] usb 3-1: Using ep0 maxpacket: 16 [ 777.873573][ T8702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 777.893944][ T9034] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 778.054259][ T8702] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 778.063918][ T8702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.072155][ T8702] usb 3-1: Product: syz [ 778.076640][ T8702] usb 3-1: Manufacturer: syz [ 778.081386][ T8702] usb 3-1: SerialNumber: syz [ 778.121196][ T8702] usb 3-1: config 0 descriptor?? [ 778.145323][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 778.185186][ T8702] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 778.284136][ T9034] usb 2-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 778.298890][ T9034] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 778.409450][ T8702] usb 3-1: USB disconnect, device number 111 [ 778.494270][ T9034] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 778.503955][ T9034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.512139][ T9034] usb 2-1: Product: syz [ 778.516636][ T9034] usb 2-1: Manufacturer: syz [ 778.521376][ T9034] usb 2-1: SerialNumber: syz 09:58:13 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x4, 0x9, 0x636021c2, r1, 0x0, &(0x7f0000000080)={0x990af7, 0xe, [], @p_u32=&(0x7f0000000040)=0x8}}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100041, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e2312110fd0b04004f820102030109021b030000000000097f0000000000000009050e000000000000"], 0x0) 09:58:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x13, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 778.596885][ T9034] usb 2-1: config 0 descriptor?? 09:58:13 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x0) 09:58:13 executing program 3: ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000001c0)={0x5, 0x8000}) clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x158b00, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x8, 0x4}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) connect$l2tp(r1, &(0x7f0000000180)={0x2, 0x0, @empty, 0x4}, 0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000000000000447be7d02030006000000000020000400b3d7c52ebf31a8b70be85ecba659000078d5bb512705ce54ffffff0700000000110000000d60395a709ac4c2576b9a992da4880348d2bea369311e21bf14cb3ec9ef31b52d1c91171ff0dca4d5c91c965d486b41b6e4058b95e0c0e88e380fe350e08408c8356acce1e4a8d7e68304ae0dc5"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) r3 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000600)="31a8a74c68e0576d9cd0c4741a0f6839f84fc6baa465a3f1153fbe538f25a929d282536660351a3581028e66de385e10e131124fe3f5ba72073e2d3c3f96cfb6d13ca9b9c6d5a0fee2b32c81839ef87b1843cf32bb270e925b79761d84da87242cd3d97cf159acc29f558ec395850eaaaa9061726fb30646066dd00503f0eec9f7c956570dddedbf0e6692cbf6427e52855de62360ab42e3", 0x98}, {&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4f", 0x28}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc9227", 0x8a}, {&(0x7f0000000d40)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833a05000000000000001872b870938cd82de52aeb0355cab19f58a04c2b5de363a458e4110fe9247dc4215d8e951b4e4d72a3d9fcf3ded7de6bba65e6fe13ce816d870d5aec4ed7eeef735d3a87781e52d0f5ee5b9b5b88755fd3fd6f68b2222798b66047aa92c6496c3cba8aa952eafb792c435eeeb7b1a40f2acd9b81e2c489496766", 0xb9}, {&(0x7f0000000ac0)="399d0210dcdacdcfc962b6b1e6a648c706b138082fe892fc7182d998a8ebe7434ed827118dfae41d466b687c54ee7de1a1a7d161c69189c18fa3e6725fb232affdeeeb5f00512d184d7742481fe79bc233f329b9d0d4208db657723a2c2808f0d046a1e794ee44e6fa84bb4588f7797bb32979da462f5021d24ebe82b2a26e871ee8916b24b21ad7ed57a55b9f9157f37f335379b3acef4f56e9b3b95fb732e294f61e226657dd1c9ffe29f78b589084a5", 0xb1}], 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3028b179f516000000", @ANYBLOB="dd17326b4cf6db591cf6ece1b724ad2352f159c66ec304eeea0628a21a9a8d688fe730f183bf3e45ac6b0df9fe984d5443507ce8a07049565d83545304ce6b054acf77e3e4ea21aaef366fccf3da5f58016c3c12e1ed66aa473b2244c343fdeda009e34d41105d1400"/118, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9012169d0c"], 0xa8}], 0x1, 0x0) setgid(r4) setregid(r4, 0xee00) 09:58:13 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x240, 0x80) r3 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) connect$inet(r3, 0x0, 0x5a) 09:58:13 executing program 2: r0 = fsopen(&(0x7f0000000100)='xfs\x00', 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000580)=""/133, 0x85}], 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e2312110fc0b04004f820102030109021b000100000000090400000137b2f70009050e000000000000"], 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x101) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) get_robust_list(r1, &(0x7f0000000240)=&(0x7f0000000200)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)}}, &(0x7f0000000280)=0x18) [ 778.618428][ T9034] usb 2-1: can't set config #0, error -71 [ 778.667220][ T9034] usb 2-1: USB disconnect, device number 21 [ 778.732518][T17919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 779.002747][T17930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:13 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) 09:58:13 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000340)="bb3f3eabe0460d07f5dba3f8411b9f9bede4c36bd43c1b935d386f9f92d2346614d0aee0ec4192e556c75150f128189fe80de2c2748c8b4d5b6a7334174f54f729b3cc04c523b6c9eeb778dd911b55492a02bc2b8aa8294f5fc18d1035036520fc8fa257c20efadee18f3a2483dd8a58293a8c14973b72660a46cbe9738df59a9b6fda14e2f63594a9dc51c7d2a3334c4f92327d115c3f87f157e0cec9546e7303802711157b5c0ff4865187e8634ea78ede0ecaf487ae6878d5511e7fd5f6b2bfdb53744190f08e71aca3c57c8c54c3f0bb7f22eb576e2a1b8a889001521424b1f134"}, 0x20) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r2 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466008002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 779.113298][ T8705] usb 3-1: new high-speed USB device number 112 using dummy_hcd 09:58:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x14, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 779.306555][ T9034] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 779.364572][ T8705] usb 3-1: Using ep0 maxpacket: 16 [ 779.497114][ T8705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 779.550881][T17952] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:14 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x410000, 0x0) connect$inet(r0, 0x0, 0xfffffffffffffc61) [ 779.594395][ T9034] usb 2-1: Using ep0 maxpacket: 16 [ 779.727860][ T8705] usb 3-1: New USB device found, idVendor=0bfc, idProduct=0004, bcdDevice=82.4f [ 779.737639][ T8705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.746148][ T8705] usb 3-1: Product: syz [ 779.750500][ T8705] usb 3-1: Manufacturer: syz [ 779.755372][ T8705] usb 3-1: SerialNumber: syz 09:58:14 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = timerfd_create(0x7, 0x800) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0x4, 0x0, 0x8, 0x81, 0x0, 0x5, 0x120, 0xf, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x470, 0x6}, 0x1c293, 0x4, 0xfffff800, 0x6, 0x10001, 0x3, 0x20}, 0x0, 0x7, r0, 0x9) dup3(r1, 0xffffffffffffffff, 0x80000) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c466000002ed8daf97765ce27b90300060000004000000000b738000000570035f422fb000000040203000600000000e70f000000b3d7c52ebf316b300be85ecb00002009007b9f73d2b7c48315ac091e0cfb68268945de7ffc2c00f8fdffffffffffff03000000110000000d60395a70886b9a992da408034800"/139], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:58:14 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x0) [ 779.773502][ T9034] usb 2-1: config index 0 descriptor too short (expected 795, got 27) [ 779.781861][ T9034] usb 2-1: config 0 has no interfaces? [ 779.881278][T17962] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 779.926041][ T8705] usb 3-1: config 0 descriptor?? [ 779.964440][ T9034] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 779.973796][ T9034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.981967][ T9034] usb 2-1: Product: syz [ 779.986808][ T9034] usb 2-1: Manufacturer: syz [ 779.991558][ T9034] usb 2-1: SerialNumber: syz [ 780.175545][ T9034] usb 2-1: config 0 descriptor?? [ 780.236978][ T9034] usb 3-1: USB disconnect, device number 112 [ 780.427705][ T5] usb 2-1: USB disconnect, device number 22 [ 780.983359][ T5] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 781.233300][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 781.243704][ T8701] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 781.354007][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 781.484322][ T8701] usb 2-1: Using ep0 maxpacket: 16 [ 781.525228][ T5] usb 3-1: New USB device found, idVendor=0bfc, idProduct=0004, bcdDevice=82.4f [ 781.534783][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.543193][ T5] usb 3-1: Product: syz [ 781.547577][ T5] usb 3-1: Manufacturer: syz [ 781.552386][ T5] usb 3-1: SerialNumber: syz [ 781.634767][ T8701] usb 2-1: config index 0 descriptor too short (expected 795, got 27) [ 781.643458][ T8701] usb 2-1: config 0 has no interfaces? [ 781.715445][ T5] usb 3-1: config 0 descriptor?? [ 781.823309][ T8701] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 781.832545][ T8701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.841072][ T8701] usb 2-1: Product: syz [ 781.845481][ T8701] usb 2-1: Manufacturer: syz [ 781.850226][ T8701] usb 2-1: SerialNumber: syz [ 781.933476][ T5] usb 3-1: can't set config #0, error -71 [ 781.946958][ T5] usb 3-1: USB disconnect, device number 113 [ 782.016679][ T8701] usb 2-1: config 0 descriptor?? 09:58:16 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) finit_module(r0, &(0x7f0000000040)='.:-\x00', 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRES16], 0x0) 09:58:16 executing program 4: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xc9, 0x9, 0xb84, 0x101, 0x1}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) 09:58:16 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x1a1040, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x100) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000100)='$\xa9@\x13$\x00', 0x0, r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) 09:58:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x60, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:16 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) 09:58:16 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendto(r0, &(0x7f0000000180)="8d", 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='\'{\\\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r4, r5, 0x0) write$cgroup_type(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000380)) [ 782.104998][ T8701] usb 2-1: can't set config #0, error -71 [ 782.147903][ T8701] usb 2-1: USB disconnect, device number 23 [ 782.218446][T18005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 782.389377][T18021] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:17 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x4a) 09:58:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x300, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:17 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000101000000000000000000006508feff10000000950000000000000093119b0c58939ab600276daa4de9f78ab6cdd840ec1c896431ebcd0212728d8a44d328aa71339797e01f0000009efe4a116afcde436a35983013dfe65070fd8729b7ef5dfa14eb14f4b0c6ea8fc8418b968db6ab00000000002446f99b23e5e72a5274ce29b85c58775b9f04a09471272796e57162e4e9d99cc50b65e3827d0a8533a9e5959f2c5109eeebc8944b7124f4ee65087d07ffc2600de9f3a9f57b67f18b1ca4c4020702cebcf53f6d23549861ec4b346399ffab222a248577a61e8c02121ef5"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x5, [], 0x0, 0x14, r0, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x4, 0x100, 0x101}, 0x10, 0xffffffffffffffff, r2}, 0x78) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)) pipe(&(0x7f0000000080)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES64=r2], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 782.743046][T15518] usb 2-1: new high-speed USB device number 24 using dummy_hcd 09:58:17 executing program 3: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) sendto(r2, &(0x7f0000000180)="8d", 0x1, 0x0, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100)=0x1000, 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f00000000c0)=""/47, 0x2f) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c466800002ed8e4f97765ce27b9031f060000000000d7ea5ca16523cac0853215379d25000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb000000090000f8fffffffffffffd497424cbbf8d15000d835fac96f0107ec1882802610ec08d93fc3bbb8a7089e36e3d6a51299619f570268b9931d65f68c28bf90288e650df7a929d0da8efc3a3adf79147ad00"], 0xd8) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1000) [ 782.979550][T18037] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 783.032942][T15518] usb 2-1: device descriptor read/64, error 18 09:58:17 executing program 4: pipe2$9p(&(0x7f0000000040), 0x4000) r0 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x8300, 0x0) connect$inet(r3, 0x0, 0x55) setregid(0xffffffffffffffff, 0xee00) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 09:58:17 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 783.242131][T18038] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 783.463432][T15518] usb 2-1: device descriptor read/64, error 18 [ 783.733605][T15518] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 784.002876][T15518] usb 2-1: device descriptor read/64, error 18 [ 784.395283][T15518] usb 2-1: device descriptor read/64, error 18 [ 784.513498][T15518] usb usb2-port1: attempt power cycle [ 785.233047][T15518] usb 2-1: new high-speed USB device number 26 using dummy_hcd 09:58:20 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="030109021b000100000000090400000137b2f70009050e00"/45], 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 09:58:20 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) 09:58:20 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x20, 0xfd, 0x37, 0xb7, 0x5a9, 0x2641, 0x48b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x8) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000000c0)=0x3, 0x4) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/null\x00', 0x80000, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r5, r6, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x40201, 0x40) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept4$inet(r6, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10, 0x80800) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000854) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000200)=0x5) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000000)={0x400, 0x7}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x80, 0x0) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000180)={0x40, 0xf, 0xfff8, 0x6, 0x9, 0x3, &(0x7f0000000140)="ecb83f4ed6ba831fcb"}) 09:58:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x500, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:20 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x25) connect$inet(r0, 0x0, 0x0) 09:58:20 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 785.455962][T15518] usb 2-1: device descriptor read/8, error -71 [ 785.507306][T18066] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 785.676740][T18079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 785.687512][T15518] usb 2-1: device descriptor read/8, error -71 09:58:20 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/133) [ 785.803703][ T5] usb 3-1: new high-speed USB device number 114 using dummy_hcd 09:58:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x600, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:20 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) [ 786.073540][ T5] usb 3-1: device descriptor read/64, error 18 [ 786.151293][T18091] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 786.202425][T15518] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 786.313433][T15518] usb 2-1: Invalid ep0 maxpacket: 0 [ 786.329107][T15518] usb usb2-port1: unable to enumerate USB device 09:58:21 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 786.433468][T18101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 786.463345][ T5] usb 3-1: device descriptor read/64, error 18 09:58:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x608, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 786.732916][ T5] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 786.935350][T18108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 787.002863][ T5] usb 3-1: device descriptor read/64, error 18 09:58:21 executing program 5: clone(0x2000000002000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20b80, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x808080}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x34, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x804) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x80) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000240)={0x0, @raw_data="eb85637549ae8ef6e9d65a751aed042203b934f016cb561fedbcb6fbaee23468c9ee84aaab1f403552e280587b4a5d5b6eb1d92ed99b600606bc4b40c09b1e9c2eba1d9f766616ffd697bded89f0082ca6560f20c091e60506a01eaf4869582066a020bad145605078836288671aaad206eca720973b5f347476ea11476c1be6e23691b600e72cebe45ad52950d2ecf8c8ac15b9c6825eef1b08974a536cccb72f42d0ce4e6330fce498e13184443700ac86e179a5350d075c60e605d3b137c558ddc9420ae21e6e"}) r4 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000570035f4c3700cc6f3822000050000000402030006000000000020000400b3d7c52ebf31a8b70be85ecb00004c7e0000f8ffffffffffffff03000000110000000d60395a7088d7c27f000000a90100010000a85ca6576b9a992da4880348cb"], 0xd8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1100) [ 787.141224][T18112] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 787.392588][ T5] usb 3-1: device descriptor read/64, error 18 [ 787.513601][ T5] usb usb3-port1: attempt power cycle [ 788.223201][ T5] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 788.313583][ T5] usb 3-1: Invalid ep0 maxpacket: 183 [ 788.472730][ T5] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 788.582642][ T5] usb 3-1: device descriptor read/8, error -71 09:58:23 executing program 1: ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000000)={0x8001, 0x8, 0xf, "c45b6a1fd45bc6e13d0fafbdd86545bc2ea42933f18dd144ef33cebbcd39a54bf32e09ceb7896e53a79f6276054d1fe3e3d8b6aea6eb41582ae47e6a", 0x22, "6534c3e17b3e8b1afe5d13e6dfdd4f044f59e489f9358acf31f067f670456ba46b66f0a2feca87757dac0da745a4ce3e8ddd86c340e55e6d2070ff5c", 0xc8}) 09:58:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x806, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:23 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:23 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000)) 09:58:23 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x841, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x21, 0x2}, 0x7) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x150, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8aa3cae4fea04ff2}, 0x20000000) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e2310610fd0b0400ff820102030109021b000100000000090100000137b2f70009050e000000000000"], 0x0) [ 788.793531][ T5] usb 3-1: device descriptor read/8, error -71 [ 788.798302][T18133] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 788.887087][T18134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 788.915551][ T5] usb usb3-port1: unable to enumerate USB device [ 788.947703][T18143] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:23 executing program 1: syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="f2000000e23121effd0b04004f820102030109021b000100000000090400000137b2f70009050e000000000000"], 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x1000, 0x20000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x23) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x210240, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x71, &(0x7f0000000140)={r2}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)={r2, 0x5, 0xcd, "d39c1390e8d84cf72fa21fa6bf0cea420f559c711be8942de06224280ba25a2a4b7ed28723ca2db7e66dde1c09306fc95c72275761a2e42c8c19437602332e2e40ed15e5007fdc1956485cc532d2adf6a2e3be6f8bdcc4a6d9732951bb579703c18c1e0ec6ff248df296e913c614f6115264e25de0dbe13d6f645b8dd10bd37e96c5e7a65dbf930427c6809c8953b52c1ddce2a18f5424a81ff4ff1cc4f16253c68ec5584368c29bf4c0d96f0e7b35e10080d8e15c8b350f4a9aff30cbee4cbfd50fef0188fd941fda9b043710"}, 0xd5) [ 789.072693][ T3663] usb 6-1: new high-speed USB device number 6 using dummy_hcd 09:58:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x900, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 789.313310][ T3663] usb 6-1: Using ep0 maxpacket: 16 [ 789.354468][ T5] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 789.444109][ T3663] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 789.578914][T18158] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 789.622537][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 789.634090][ T3663] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 789.643597][ T3663] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.651744][ T3663] usb 6-1: Product: syz [ 789.652461][ T9745] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 789.656261][ T3663] usb 6-1: Manufacturer: syz [ 789.669144][ T3663] usb 6-1: SerialNumber: syz [ 789.685587][ T3663] usb 6-1: config 0 descriptor?? [ 789.724450][ T3663] kvaser_usb 6-1:0.0: Cannot get usb endpoint(s) [ 789.754185][ T5] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 789.763229][ T5] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 09:58:24 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) 09:58:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0xa00, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 789.944095][ T5] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.ff [ 789.953779][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.962061][ T5] usb 3-1: Product: syz [ 789.966851][ T5] usb 3-1: Manufacturer: syz [ 789.971680][ T5] usb 3-1: SerialNumber: syz [ 789.985619][ T9745] usb 2-1: device descriptor read/64, error 18 [ 790.008028][ T3663] usb 6-1: USB disconnect, device number 6 [ 790.077308][ T5] usb 3-1: config 0 descriptor?? [ 790.346913][ T5] usb 3-1: USB disconnect, device number 118 [ 790.387443][ T9745] usb 2-1: device descriptor read/64, error 18 09:58:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0xb00, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 790.682368][ T9745] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 790.742445][T18192] __nla_validate_parse: 3 callbacks suppressed [ 790.742483][T18192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 790.813158][T18197] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:25 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040)) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x204b00) ioctl$TIOCCBRK(r0, 0x5428) 09:58:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0xc00, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 790.930893][T18134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 790.952415][ T9745] usb 2-1: device descriptor read/64, error 18 09:58:25 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) [ 791.206676][T18204] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 791.352529][ T9745] usb 2-1: device descriptor read/64, error 18 [ 791.357718][T18209] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 791.358953][ T8705] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 791.472876][ T9745] usb usb2-port1: attempt power cycle 09:58:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0xf00, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 791.652274][ T8705] usb 6-1: Using ep0 maxpacket: 16 [ 791.758897][T18216] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 791.794043][ T8705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 791.903633][T18223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 792.007134][ T8705] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 792.016517][ T8705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.024907][ T8705] usb 6-1: Product: syz [ 792.029222][ T8705] usb 6-1: Manufacturer: syz [ 792.034053][ T8705] usb 6-1: SerialNumber: syz 09:58:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x1100, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 792.064557][ T8705] usb 6-1: config 0 descriptor?? [ 792.114306][ T8705] kvaser_usb 6-1:0.0: Cannot get usb endpoint(s) 09:58:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x40}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x8001, 0x18080) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000015) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x184, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @empty, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x4844) [ 792.202717][ T9745] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 792.368928][T18229] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 792.449553][ T8705] usb 6-1: USB disconnect, device number 7 09:58:27 executing program 1: ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x7f, 0x10, [0x2, 0xfde3, 0x6, 0x800]}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100e5e1312110fd0b04004f820102030109021b000100000000090400000137b2f70009050e18b7c864c924"], 0x0) 09:58:27 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) [ 792.653500][ T9745] usb 2-1: device descriptor read/8, error -71 09:58:27 executing program 2: openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/raw/rawctl\x00', 0x208000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) [ 792.777968][T18236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 792.883887][ T9745] usb 2-1: device descriptor read/8, error -71 09:58:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x1200, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:27 executing program 5 (fault-call:6 fault-nth:0): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 793.360378][T18257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 793.406095][ T8705] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 793.414323][ T9745] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 793.552744][ T9745] usb 2-1: Using ep0 maxpacket: 16 09:58:28 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 793.673182][ T8705] usb 3-1: Using ep0 maxpacket: 16 [ 793.688465][ T9745] usb 2-1: unable to get BOS descriptor or descriptor too short [ 793.772532][ T9745] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 793.780376][ T9745] usb 2-1: can't read configurations, error -71 [ 793.793038][ T8705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 793.858510][ T9745] usb usb2-port1: unable to enumerate USB device 09:58:28 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x1300, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 793.963859][ T8705] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 793.973222][ T8705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.981554][ T8705] usb 3-1: Product: syz [ 793.986189][ T8705] usb 3-1: Manufacturer: syz [ 793.990915][ T8705] usb 3-1: SerialNumber: syz [ 794.082608][ T8705] usb 3-1: config 0 descriptor?? [ 794.134911][ T8705] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) 09:58:28 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x4, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 794.341882][ T5] usb 3-1: USB disconnect, device number 119 09:58:29 executing program 1: ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000000)) syz_usb_connect(0x0, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB="120150021e6b86108205160061e801020301090209000000104000"], 0x0) 09:58:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x1400, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 794.922890][ T9745] usb 2-1: new high-speed USB device number 32 using dummy_hcd 09:58:29 executing program 2: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x7, 'lc\x00', 0x1, 0x7, 0x71}, 0x2c) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000021c0)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002200)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000002140)={{0x0, 0xee00, r1, r3, 0xffffffffffffffff, 0x1, 0x6}, 0x0, 0x0, 0x3ff, 0x24a, 0x0, 0x10001, 0x4, 0x3, 0x1f, 0x0, 0x0, r2}) [ 795.163174][ T9745] usb 2-1: Using ep0 maxpacket: 16 09:58:30 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 795.282979][ T9745] usb 2-1: unable to get BOS descriptor or descriptor too short [ 795.354996][ T9745] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 795.363810][ T9745] usb 2-1: can't read configurations, error -71 09:58:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x3580, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:30 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x4000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:30 executing program 2: syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) [ 795.889589][T18321] __nla_validate_parse: 4 callbacks suppressed [ 795.889626][T18321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:30 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x22, 0xdf, {0xdf, 0x22, "5de0f92ceaf127415c92a30b373f9a11fcc26fb7738ab2e4593db000d6d82c6d8eb82524a87d55a739a14c7a8c88dcf6a2b0fea3f43ad3477aa4109f825647288dd9565d6581f6e1c6af0ed91d99bb2af0c14ab7195e2573872cb6ef4938f695cf8e8bf01295aa957f09b86dc4fa217f54720fda17d582b941f6c7b745d1c53fe6c41916b32eedeb69d1824c898e080c87003a41eae9a0e4cc7dfe21f3546f4261a51d184e2620fff00f923b68491afd6fdd86b597b9979d1d539cac681ab5adae88facd20bdb4a78e3c7dd163a06ae44369c2313f63b524001d2fe072"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f0000000300)={0x0, 0xf, 0x110, {0x5, 0xf, 0x110, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xe, 0x6, 0x4, 0x11}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0x9, 0x100}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x7, 0x7f, 0x45a8}, @generic={0xd2, 0x10, 0x2, "d0314c4baef9eed0de5200ab90e703187755b26c73aebe9c3d1cffc51f63b8325999b5cf46a6d7ac33f5a3e96b1fca13d1e6f406077626740b002b35b5535ed65a22ec1af5cbcdb8d60a509bffff12f556a9de528f796282ce84876abdacd26e89377a2cf7cf3c3c3bc651e2b310b2ba3dcb261b1c5adc474250217a99450481358e7061b55d739eaf0d72c4f0e7312ca54d17424e45e7c1c3f4582291f8add82f27305c4959b6de7796a5d5ef637372fc825116a749eaa89eb5447a5331705493399d5fbb98a71bf9bcac4f646b73"}, @generic={0xe, 0x10, 0xa, "f8e45039c94ba9177ffafd"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x91, 0xff, 0x0, 0x8}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x87, 0x10, 0x5, 0x20, "0a998ba8", "65581a4c"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x80, 0x1, 0x4, 0x8, 0xffe1}}}, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x13, 0x5, "4027c365ed"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5f}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x4, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 'cd'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000640)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="e6067a714655"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "0c18"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x41}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x2}}) [ 796.152160][ T3663] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 796.255724][T18329] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 796.513842][ T3663] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:58:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x4788, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:31 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 796.683768][ T3663] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 796.693160][ T3663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.701390][ T3663] usb 3-1: Product: syz [ 796.705951][ T3663] usb 3-1: Manufacturer: syz [ 796.710697][ T3663] usb 3-1: SerialNumber: syz [ 796.796909][ T3663] usb 3-1: config 0 descriptor?? [ 796.843892][ T3663] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 796.862193][ T9745] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 796.882701][T18340] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:31 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x40000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 797.051206][ T3663] usb 3-1: USB disconnect, device number 120 [ 797.162286][ T9745] usb 2-1: Using ep0 maxpacket: 16 [ 797.267583][T18349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 797.302951][ T9745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 797.494075][ T9745] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 797.503498][ T9745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.511655][ T9745] usb 2-1: Product: syz [ 797.516157][ T9745] usb 2-1: Manufacturer: syz [ 797.520911][ T9745] usb 2-1: SerialNumber: syz 09:58:32 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x0) 09:58:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x4888, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 797.717265][ T9745] usb 2-1: config 0 descriptor?? [ 797.778101][ T9745] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 797.823679][ T8702] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 797.951976][T18366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 797.983631][T18333] udc-core: couldn't find an available UDC or it's busy [ 797.990715][T18333] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 798.057179][ T5] usb 2-1: USB disconnect, device number 34 [ 798.120597][T18366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 798.193716][ T8702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:58:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x5865, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 798.372922][ T8702] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 798.382478][ T8702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.390619][ T8702] usb 3-1: Product: syz [ 798.395219][ T8702] usb 3-1: Manufacturer: syz [ 798.399964][ T8702] usb 3-1: SerialNumber: syz 09:58:33 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x1000000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 798.543533][ T8702] usb 3-1: config 0 descriptor?? [ 798.584124][ T8702] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 798.596152][T18382] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 798.715977][T18386] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 798.794822][ T8702] usb 3-1: USB disconnect, device number 121 09:58:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x6000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 798.841853][ T5] usb 2-1: new high-speed USB device number 35 using dummy_hcd 09:58:33 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x0) 09:58:33 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2e, 0x8, 0x10000, 0x5c, @private0={0xfc, 0x0, [], 0x1}, @mcast2, 0x40, 0x700, 0x2, 0x6}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={@mcast1, 0x7d, r2}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) [ 799.082006][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 799.152956][T18400] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 799.232997][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 799.411456][T18405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:34 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) [ 799.645783][ T5] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 799.655588][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.664068][ T5] usb 2-1: Product: syz [ 799.668472][ T5] usb 2-1: Manufacturer: syz [ 799.674724][ T8702] usb 3-1: new high-speed USB device number 122 using dummy_hcd 09:58:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x6558, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 799.767922][ T5] usb 2-1: config 0 descriptor?? 09:58:34 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x40000000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 799.809733][ T5] usb 2-1: can't set config #0, error -71 [ 799.862737][ T5] usb 2-1: USB disconnect, device number 35 [ 799.922808][ T8702] usb 3-1: Using ep0 maxpacket: 16 [ 800.062842][ T8702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 800.235826][ T8702] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 800.245246][ T8702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.253701][ T8702] usb 3-1: Product: syz [ 800.258006][ T8702] usb 3-1: Manufacturer: syz [ 800.262940][ T8702] usb 3-1: SerialNumber: syz 09:58:35 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x0) 09:58:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x8035, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 800.353140][ T5] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 800.450034][ T8702] usb 3-1: config 0 descriptor?? [ 800.497492][ T8702] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 800.635414][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 800.733018][ T8702] usb 3-1: USB disconnect, device number 122 [ 800.773571][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:58:35 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x8100, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 800.942701][ T5] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 800.952392][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.960621][ T5] usb 2-1: Product: syz [ 800.965295][ T5] usb 2-1: Manufacturer: syz [ 800.970104][ T5] usb 2-1: SerialNumber: syz [ 801.078818][ T5] usb 2-1: config 0 descriptor?? [ 801.128664][ T5] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) 09:58:35 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x4000000000000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 801.329513][ T5] usb 2-1: USB disconnect, device number 36 [ 801.392011][T18460] __nla_validate_parse: 4 callbacks suppressed [ 801.392047][T18460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 801.542747][ T3663] usb 3-1: new high-speed USB device number 123 using dummy_hcd 09:58:36 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 801.621546][T18463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 801.782824][ T3663] usb 3-1: Using ep0 maxpacket: 16 09:58:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x8847, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 801.902695][ T3663] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 802.073674][ T3663] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 802.083218][ T3663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.091359][ T3663] usb 3-1: Product: syz [ 802.095898][ T3663] usb 3-1: Manufacturer: syz [ 802.100659][ T3663] usb 3-1: SerialNumber: syz [ 802.111926][ T8702] usb 2-1: new high-speed USB device number 37 using dummy_hcd 09:58:36 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 802.290164][T18480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 802.347633][ T3663] usb 3-1: config 0 descriptor?? [ 802.391845][ T8702] usb 2-1: Using ep0 maxpacket: 16 09:58:37 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x1, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfd}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x90, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private1={0xfc, 0x1, [], 0x21}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @remote}}, {0x14, 0x4, @remote}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0xc8}}, 0x4000044) [ 802.512300][ T3663] usb 3-1: can't set config #0, error -71 [ 802.520464][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 802.539450][ T3663] usb 3-1: USB disconnect, device number 123 [ 802.625242][T18485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 802.702641][ T8702] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 802.712180][ T8702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.720399][ T8702] usb 2-1: Product: syz [ 802.724984][ T8702] usb 2-1: Manufacturer: syz [ 802.729758][ T8702] usb 2-1: SerialNumber: syz [ 802.842852][ T8702] usb 2-1: config 0 descriptor?? [ 802.884007][ T8702] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 803.057609][ T8702] usb 2-1: USB disconnect, device number 37 09:58:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x8848, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:37 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x100000000000000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:37 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) [ 803.184829][ T3663] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 803.284428][T18509] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 803.441683][ T3663] usb 3-1: Using ep0 maxpacket: 16 09:58:38 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) [ 803.495421][T18513] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 803.562797][ T3663] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 803.733859][ T3663] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 803.743274][ T3663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.751700][ T3663] usb 3-1: Product: syz [ 803.756004][ T3663] usb 3-1: Manufacturer: syz [ 803.760753][ T3663] usb 3-1: SerialNumber: syz 09:58:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x34000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 803.932533][ T3663] usb 3-1: config 0 descriptor?? [ 803.982025][ T3663] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 804.106308][T18527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:38 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) [ 804.178382][ T8705] usb 3-1: USB disconnect, device number 124 [ 804.262145][T18538] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:39 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x4000000000000000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x400300, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:39 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 804.740808][T18546] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 804.810003][T18550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 804.971582][ T8705] usb 3-1: new high-speed USB device number 125 using dummy_hcd 09:58:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:39 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 805.231715][ T8705] usb 3-1: Using ep0 maxpacket: 16 [ 805.402855][ T8705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 805.592643][ T8705] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 805.602151][ T8705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.610290][ T8705] usb 3-1: Product: syz [ 805.614796][ T8705] usb 3-1: Manufacturer: syz [ 805.619558][ T8705] usb 3-1: SerialNumber: syz [ 805.765507][ T8705] usb 3-1: config 0 descriptor?? 09:58:40 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[], 0x0) [ 805.855251][ T8705] usb 3-1: can't set config #0, error -71 [ 805.878050][ T8705] usb 3-1: USB disconnect, device number 125 09:58:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:40 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x8000000000000000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:40 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:40 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x3000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 806.511836][ T8705] usb 3-1: new high-speed USB device number 126 using dummy_hcd 09:58:41 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 806.740159][T18591] __nla_validate_parse: 4 callbacks suppressed [ 806.740194][T18591] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 806.781505][ T8705] usb 3-1: device descriptor read/64, error 18 09:58:41 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)={0x80000001, 0x0, 0x4, 0x100000, 0x7fc0000, {0x0, 0xea60}, {0x1, 0x2, 0xfd, 0x0, 0x4, 0x2d, "ded846d9"}, 0x80, 0x2, @userptr=0x5}) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000200)=0x80, 0x4) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r3, &(0x7f0000001500), 0x588, 0x0) [ 806.972476][T18597] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:41 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x4000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 807.201316][ T8705] usb 3-1: device descriptor read/64, error 18 [ 807.388957][T18608] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 807.481644][ T8705] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 807.548809][T18609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:42 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) 09:58:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x5000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 807.771455][ T8705] usb 3-1: device descriptor read/64, error 18 [ 807.903661][T18619] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 808.035281][T18625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 808.191250][ T8705] usb 3-1: device descriptor read/64, error 18 [ 808.311446][ T8705] usb usb3-port1: attempt power cycle [ 809.021147][ T8705] usb 3-1: new high-speed USB device number 2 using dummy_hcd 09:58:43 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2312110fd0b04004f820102030109021b000100000000090400000137b2f70009050e0000000000006fe27e7fd73cf7460db942c6b75ddea5a471a5c74a59a62b109105eaa232c2990a3e0ce4e5bf4858a7f444d7531c4eca2fe05c6c95bf7ac25e965276bdbf93e3dd64ec2f4745eaead43cf7b1b06259929266758b2ab09e35f5e4e2733699200e9b94a8e90662875ee0f948980be879603bb97eb2ad95d53cfb87c207265b8b351bf421780d0e58e6705f03687ff18111a9c47e3b29ac902c64ad08998d158958435e73305ed7eea80481b70d03604c51144fd217564ddbbbc93f3f4f72ed7323031ab453cda06c9fcc6b0b27cfe5604400ca9e5c9efe90f7b01bc85742e0ef2c653f"], 0x0) [ 809.268969][ T8705] usb 3-1: device descriptor read/8, error -71 09:58:44 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000180)) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x70000, 0x2, 0x2}, 0x18) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)) 09:58:44 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) 09:58:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x6000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 809.459668][T18635] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 809.521811][ T8705] usb 3-1: device descriptor read/8, error -71 09:58:44 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r1, &(0x7f0000001500), 0x588, 0x0) [ 809.728929][T18648] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 810.044896][ T8705] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 810.161773][ T8705] usb 3-1: Using ep0 maxpacket: 16 09:58:45 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 810.306061][ T8705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 810.324886][T18653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:45 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x62, @rand_addr=0x64010102, 0x4e24, 0x2, 'sh\x00', 0x30, 0x80000001, 0x73}, 0x2c) [ 810.465376][T18655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 810.512084][ T8705] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 810.521659][ T8705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.529809][ T8705] usb 3-1: Product: syz [ 810.534322][ T8705] usb 3-1: Manufacturer: syz [ 810.539078][ T8705] usb 3-1: SerialNumber: syz 09:58:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x8060000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 810.718618][ T8705] usb 3-1: config 0 descriptor?? [ 810.768397][ T8705] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 810.966242][ T8702] usb 3-1: USB disconnect, device number 3 09:58:45 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x9000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 811.751166][ T8702] usb 3-1: new high-speed USB device number 4 using dummy_hcd 09:58:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0xa000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 811.991309][ T8702] usb 3-1: Using ep0 maxpacket: 16 [ 812.037583][T18701] __nla_validate_parse: 4 callbacks suppressed [ 812.037618][T18701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 812.112251][ T8702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 812.166283][T18702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 812.283283][ T8702] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 812.292712][ T8702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.301234][ T8702] usb 3-1: Product: syz [ 812.305551][ T8702] usb 3-1: Manufacturer: syz [ 812.310283][ T8702] usb 3-1: SerialNumber: syz [ 812.377916][ T8702] usb 3-1: config 0 descriptor?? [ 812.422986][ T8702] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) 09:58:47 executing program 2: ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x9, &(0x7f0000000000)="a48b0bea456eaf5a4f166b30d92d70c0b21685b236"}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e2312110fd0bf6ef16bf99aec4d204004f820102030109021b000100000000090400007f0000000009ad792fa3a41fc78c661cd12fa5"], 0x0) 09:58:47 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:47 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRESHEX=0x0, @ANYRESHEX=r0], 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0xb000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:47 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f00000000c0)='./file0\x00') setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100), 0x4) mkdirat(r3, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="440000030000cf70b8b05de273e7ae0865fa772956ee806f4e7287719f6003fa1ccd3a9f0f4b27801c402204a3286f86bb6693aaf3f41a05d277600da70500080000000000691d0ce3e8f3", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0c00060000000000000000000c0004000100010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffff8000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbe79}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x61) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x2400c003) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e2312110fd0b04004f820102030109021b000100000000300400000137b2f70009050e000000000000"], 0x0) [ 812.566504][ T8702] usb 3-1: USB disconnect, device number 4 [ 812.777522][T18725] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 813.126378][T18734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 813.151926][ T3663] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 813.185727][ T8705] usb 2-1: new high-speed USB device number 38 using dummy_hcd 09:58:47 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 813.391909][ T3663] usb 3-1: Using ep0 maxpacket: 16 09:58:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0xc000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 813.431988][ T3663] usb 3-1: too many configurations: 210, using maximum allowed: 8 [ 813.451051][ T8705] usb 2-1: Using ep0 maxpacket: 16 [ 813.517539][T18717] dccp_close: ABORT with 84 bytes unread [ 813.551954][ T3663] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 813.559863][ T3663] usb 3-1: can't read configurations, error -61 [ 813.592007][ T8705] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 813.602894][ T8705] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 09:58:48 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8c}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xdc4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000002400000125bd7000fddbdf250600000006000400000000000600030000000000060004000000000006000400000000000600030000000000060003000000000006000400000000000600040000000000974da4da1ff935f1e44eb3f5aeccc306ab0d26f48ee556cae876ab6e459d9bd3a637c3f8a8afe5e0e8d36e4afe699899c70e0d59c9c7ce02dbb23d2db2f6daa85c45b669a00710345f1c3d50a486f0d06e1244601f84f0f51498403482885c42c8833ca876d8d885fe6da48c3aef4a462780f2f5f436f4d6898e143dffd0597559349d57852f0bc2193a5bbfdef25b45c9b8e3c4216a1c"], 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 813.728788][T18743] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:48 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 813.774206][ T3663] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 813.835722][ T8705] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 813.845059][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.853515][ T8705] usb 2-1: Product: syz [ 813.857823][ T8705] usb 2-1: Manufacturer: syz [ 813.862718][ T8705] usb 2-1: SerialNumber: syz [ 814.008753][T18748] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 814.012879][ T8705] usb 2-1: config 0 descriptor?? [ 814.020948][ T3663] usb 3-1: Using ep0 maxpacket: 16 [ 814.062915][ T3663] usb 3-1: too many configurations: 210, using maximum allowed: 8 [ 814.202123][ T3663] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 814.209906][ T3663] usb 3-1: can't read configurations, error -61 09:58:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0xf000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 814.267808][ T9034] usb 2-1: USB disconnect, device number 38 [ 814.282949][ T3663] usb usb3-port1: attempt power cycle 09:58:49 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:49 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x4) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 814.531472][T18766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 814.752087][T18772] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 815.010903][ T3663] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 815.102189][ T3663] usb 3-1: Using ep0 maxpacket: 16 [ 815.142619][ T3663] usb 3-1: too many configurations: 210, using maximum allowed: 8 [ 815.272299][ T3663] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 815.280058][ T3663] usb 3-1: can't read configurations, error -61 [ 815.460898][ T3663] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 815.552414][ T3663] usb 3-1: Using ep0 maxpacket: 16 [ 815.592643][ T3663] usb 3-1: too many configurations: 210, using maximum allowed: 8 [ 815.722504][ T3663] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 815.730347][ T3663] usb 3-1: can't read configurations, error -61 [ 815.761103][ T3663] usb usb3-port1: unable to enumerate USB device 09:58:50 executing program 1: syz_usb_connect(0x0, 0x146, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0xd1, 0x82, 0xd5, 0x10, 0x40d, 0x3801, 0x5707, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x134, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0xf2, 0x9, 0xc, 0xea, 0xdc, 0x23, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x201, 0x2, 0x3a, 0x1000, 0x4, 0x9}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x6, 0x2, [0x9, 0x1], 0x8}, @feature_unit={0x7, 0x24, 0x6, 0x6, 0x4}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x3, 0x3, [0x5, 0x4, 0x7], 0xfb}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0xc5, "de5734"}]}], [{{0x9, 0x5, 0xa, 0x0, 0x20, 0x4, 0x2, 0x8}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0x9, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xfffd}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xff, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x9}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1f, 0x7f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x31, 0xa8}]}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x6, 0xff, 0x8, [@generic={0x20, 0x9, "60256291e282e67f3cfe04aab60d66bc733bf394632498cb49f0f86855b1"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x3, 0x3, 0x3}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x2, 0x80, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0xf000}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x37, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3}, @generic={0x29, 0x22, "96f47adb5290cf8e6a1fa9458443317f273024f7fd07b108a7f54426ae3db3ca3e871566c2843f"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x0, 0x1f, 0x0, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x1, 0x81, 0x6}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x3, 0xf4, 0x40}}]}}]}}]}}, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0xffffffff00000001, 0x0, 0x8, 0x9}) 09:58:50 executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r1, r2, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000180)={{{0x9, 0x1}}, 0x95, 0x6, &(0x7f00000000c0)="317398e15047efd6cfca3045a38e18556485bbd7cbb4de8a9a8b6e81c83f886bfa6d8face0a761795a2c272ccc61f4120a1f844420dc0327dbaf3638b27fe36216ee9cfa738b3d99b3fc40447a7a1a593a80b916a327610ec83f0156df077f31da7fa19e51fa6618e9d11e657905c7bd27563423aa9984b435299e4f012287e30822e201859a0a213c04060dcbed05c53b4d76d94f"}) accept(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:58:50 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:50 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/234, 0xea) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000900)='/dev/dlm-control\x00', 0x40042, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000940)=0xe19, 0x4) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) keyctl$get_persistent(0x7, r5, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000010c0)={0x0, 0x0}, &(0x7f0000001100)=0xc) keyctl$get_persistent(0x7, r7, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0002000000000000e6ae51ddfcdbdf25e00000020000000000000000000000000000000000000000014e205b464e2200000a00801087000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0500000000000000050000000000000009000000000000000400000000000000ff7f000000000000040000000000000004000000000000000900000000000000000000006000000007000000000000000300000000000000060000000000000005000000b76b6e000201000100000000040000000000000000001300ac14140f000000000000000000000000ac141425000000000000000000000000000000000a000000"], 0xfffffffffffffcfc}}, 0x0) sendmmsg(r3, &(0x7f0000001500), 0x588, 0x0) 09:58:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 816.122126][T18791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:51 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 816.331927][T18793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 816.345002][ T3663] usb 2-1: new high-speed USB device number 39 using dummy_hcd 09:58:51 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e22}, 0xffffffffffffff52) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x1800002, 0x13, 0xffffffffffffffff, 0x82000000) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000002400000125bd7000fddbdf250600000006000400000000000600030000000000060004000000825ac98561ba28044c15bcfd9f66fcc47f523c00000600030000000000060003000000000006000404ca57bea5fafe7a0ae38d60028885a1e8000000000600040000000000"], 0x54}}, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 816.511337][ T3217] usb 3-1: new high-speed USB device number 9 using dummy_hcd 09:58:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x11000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 816.590904][ T3663] usb 2-1: Using ep0 maxpacket: 16 [ 816.712004][ T3663] usb 2-1: unable to get BOS descriptor or descriptor too short [ 816.750755][ T3217] usb 3-1: Using ep0 maxpacket: 16 09:58:51 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 816.770833][ T3663] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 816.778594][ T3663] usb 2-1: can't read configurations, error -71 [ 816.891708][ T3217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 817.050207][T18815] __nla_validate_parse: 1 callbacks suppressed [ 817.050247][T18815] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 817.092224][ T3217] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 817.101605][ T3217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.109781][ T3217] usb 3-1: Product: syz [ 817.114508][ T3217] usb 3-1: Manufacturer: syz [ 817.119283][ T3217] usb 3-1: SerialNumber: syz 09:58:51 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:52 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0xe6, @ipv4={[], [], @broadcast}, 0x1}, 0x1c) listen(r0, 0x2) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000002400000125bd7000fddbdf250600000006000400000000000600030000000000060004000000000006000400000000000600030000000000e233a09ae64e933306000400000000000600040000000000"], 0x54}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r5, r6, 0x0) write$cgroup_type(r6, 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f0000000180)={0xe97, 0x6}) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[0x80000000, 0x40, 0x6, 0x1f, 0xf3, 0xffff]}) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x0) [ 817.278225][ T3217] usb 3-1: config 0 descriptor?? 09:58:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x12000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 817.337233][ T3217] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 817.500692][ T3663] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 817.525564][ T8705] usb 3-1: USB disconnect, device number 9 [ 817.569257][T18830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 817.741421][ T3663] usb 2-1: Using ep0 maxpacket: 16 [ 817.851270][T18830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 817.861572][ T3663] usb 2-1: unable to get BOS descriptor or descriptor too short 09:58:52 executing program 1: ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000000)=0xc9ef) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) [ 817.953299][ T3663] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 817.961372][ T3663] usb 2-1: can't read configurations, error -71 [ 818.014985][ T3663] usb usb2-port1: attempt power cycle [ 818.344160][ T8705] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 818.591190][ T8705] usb 3-1: Using ep0 maxpacket: 16 [ 818.725990][ T8705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 818.751024][ T3663] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 818.843998][ T3663] usb 2-1: Using ep0 maxpacket: 16 [ 818.934575][ T8705] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 818.944050][ T8705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.952440][ T8705] usb 3-1: Product: syz [ 818.956878][ T8705] usb 3-1: Manufacturer: syz [ 818.961786][ T8705] usb 3-1: SerialNumber: syz [ 818.983399][ T3663] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 819.052973][ T8705] usb 3-1: config 0 descriptor?? [ 819.092220][ T8705] kvaser_usb 3-1:0.0: Cannot get usb endpoint(s) [ 819.151813][ T3663] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 819.161387][ T3663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.169529][ T3663] usb 2-1: Product: syz [ 819.174326][ T3663] usb 2-1: Manufacturer: syz [ 819.179060][ T3663] usb 2-1: SerialNumber: syz 09:58:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x13000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:53 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:53 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002840)=[{{&(0x7f0000000040)=@tipc, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/162, 0xa2}, {&(0x7f0000001300)}, {&(0x7f0000001340)=""/45, 0x2d}, {&(0x7f0000001380)=""/148, 0x94}], 0x5, &(0x7f00000014c0)=""/48, 0x30}, 0x86}, {{&(0x7f0000001500)=@tipc=@name, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001580)=""/251, 0xfb}, {&(0x7f0000001680)=""/97, 0x61}, {&(0x7f0000001700)=""/39, 0x27}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/104, 0x68}], 0x5}, 0x7fffffff}], 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000090000000125bd7000fddbdf25060000000600040000000000060003000000000006000400000000000600040000000000060003000000009ae9e2000600030000000000060004000000000006000400000000005fe35b0b6ee566a5db307bd870c0cc339991c904732cb767acc599bd4ec23e3f7b300ede881ff87b17bfbd2fae94e84fbcc9b1e496b83b9cde2fe8199138313803f7d6239fdf6b0f5d30cb90253afcb66b3601c6ed9edd"], 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:54 executing program 2: syz_usb_connect(0x4, 0x9bf, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x24, 0x3b, 0x9f, 0x8, 0x5da, 0x94, 0x8d50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9ad, 0x4, 0xc2, 0x80, 0x40, 0x3, [{{0x9, 0x4, 0x9b, 0x0, 0xf, 0x6f, 0x12, 0xfe, 0x8, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '\n'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0xb7f7, 0x17}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@acm={0x4, 0x24, 0x2, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @mdlm_detail={0xa8, 0x24, 0x13, 0x5d, "91c57cd8ef1d2bc08e7af7f3ef4d1d285a2a17095660b5c76121e52d842ad83c8d50610204efc6a3e47e19d63e6464de9d4aec83cd2305a6a86920e1adec1c603abad3d84c9491d67bca4422d4efa04a17467e46c90986885ec66fb156fe651cfe49479b9f9cf85945f6c8aa61e02e8698eb20826bb65b1626423295f3da14d3809c242fc6f1a551384391d1476ead262a4893e430c64e50dd8315de125f2f88496b3f85"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0x2, 0xfd, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x7f, 0x3, 0x1, [@generic={0x4e, 0x9, "1b96130f1914ac2d6548c06712a277d3c0366f12f4640c8cab9a7ded0d343aba075ea5f405af83cb900835336ac95d7a979a3d6822f37eb6d12c169ae6a1dd9054b65857823daa6a43c72e09"}]}}, {{0x9, 0x5, 0x33fcbee36f675ae9, 0xc, 0x20, 0x2, 0x20, 0x8, [@generic={0x62, 0x31, "e9f7094156654f32815bc6965b71d1480abb8f2c0db5efb13252d3913541e41ad0b098cad94d390f582dc504f32e1d14b648a3693d704dcaba93e448d7fae390710748e398233870156f73cb97fc22837f65ba34f37e39ccbb608b964a21141a"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6b, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x6}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x4, 0xcf, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x9}]}}, {{0x9, 0x5, 0x1, 0xc, 0x20, 0x3, 0xfd, 0xac, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x39}]}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x7, 0x3, 0x7, [@generic={0x1c, 0x8, "c5e68dc27c51d2187f57bb0e7d726a32b39cba9ff01e8e710304"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x240, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3f, 0x5}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x1f, 0x3, 0x7, [@generic={0x40, 0xfbac35e0d5cdef27, "11344730a1e0daf0e501b5d333f99639c9cb9c14cde14d8621fd4d04a15b6588fb58244b485199b57fde3db1840d33eeeccdab99cb482dd8b5510affbe87"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x29, 0x614}]}}, {{0x9, 0x5, 0x5, 0x1, 0x250, 0x3, 0x20, 0xa6}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0x82, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x6, 0x1, 0x9, [@generic={0x1e, 0x22, "d2cd027f5dd05ad66ee5058384b82f79d97a6aa160bac4ed7c21f2ff"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xbf, 0x6, 0x36}}, {{0x9, 0x5, 0x3, 0x10, 0x240, 0x7, 0x80, 0x3, [@generic={0x1e, 0x8, "ecfc6d054142de6e6806686300aabecb0043a0d33a9377109c9c0f5c"}, @generic={0xb7, 0x10, "3526239d2a691e0d4d8f5718f24baca1df26613ebf488cc8355c6a4d39d5e31067116c308e6367dbf76e15e6065d8c4828b3267a28a7dfaab47fec4d2e424665982d31ab7c1eeec662a4c67174344cc07724bc3bcd5cdbfd74963b00395ea1d235a9e64de4b820a509f45cb8d46652b8f474bb3fb77bb67efd526abd77569fec354077999ecbf8d82f43d006e8b5dc153511b07610c7cf25aeb4effbd75415e238c0018878f8c0c117990771feaf4040e6e02272ba"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x9, 0x0, 0x1f}}]}}, {{0x9, 0x4, 0x6e, 0x62, 0x1, 0xcc, 0xd5, 0x19, 0x9, [], [{{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x81, 0xc1, 0x3f}}]}}, {{0x9, 0x4, 0x5c, 0x4, 0x6, 0x50, 0xab, 0x7e, 0x0, [@uac_as, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x5, 0x7f}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x1, 0x8, 0x81}, @network_terminal={0x7, 0x24, 0xa, 0x80, 0x2, 0x4, 0xd5}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x1f, 0x59b, 0x0, 0xff, 0x0, 0x8b}]}], [{{0x9, 0x5, 0xa, 0x1, 0x3ff, 0x6d, 0x17, 0x0, [@generic={0xda, 0x2, "c611dac415aad6ce86d78de3cb7a52ae61f8ec92b3f1d0c8a9091db98e27ec5dc8316db5771f155d16fc6b3807404ae22cf337911bc9cb80831ff034c0c01ccbef35aa400f8feae81bc1533356a3aad22e77e80e4bb4c3a332c3b7a57590f3bb672917f8c273e2a2b79c163c827026a0b51a1dc39b74b95ea895cb9889ef99c93d5cabc0a23ec300f658b0764f4f24cfa7a2f74373e7ac58bd179b14f5be0a9ddb678482e0539372e9ec1d93c8ae5ebff608832541fbd660c65e9e7d933633ba3a863d31f1c7d84582a6b7566ca51fd8a08d429e2b899b36"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xea, 0x4}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0xd, 0x8, 0xdc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x5}]}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x1, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6eac}]}}, {{0x9, 0x5, 0xe, 0x12, 0x400, 0x7b, 0xd1, 0xc9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x1f, 0x6, 0x5, [@generic={0xa3, 0x9, "f6ddfcb8b7e4c4b06ae6b21689cf5b8f082fd83f0513653c02ded92befa3e55e312dd35e5b7d432407f17ec3566265c7b5085d0af63048cee15caca6cba09311807cd81a5d8b58640c92bc3153048775fc63caaeaf3acd7b03e4657befd237bdab95f379cd3eab8925189bbf34c91c2579eb60e46bdaf65dacbf2458979e0c4c0e5b7677cf408ad6c5a7b9db5d2cfa05300b02f5905d8f5224b46583e9a3b6e517"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x81, 0xd5, 0x2, [@generic={0x5a, 0x31, "47083cae8ba51e674cb54db443a351bd075526ad36e974f74962770c481d17c91af129a512ab1c33b84e3cf7741959261ffc04407207c78ae3ff7c044ff1d5097ae05ff04baa38707d9e80a872aea124e321a7f0db7e758d"}]}}]}}, {{0x9, 0x4, 0xdb, 0x3f, 0xe, 0x9c, 0x2d, 0x21, 0xe9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'C'}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x1448, 0x3}, [@mdlm_detail={0x72, 0x24, 0x13, 0xef, "8f6e777b4d020b3d41b693c6074a1be8bb440f07d7358a1e04fdd1e1c930f346a6fe2cbac60c8bf140057adb70b4bfcc1378dab71f400325bafe3c6c1ce532ee3d24746ed4066627e0d39f722f27aa78f88fb4446792c8229072cab7b931267fe28674da2d7fe3718ee8f1fc6fa4"}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x2, 0x9, 0x9}, @country_functional={0x10, 0x24, 0x7, 0x6, 0xaee1, [0x1, 0x7, 0x3, 0xaf4e, 0xff]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x40}, @mbim_extended={0x8, 0x24, 0x1c, 0x40, 0x3f, 0x8}]}, @hid_hid={0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x424}}], [{{0x9, 0x5, 0xa, 0x12, 0x8, 0x33, 0x3}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0xff, 0x1, 0x5, [@generic={0xc7, 0xa, "a24035aa93e59c4822d8d347f34aa80cc6e1c22417822289d45c371c5b8b6ca68a5a34f85a60b1126349ffd81786f3c49a71d29fb51562ae4ea35795a39a4a304d5fda5b0c95603bfcefcf55f05b48feacedc68e634f4b84459dbb94fcb9c791d5cde956c72e83e79a8efb3c8daa98864d4982e57a19a9a15d97fd86f42f23885d6ca88f488eb84c07e77656961b5051be5d4218fde64c2c511b15c4b533e53a3e657c20701ca0d5788c116a08e70d7c5718ca0afea010534dc0b112078cb888f7fa20c471"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0xe0, 0x1, 0x6}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x9, 0xb, 0x4, [@generic={0x13, 0xb, "8d717f40786a0627f4bf890b238792c2e4"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xd609}]}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x4, 0x6, 0x1}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x5, 0x81, 0x9, [@generic={0x25, 0x21, "a149f40dec7b812dbf54b6732e2bcacf0df42250e80d5bec49148dbea8feedbed8cdc4"}, @generic={0x6e, 0x23, "199dd579a1c52cecdc26898cce3d28c1bf38ed3abba5c91eb5db63cde0692afc3e5dd6932e26f43b9d525611ab829d6e31f793da040c85611edff6fcf89681f91620c12b1129ce77d31e47e5ea34e4d5e2f01448c8b77573a409caaf6cd7bd977cf4abc3ca8c93acf665f0a1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x8, 0x20}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x1, 0x81, 0x9}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0xc0, 0x8, 0x4c}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0xff, 0x0, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x7f, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x1}, @generic={0x37, 0xe, "7c707621186b00b309199af42527b66261782df1676eaf49007df74fad3c127dcf87118fd10493113c50fa999823fa83071df29314"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x0, 0x8, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0xd351}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0xfc, 0x9f, 0x9, [@generic={0x3b, 0x22, "a215c2d3ba0e3dcb92a169a5febe0aa59157bb0dfa59b8378e4e922a2d4fc31f60372b946f2ac03a67a2e6962c07e31bb156e144b029d0a812"}, @generic={0x54, 0x31, "9efbca657e91dadea1c021a45630cd0d991c9a4533c29395b2a0539231c0ac43f9e5cb9b72ca2d60b7cc23561585809ff0fe37a509306b546496d77c0e9ec05f2e735849c797d843f313e58f3025779fa340"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x4, 0x89, 0x2b}}]}}]}}]}}, 0x0) [ 819.263522][ T8702] usb 3-1: USB disconnect, device number 10 [ 819.284539][ T3663] usb 2-1: config 0 descriptor?? [ 819.323219][ T3663] kvaser_usb 2-1:0.0: Cannot get usb endpoint(s) [ 819.427258][T18868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:54 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 819.527808][ T9745] usb 2-1: USB disconnect, device number 41 09:58:54 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r3, &(0x7f0000003840)=[{{&(0x7f0000000180)=@sco, 0x80, &(0x7f0000001440)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/51, 0x33}, {&(0x7f0000001240)=""/186, 0xba}, {&(0x7f0000001300)=""/17, 0x11}, {&(0x7f0000001340)=""/202, 0xca}], 0x5, &(0x7f00000014c0)=""/121, 0x79}, 0x7}, {{&(0x7f0000001540)=@pppol2tpv3, 0x80, &(0x7f0000001880)=[{&(0x7f00000015c0)=""/218, 0xda}, {&(0x7f00000016c0)=""/194, 0xc2}, {&(0x7f00000017c0)=""/180, 0xb4}], 0x3, &(0x7f00000018c0)=""/4096, 0x1000}, 0x200}, {{&(0x7f00000028c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002940)=""/119, 0x77}, {&(0x7f00000029c0)=""/28, 0x1c}, {&(0x7f0000002a00)=""/109, 0x6d}], 0x3, &(0x7f0000002ac0)=""/88, 0x58}, 0xe268}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002b40)=""/98, 0x62}, {&(0x7f0000002bc0)=""/171, 0xab}, {&(0x7f0000002c80)=""/15, 0xf}, {&(0x7f0000002cc0)=""/37, 0x25}, {&(0x7f0000002d00)=""/191, 0xbf}], 0x5}, 0x3000000}, {{&(0x7f0000002e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002ec0)=""/90, 0x5a}], 0x1, &(0x7f0000002f80)=""/91, 0x5b}, 0xffff7fff}, {{&(0x7f0000003000)=@hci, 0x80, &(0x7f0000003240)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f00000030c0)=""/215, 0xd7}, {&(0x7f00000031c0)=""/52, 0x34}, {&(0x7f0000003200)=""/41, 0x29}], 0x4, &(0x7f0000003280)=""/136, 0x88}, 0x2}, {{&(0x7f0000003340)=@ipx, 0x80, &(0x7f00000036c0)=[{&(0x7f00000033c0)=""/93, 0x5d}, {&(0x7f0000003440)=""/165, 0xa5}, {&(0x7f0000003500)=""/71, 0x47}, {&(0x7f0000003580)=""/214, 0xd6}, {&(0x7f0000003680)}], 0x5, &(0x7f0000003740)=""/203, 0xcb}, 0x4}], 0x7, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 819.638480][T18872] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x14000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 819.877187][T18888] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:54 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 819.963643][T18893] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x60000000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) 09:58:54 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000002400000125bd7000fddbdf2506000000060004ff7f0000000600030000000000060004000000000006000400000000000600030000000000060003000000000006000400000000000600040000000000d7a246329bd236f5d61e0b17a92d9fe977c8794afbe4e352a5532de23eb08540f799ebb9dab59954dbae3278656d18bfbb1f94f177784ff38e578ba36603166ed0e04276271690fbb5ddea0893de1c7dacb52ac1c03bcee14bdafd7b711325bf000a4c2b5686ed212e83192d393dce0636306cbdd4468073ac40af6a721aa634cacf645576a716e466edd82b8c182673752e0df5dac1c62d904cf9cfbbb0b1dbcd51af5d62dc5ecd264b846cf16adcfa328a3e89f1e95bb811c8a052d3e58737cc208fd3d32dbc8949c349884ffc7e1eed0303f9bb3d9bfd235fa99fd6ab7788de33b4aeaaf0beb8290e7537f373ba477d3ed268dacb7ffe0969583b5b184cc4976a70ee94d1f5c68421f3bf8703a1cfe5c97d185fe20b822d1ce6497b76cdc1aabfe370c22a10f4d76c058bdd74201643a99b99596c6d8dc536c87876c408cf243a0a70c57fe42edd96776d257f3f4959aa05c410002ebe"], 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:54 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r0, r1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$CHAR_RAW_DISCARD(r1, 0x1277, &(0x7f0000000000)=0x3f) [ 820.328710][T18899] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:55 executing program 2: syz_usb_connect(0x6, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe2, 0x31, 0x21, 0x10, 0xbfd, 0x4, 0x824f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0xb2, 0xf7, 0x0, [], [{{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) 09:58:55 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 09:58:55 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000340)={0x1f, @any, 0x85}, 0xa) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x210081, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r4, r5, 0x0) write$cgroup_type(r5, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x79, 0x1}, 0x7) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000280)=""/184) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 820.592077][T18904] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x64, 0xd27, 0x65580000, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macsec0\x00'}]}}]}, 0x48}}, 0x0) [ 820.801335][ T8702] usb 2-1: new high-speed USB device number 42 using dummy_hcd 09:58:55 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 821.040701][ T8702] usb 2-1: Using ep0 maxpacket: 16 [ 821.049126][T18922] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 09:58:55 executing program 5: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e21, @multicast2}, {0x6, @random="0e5eb9458b1d"}, 0x0, {0x2, 0x4e24, @multicast1}, 'veth1_to_team\x00'}) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = accept4$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c, 0x80800) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x10000}, 0x4) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000032c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r6, &(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x80) dup3(r4, r5, 0x0) write$cgroup_type(r5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_GET(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xd}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008804}, 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 821.181464][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 09:58:55 executing program 2: syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xbc, 0x22, 0x6b, 0x10, 0x411, 0x15d, 0x4976, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x85, 0x0, 0x1, 0x9f, 0x8, 0xce, 0x0, [], [{{0x9, 0x5, 0xe, 0x0, 0x0, 0x0, 0x2}}]}}]}}]}}, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0xff, &(0x7f0000000040)=0x2) 09:58:56 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x54, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, 0x6, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x54}}, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) [ 821.360151][ T8702] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0004, bcdDevice=82.4f [ 821.369659][ T8702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.378001][ T8702] usb 2-1: Product: syz [ 821.382427][ T8702] usb 2-1: Manufacturer: syz [ 821.387161][ T8702] usb 2-1: SerialNumber: syz [ 821.516745][T18933] ===================================================== [ 821.524088][T18933] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 821.531561][T18933] CPU: 0 PID: 18933 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 821.540238][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.550305][T18933] Call Trace: [ 821.553619][T18933] dump_stack+0x21c/0x280 [ 821.557972][T18933] kmsan_report+0xf7/0x1e0 [ 821.562417][T18933] kmsan_internal_check_memory+0x238/0x3d0 [ 821.568225][T18933] ? kmsan_get_metadata+0x116/0x180 [ 821.573418][T18933] ? kmsan_get_metadata+0x116/0x180 [ 821.578615][T18933] kmsan_copy_to_user+0x81/0x90 [ 821.583479][T18933] _copy_to_user+0x18e/0x260 [ 821.588130][T18933] move_addr_to_user+0x3de/0x670 [ 821.593093][T18933] __sys_getsockname+0x407/0x5e0 [ 821.598030][T18933] ? kmsan_get_metadata+0x116/0x180 [ 821.603225][T18933] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 821.609026][T18933] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 821.615202][T18933] ? __prepare_exit_to_usermode+0x16c/0x560 [ 821.621185][T18933] __se_sys_getsockname+0x91/0xb0 [ 821.626211][T18933] __x64_sys_getsockname+0x4a/0x70 [ 821.631319][T18933] do_syscall_64+0xad/0x160 [ 821.635837][T18933] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 821.641722][T18933] RIP: 0033:0x45d579 [ 821.645598][T18933] Code: Bad RIP value. [ 821.649654][T18933] RSP: 002b:00007f7d802b1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 821.658055][T18933] RAX: ffffffffffffffda RBX: 0000000000004680 RCX: 000000000045d579 [ 821.666037][T18933] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 0000000000000009 [ 821.674086][T18933] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 821.682049][T18933] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 821.690012][T18933] R13: 000000000169fb6f R14: 00007f7d802b29c0 R15: 000000000118cf4c [ 821.697984][T18933] [ 821.700303][T18933] Local variable ----address@__sys_getsockname created at: [ 821.707499][T18933] __sys_getsockname+0x91/0x5e0 [ 821.712355][T18933] __sys_getsockname+0x91/0x5e0 [ 821.717187][T18933] [ 821.719505][T18933] Bytes 2-3 of 24 are uninitialized [ 821.724697][T18933] Memory access of size 24 starts at ffff88804cabbde8 [ 821.731443][T18933] Data copied to user address 0000000020000440 [ 821.737577][T18933] ===================================================== [ 821.744492][T18933] Disabling lock debugging due to kernel taint [ 821.750634][T18933] Kernel panic - not syncing: panic_on_warn set ... [ 821.757217][T18933] CPU: 0 PID: 18933 Comm: syz-executor.5 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 821.767446][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.777666][T18933] Call Trace: [ 821.780977][T18933] dump_stack+0x21c/0x280 [ 821.785376][T18933] panic+0x4d7/0xef7 [ 821.789283][T18933] ? add_taint+0x17c/0x210 [ 821.793724][T18933] kmsan_report+0x1df/0x1e0 [ 821.798452][T18933] kmsan_internal_check_memory+0x238/0x3d0 [ 821.804254][T18933] ? kmsan_get_metadata+0x116/0x180 [ 821.809449][T18933] ? kmsan_get_metadata+0x116/0x180 [ 821.814669][T18933] kmsan_copy_to_user+0x81/0x90 [ 821.819517][T18933] _copy_to_user+0x18e/0x260 [ 821.824112][T18933] move_addr_to_user+0x3de/0x670 [ 821.829052][T18933] __sys_getsockname+0x407/0x5e0 [ 821.833990][T18933] ? kmsan_get_metadata+0x116/0x180 [ 821.839799][T18933] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 821.845609][T18933] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 821.851758][T18933] ? __prepare_exit_to_usermode+0x16c/0x560 [ 821.857650][T18933] __se_sys_getsockname+0x91/0xb0 [ 821.862674][T18933] __x64_sys_getsockname+0x4a/0x70 [ 821.867888][T18933] do_syscall_64+0xad/0x160 [ 821.872386][T18933] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 821.878268][T18933] RIP: 0033:0x45d579 [ 821.882146][T18933] Code: Bad RIP value. [ 821.886218][T18933] RSP: 002b:00007f7d802b1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 821.894622][T18933] RAX: ffffffffffffffda RBX: 0000000000004680 RCX: 000000000045d579 [ 821.902585][T18933] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 0000000000000009 [ 821.910546][T18933] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 821.919725][T18933] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 821.927705][T18933] R13: 000000000169fb6f R14: 00007f7d802b29c0 R15: 000000000118cf4c [ 821.936380][T18933] ------------[ cut here ]------------ [ 821.942352][T18933] kernel BUG at mm/kmsan/kmsan.h:87! [ 821.947681][T18933] invalid opcode: 0000 [#1] SMP [ 821.952514][T18933] CPU: 0 PID: 18933 Comm: syz-executor.5 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 821.962545][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.972605][T18933] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 821.979173][T18933] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 821.998854][T18933] RSP: 0018:ffff88804cabb808 EFLAGS: 00010046 [ 822.004904][T18933] RAX: 0000000000000002 RBX: 0000000004c90044 RCX: 0000000004c90044 [ 822.012963][T18933] RDX: 0000000000000000 RSI: 0000000000000120 RDI: ffff88804cabb8ec [ 822.020914][T18933] RBP: ffff88804cabb8b0 R08: ffffea000000000f R09: ffff88812fffa000 [ 822.028865][T18933] R10: 0000000000000002 R11: ffff888105210000 R12: 0000000000000000 [ 822.036816][T18933] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 822.044838][T18933] FS: 00007f7d802b2700(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000 [ 822.053783][T18933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.060346][T18933] CR2: 00000000200032c0 CR3: 0000000063e6a000 CR4: 00000000001406f0 [ 822.068304][T18933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 822.076253][T18933] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 822.084199][T18933] Call Trace: [ 822.087489][T18933] kmsan_check_memory+0xd/0x10 [ 822.092234][T18933] iowrite8+0x99/0x300 [ 822.096377][T18933] pvpanic_panic_notify+0xb7/0xe0 [ 822.101512][T18933] ? pvpanic_mmio_remove+0x60/0x60 [ 822.106851][T18933] atomic_notifier_call_chain+0x123/0x290 [ 822.112762][T18933] panic+0x560/0xef7 [ 822.116765][T18933] ? add_taint+0x17c/0x210 [ 822.121173][T18933] kmsan_report+0x1df/0x1e0 [ 822.125663][T18933] kmsan_internal_check_memory+0x238/0x3d0 [ 822.131452][T18933] ? kmsan_get_metadata+0x116/0x180 [ 822.136641][T18933] ? kmsan_get_metadata+0x116/0x180 [ 822.141833][T18933] kmsan_copy_to_user+0x81/0x90 [ 822.146806][T18933] _copy_to_user+0x18e/0x260 [ 822.151600][T18933] move_addr_to_user+0x3de/0x670 [ 822.156560][T18933] __sys_getsockname+0x407/0x5e0 [ 822.161503][T18933] ? kmsan_get_metadata+0x116/0x180 [ 822.166708][T18933] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 822.172512][T18933] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 822.178648][T18933] ? __prepare_exit_to_usermode+0x16c/0x560 [ 822.184526][T18933] __se_sys_getsockname+0x91/0xb0 [ 822.189538][T18933] __x64_sys_getsockname+0x4a/0x70 [ 822.194629][T18933] do_syscall_64+0xad/0x160 [ 822.199203][T18933] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 822.205229][T18933] RIP: 0033:0x45d579 [ 822.209101][T18933] Code: Bad RIP value. [ 822.213145][T18933] RSP: 002b:00007f7d802b1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 822.221624][T18933] RAX: ffffffffffffffda RBX: 0000000000004680 RCX: 000000000045d579 [ 822.229589][T18933] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 0000000000000009 [ 822.237542][T18933] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 822.245492][T18933] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 822.253628][T18933] R13: 000000000169fb6f R14: 00007f7d802b29c0 R15: 000000000118cf4c [ 822.261581][T18933] Modules linked in: [ 822.265477][T18933] ---[ end trace 85957ce3435918e4 ]--- [ 822.270924][T18933] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 822.278206][T18933] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 822.298049][T18933] RSP: 0018:ffff88804cabb808 EFLAGS: 00010046 [ 822.304094][T18933] RAX: 0000000000000002 RBX: 0000000004c90044 RCX: 0000000004c90044 [ 822.312043][T18933] RDX: 0000000000000000 RSI: 0000000000000120 RDI: ffff88804cabb8ec [ 822.320014][T18933] RBP: ffff88804cabb8b0 R08: ffffea000000000f R09: ffff88812fffa000 [ 822.327963][T18933] R10: 0000000000000002 R11: ffff888105210000 R12: 0000000000000000 [ 822.335912][T18933] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 822.343866][T18933] FS: 00007f7d802b2700(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000 [ 822.352772][T18933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.359437][T18933] CR2: 00000000200032c0 CR3: 0000000063e6a000 CR4: 00000000001406f0 [ 822.367751][T18933] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 822.375701][T18933] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 822.383653][T18933] Kernel panic - not syncing: Fatal exception [ 822.390456][T18933] Kernel Offset: disabled [ 822.394782][T18933] Rebooting in 86400 seconds..