YRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x0, 0xfffffffffffffffc, 0x22, 0x8, @scatter={0x1, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/140, 0x8c}]}, &(0x7f0000000100)="4f48af599d1bbb15217c54d23c20141a694563fa1e644a85cfa0554e2ac74f0f2a88", &(0x7f0000000140)=""/190, 0x101, 0x10, 0x2, &(0x7f0000000240)}) 07:37:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x34}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 562.546605][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.553001][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 07:37:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x220000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:37:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x35}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 562.599191][T15467] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 562.607074][T15462] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:37:48 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002380a000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:37:48 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:37:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x36}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 562.766544][T15479] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:37:48 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002390a000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 562.812279][T15483] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 562.935904][T15488] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 562.965327][ T5] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 563.345358][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.356493][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.366514][ T5] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 563.375933][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.385648][ T5] usb 6-1: config 0 descriptor?? [ 563.945330][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 563.951293][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 563.959478][ T5] usb 6-1: USB disconnect, device number 99 07:37:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x37}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:37:50 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:37:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x220000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x220000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) (async) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) 07:37:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc601000023a0a000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:37:50 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) r2 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x1, 0xf7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x6, 0x47, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0xfa5f6011b01348e2, 0x3f, 0x0, 0x7f}}]}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x300, 0x81, 0x3, 0x0, 0xff, 0x6}, 0x27, &(0x7f0000000b00)={0x5, 0xf, 0x27, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x3, 0xf, 0x9, [0xff0000, 0xc0, 0x3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x7, 0x9ca}]}, 0x3, [{0x8c, &(0x7f0000000b40)=@string={0x8c, 0x3, "b6e8fd4790f76362c48eea68d1b4271c1343f429cfba5bdb71d3a0114b63bd4b97dc3c9e7aa4bd7a7ad23ba59afc7839a1a6e2d2605115ccff78874595dfc3309b0719826ba8bfaa4a54a8207f896fb36e332fac9bc8c1c5c0cdacaf3a632deba11ff08f12e6528daaa3be62bf2e3794babbf7599749dbf497db891e29040f8bf79a6bb518f2d5cc4553"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x410}}, {0x61, &(0x7f0000000c40)=@string={0x61, 0x3, "df0ab56610837e8b13e01541a28d04aafe99d0cd04c092f32f80dc6d32e07ea0b63a0e5111243fd3fdf9296c64e203c46222442e9617d39be198702d053e4a910a37ae1a41a685f68aab556bc9ce56483636a0ab6ad7f2816ed24032bcc5d7"}}]}) syz_usb_control_io(r2, &(0x7f0000000e40)={0x18, &(0x7f0000000d00)={0x20, 0xa, 0xa, {0xa, 0x23, "53d730e0d41c2243"}}, &(0x7f0000000d40)={0x0, 0x3, 0x8, @string={0x8, 0x3, "19705c07ba2a"}}, &(0x7f0000000d80)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2a, 0x2, 0x0, 0x800}, @ssp_cap={0x10, 0x10, 0xa, 0x89, 0x1, 0x81, 0xf000, 0xf451, [0xffc0f0]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5a, "d420166d3f0b20bd6872b49caaee2f2a"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x9, 0x1}]}}, &(0x7f0000000dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x2, 0x2, 0x1, "64659d1d", "cea16d51"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x80, 0x2, 0x4, 0x5}}}, &(0x7f0000001280)={0x44, &(0x7f0000000e80)={0x0, 0x5, 0x12, "534fd04ebf71afe45c91bfab60382fee3296"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x400, 0x40}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x2d}, &(0x7f0000001040)={0x40, 0xb, 0x2, "ed05"}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0x26}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @random="688ac469af0a"}, &(0x7f0000001100)={0x40, 0x17, 0x6}, &(0x7f0000001140)={0x40, 0x19, 0x2, "00a9"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0x56}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x4}}) syz_usb_disconnect(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x30, 0x81, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0x68c}}, {{{0x9, 0x5, 0x81, 0x3, 0x70, 0xad, 0x8, 0x7d}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xcf, 0x2, 0x4, 0x8, 0x81}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x500a}}, {0x101, &(0x7f00000004c0)=@string={0x101, 0x3, "b04a7b8e6bca9e88b69346247c1761938bfc8c7f403eb6c8417519f9c49d46f915fec5599e9b79d06515528e748f148740a49f983b4f854396d50651db1973b380c5577e45d94b54c95982ea3c5684343d93be1649c97da50c9f784109bd3ccbc124e10a59e3afcd983a0054d528d552e28ba2865ef17e070691432b1a006e0c7ec504c371ba031652d35d6c943ed46d5158e78cc4f7aa51078940a2aa6d3f598085d751def493522aa8a0d6868837a8a98638d4f334151b12aa91842fa27eb31ef9d8ad264caedad0edf4a09f6fb981301fc8b3112fbcc47a36bfe4ed21cdb5b8b1fceef51d83d34ef64646ea5a67e744dcfcf8b345febe06bb80545c2d8d"}}, {0xd1, &(0x7f0000000600)=@string={0xd1, 0x3, "0940fba73648a6c4edd40ba4c8bc39ce63e5c2a000ab318dd3f69c10b2d1d1a9f8420201fdd72d2c217490a6d9b60bb8dbad7917a12056ee296b6af7e7d88301097355663ce608fb2a3af5658a06549798e78d23dc94a97c01ee08a1fbe53e5a7fddd739150b0b691bc500931b6bb748a0c5010e3c9eb1d58e78650dca55ee98fecb03b85550d7243180e5fac57d9748c25aaecd083c982e11abfbb2e297956f3e2666fe29842d07201df53a4778475d4e860d1ebb9f98f9e24746ec8aad9ae235032348b49c1505271da33975f3b3"}}, {0x2b, &(0x7f00000003c0)=@string={0x2b, 0x3, "574adff8cc3c3f86ea79011cc2eebfeafa359da25a0ba957ec573f27caae74d1cc4cb2150fba5764dc"}}, {0xf8, &(0x7f0000000700)=@string={0xf8, 0x3, "5f2e7cef2cece319981b18b0702c427173f2bbc22d6a6b7b3498f1915ac3a7e6c4ae1e6bc903bb12bf7a9babe72228c2ecb564d28e954fdb02bb31209a2242da9ced3ba16b59e84bfc24469a6d2272fc845a86b49b290b058da5b00695bf61367043b723b826946381949e87647e9936a618af2e04d00661bf1692e1c455e41a9566248e2c2664a3ffa5b26aed29e8840f998e5ba1b33da53465bf1cfbdc220eaf78278a26d58496e03846a1aede39bccc729ea2c537c45de9b75e2882a141fd54a658bcf46d21b79928782c34f8d4b30a29d9f8c82f05952921fe79b725c493fcbfaab4b77337a0aa91ded106c6136d3fc7733ad747"}}, {0xc2, &(0x7f0000000800)=@string={0xc2, 0x3, "c3a91d1b5e019e7a6d22399d476300ea143996e42bd072d80d735b8f62cdb714f05d9778f04c43e0af62ccda24fc65b7b9456bf263ab3fe5dd50b62588c8772b9899dd40ab963bacaa1978f0b7c347972e184d674098a3a9bcf5c78775cf45ac30c976636da3baa32d7989fe17a95662ead5f9a523d771efe9b08c1d317333666f315cc19b38a4f0dd5b2545970798cc9d99a0035d3137877b7c5691ce9ae77e366bf79d3dea4c7f9656cbed330abe6c13b394c4af328c0cd10727c38d37db1e"}}, {0x73, &(0x7f0000000400)=@string={0x73, 0x3, "f6e17eaa0be1fcc5f0042316712366420c90440a9182e687c5647e66c532c4d76b6079b11cf9b0eb8fef9e95c27a80736004fb43e2c81f32538c29734045ed7a6c694ba141f86405d3aca22420f7a4297cbd3e12670581e334edae84f76f990774840eed139a78329b43abc8faec7de5c8"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2801}}, {0x66, &(0x7f0000000980)=@string={0x66, 0x3, "748280aac1cee0b4cf6bbf648bb47d63875ec02933471b9fac3bde2e01c76f1592d6a8d9e11f90e7f61d5d0ce8d6605e7dd197e40433b09be8bdae7ce069d2f5dcb8ed6b9fdcac0fdf4d92591fad519c767e72ab01475239b967bfdb7ba04b6dd9f2d465"}}]}) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x14, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYBLOB="6c6c29231a2b2e84233acfca64f89138c26a0515e2b4797af3489f866796787df5cd96e58c4b73fc345767bc2a1dedecd24200d534093393ffbaf33ecacf6365766f94f3b752ecefbd10d79ddf283b9be8d0323e539b41b421dde53694f56fd6086b10e5a2787a420089b5bf96e5121793d6c2170d56ffc714c8862dc0c4a1d909bab9ea7a2d0a11039629a7072fbb88c39f4d086bcc1b32104717f8350b9f00e294a68a402b7aa88a8dab1bd8981d7c6276090f06c9a0402349e74de33e7d6281ed7be61a9ae3bbc546957211e91f36c4dc1127a3b0e7d6c19ecdf063c6ce36989f996a44d9e9cae77d765224dd54", @ANYRES32, @ANYBLOB="eda6f76973bc668e245e", @ANYBLOB="0a401e1fd8d7f0b2e11fbbb06937056b971034d1d5e6473b83d25d3ab68237842ec653cbd75e09be4930a1344c221f36cc18b760bb4968032a83ed7d1cd7f580037f16bb3a3672c866666c5c64bc4cf6223a40d10b042128f8aa90b508c1f7de7c473d5d142407bc2d6e9686082ca0b8d4319fdab75ad7a26e50b2cb34024476ef119f8cb63c440e8c837f2aa65c53d7b2302c82ef436916e5b5557b1f1f033c6f97b5f1ea832e5c1d0d4ba0b8b3d74184c2258c8b74699b850dfd6486", @ANYRES16=r3, @ANYRESHEX=r4, @ANYRESDEC=0x0], 0x0, 0x0, 0x0}, 0x0) 07:37:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040), 0x12400, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x80000000, 0x3, "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", 0x0, 0xfb, 0xfd, 0x0, 0x80, 0x1, 0x6, 0x1}, r1}}, 0x120) 07:37:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async, rerun: 32) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async, rerun: 32) openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040), 0x12400, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x80000000, 0x3, "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", 0x0, 0xfb, 0xfd, 0x0, 0x80, 0x1, 0x6, 0x1}, r1}}, 0x120) (rerun: 64) [ 564.445716][T15497] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:37:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:37:50 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:37:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc601000023b0a000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:37:50 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:37:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040), 0x12400, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x80000000, 0x3, "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", 0x0, 0xfb, 0xfd, 0x0, 0x80, 0x1, 0x6, 0x1}, r1}}, 0x120) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040), 0x12400, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x80000000, 0x3, "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", 0x0, 0xfb, 0xfd, 0x0, 0x80, 0x1, 0x6, 0x1}, r1}}, 0x120) (async) 07:37:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc601000023c0a000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:37:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 564.755263][T15010] usb 6-1: new high-speed USB device number 100 using dummy_hcd 07:37:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x220000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x220000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) (async) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) 07:37:50 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 565.204054][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.220464][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.230969][T15010] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 565.241318][T15010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.267046][T15010] usb 6-1: config 0 descriptor?? [ 565.726412][T15502] UDC core: couldn't find an available UDC or it's busy: -16 [ 565.734055][T15502] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 565.742778][T15502] UDC core: couldn't find an available UDC or it's busy: -16 [ 565.750563][T15502] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 565.963695][T15502] UDC core: couldn't find an available UDC or it's busy: -16 [ 565.971605][T15502] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 566.066205][T15010] usbhid 6-1:0.0: can't add hid device: -71 [ 566.072882][T15010] usbhid: probe of 6-1:0.0 failed with error -71 [ 566.087000][T15010] usb 6-1: USB disconnect, device number 100 07:37:52 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) r2 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x1, 0xf7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x6, 0x47, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0xfa5f6011b01348e2, 0x3f, 0x0, 0x7f}}]}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x300, 0x81, 0x3, 0x0, 0xff, 0x6}, 0x27, &(0x7f0000000b00)={0x5, 0xf, 0x27, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x3, 0xf, 0x9, [0xff0000, 0xc0, 0x3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x7, 0x9ca}]}, 0x3, [{0x8c, &(0x7f0000000b40)=@string={0x8c, 0x3, "b6e8fd4790f76362c48eea68d1b4271c1343f429cfba5bdb71d3a0114b63bd4b97dc3c9e7aa4bd7a7ad23ba59afc7839a1a6e2d2605115ccff78874595dfc3309b0719826ba8bfaa4a54a8207f896fb36e332fac9bc8c1c5c0cdacaf3a632deba11ff08f12e6528daaa3be62bf2e3794babbf7599749dbf497db891e29040f8bf79a6bb518f2d5cc4553"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x410}}, {0x61, &(0x7f0000000c40)=@string={0x61, 0x3, "df0ab56610837e8b13e01541a28d04aafe99d0cd04c092f32f80dc6d32e07ea0b63a0e5111243fd3fdf9296c64e203c46222442e9617d39be198702d053e4a910a37ae1a41a685f68aab556bc9ce56483636a0ab6ad7f2816ed24032bcc5d7"}}]}) syz_usb_control_io(r2, &(0x7f0000000e40)={0x18, &(0x7f0000000d00)={0x20, 0xa, 0xa, {0xa, 0x23, "53d730e0d41c2243"}}, &(0x7f0000000d40)={0x0, 0x3, 0x8, @string={0x8, 0x3, "19705c07ba2a"}}, &(0x7f0000000d80)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2a, 0x2, 0x0, 0x800}, @ssp_cap={0x10, 0x10, 0xa, 0x89, 0x1, 0x81, 0xf000, 0xf451, [0xffc0f0]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5a, "d420166d3f0b20bd6872b49caaee2f2a"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x9, 0x1}]}}, &(0x7f0000000dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x2, 0x2, 0x1, "64659d1d", "cea16d51"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x80, 0x2, 0x4, 0x5}}}, &(0x7f0000001280)={0x44, &(0x7f0000000e80)={0x0, 0x5, 0x12, "534fd04ebf71afe45c91bfab60382fee3296"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x400, 0x40}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x2d}, &(0x7f0000001040)={0x40, 0xb, 0x2, "ed05"}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0x26}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @random="688ac469af0a"}, &(0x7f0000001100)={0x40, 0x17, 0x6}, &(0x7f0000001140)={0x40, 0x19, 0x2, "00a9"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0x56}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_disconnect(r1) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x30, 0x81, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0x68c}}, {{{0x9, 0x5, 0x81, 0x3, 0x70, 0xad, 0x8, 0x7d}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xcf, 0x2, 0x4, 0x8, 0x81}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x500a}}, {0x101, &(0x7f00000004c0)=@string={0x101, 0x3, "b04a7b8e6bca9e88b69346247c1761938bfc8c7f403eb6c8417519f9c49d46f915fec5599e9b79d06515528e748f148740a49f983b4f854396d50651db1973b380c5577e45d94b54c95982ea3c5684343d93be1649c97da50c9f784109bd3ccbc124e10a59e3afcd983a0054d528d552e28ba2865ef17e070691432b1a006e0c7ec504c371ba031652d35d6c943ed46d5158e78cc4f7aa51078940a2aa6d3f598085d751def493522aa8a0d6868837a8a98638d4f334151b12aa91842fa27eb31ef9d8ad264caedad0edf4a09f6fb981301fc8b3112fbcc47a36bfe4ed21cdb5b8b1fceef51d83d34ef64646ea5a67e744dcfcf8b345febe06bb80545c2d8d"}}, {0xd1, &(0x7f0000000600)=@string={0xd1, 0x3, "0940fba73648a6c4edd40ba4c8bc39ce63e5c2a000ab318dd3f69c10b2d1d1a9f8420201fdd72d2c217490a6d9b60bb8dbad7917a12056ee296b6af7e7d88301097355663ce608fb2a3af5658a06549798e78d23dc94a97c01ee08a1fbe53e5a7fddd739150b0b691bc500931b6bb748a0c5010e3c9eb1d58e78650dca55ee98fecb03b85550d7243180e5fac57d9748c25aaecd083c982e11abfbb2e297956f3e2666fe29842d07201df53a4778475d4e860d1ebb9f98f9e24746ec8aad9ae235032348b49c1505271da33975f3b3"}}, {0x2b, &(0x7f00000003c0)=@string={0x2b, 0x3, "574adff8cc3c3f86ea79011cc2eebfeafa359da25a0ba957ec573f27caae74d1cc4cb2150fba5764dc"}}, {0xf8, &(0x7f0000000700)=@string={0xf8, 0x3, "5f2e7cef2cece319981b18b0702c427173f2bbc22d6a6b7b3498f1915ac3a7e6c4ae1e6bc903bb12bf7a9babe72228c2ecb564d28e954fdb02bb31209a2242da9ced3ba16b59e84bfc24469a6d2272fc845a86b49b290b058da5b00695bf61367043b723b826946381949e87647e9936a618af2e04d00661bf1692e1c455e41a9566248e2c2664a3ffa5b26aed29e8840f998e5ba1b33da53465bf1cfbdc220eaf78278a26d58496e03846a1aede39bccc729ea2c537c45de9b75e2882a141fd54a658bcf46d21b79928782c34f8d4b30a29d9f8c82f05952921fe79b725c493fcbfaab4b77337a0aa91ded106c6136d3fc7733ad747"}}, {0xc2, &(0x7f0000000800)=@string={0xc2, 0x3, "c3a91d1b5e019e7a6d22399d476300ea143996e42bd072d80d735b8f62cdb714f05d9778f04c43e0af62ccda24fc65b7b9456bf263ab3fe5dd50b62588c8772b9899dd40ab963bacaa1978f0b7c347972e184d674098a3a9bcf5c78775cf45ac30c976636da3baa32d7989fe17a95662ead5f9a523d771efe9b08c1d317333666f315cc19b38a4f0dd5b2545970798cc9d99a0035d3137877b7c5691ce9ae77e366bf79d3dea4c7f9656cbed330abe6c13b394c4af328c0cd10727c38d37db1e"}}, {0x73, &(0x7f0000000400)=@string={0x73, 0x3, "f6e17eaa0be1fcc5f0042316712366420c90440a9182e687c5647e66c532c4d76b6079b11cf9b0eb8fef9e95c27a80736004fb43e2c81f32538c29734045ed7a6c694ba141f86405d3aca22420f7a4297cbd3e12670581e334edae84f76f990774840eed139a78329b43abc8faec7de5c8"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2801}}, {0x66, &(0x7f0000000980)=@string={0x66, 0x3, "748280aac1cee0b4cf6bbf648bb47d63875ec02933471b9fac3bde2e01c76f1592d6a8d9e11f90e7f61d5d0ce8d6605e7dd197e40433b09be8bdae7ce069d2f5dcb8ed6b9fdcac0fdf4d92591fad519c767e72ab01475239b967bfdb7ba04b6dd9f2d465"}}]}) (async) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x14, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYBLOB="6c6c29231a2b2e84233acfca64f89138c26a0515e2b4797af3489f866796787df5cd96e58c4b73fc345767bc2a1dedecd24200d534093393ffbaf33ecacf6365766f94f3b752ecefbd10d79ddf283b9be8d0323e539b41b421dde53694f56fd6086b10e5a2787a420089b5bf96e5121793d6c2170d56ffc714c8862dc0c4a1d909bab9ea7a2d0a11039629a7072fbb88c39f4d086bcc1b32104717f8350b9f00e294a68a402b7aa88a8dab1bd8981d7c6276090f06c9a0402349e74de33e7d6281ed7be61a9ae3bbc546957211e91f36c4dc1127a3b0e7d6c19ecdf063c6ce36989f996a44d9e9cae77d765224dd54", @ANYRES32, @ANYBLOB="eda6f76973bc668e245e", @ANYBLOB="0a401e1fd8d7f0b2e11fbbb06937056b971034d1d5e6473b83d25d3ab68237842ec653cbd75e09be4930a1344c221f36cc18b760bb4968032a83ed7d1cd7f580037f16bb3a3672c866666c5c64bc4cf6223a40d10b042128f8aa90b508c1f7de7c473d5d142407bc2d6e9686082ca0b8d4319fdab75ad7a26e50b2cb34024476ef119f8cb63c440e8c837f2aa65c53d7b2302c82ef436916e5b5557b1f1f033c6f97b5f1ea832e5c1d0d4ba0b8b3d74184c2258c8b74699b850dfd6486", @ANYRES16=r3, @ANYRESHEX=r4, @ANYRESDEC=0x0], 0x0, 0x0, 0x0}, 0x0) 07:37:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3a}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:37:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc601000023d0a000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:37:52 executing program 1: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x82801) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000540)={0x0, 0x5}, 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xc32, @local, 0x3}, {0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, r4, 0xfe06}}, 0x48) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/class/ata_link', 0x10000, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580), 0x2, 0x8}}, 0x20) 07:37:52 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400e0", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:37:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "096be6f53bfb24f9d1d4176a3a36a70f"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9993fd9eeafe"}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x66985c1c4d977b6c}, 0x800) r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r6 = dup2(r5, r5) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f0000000000)=0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) 07:37:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x4b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:37:52 executing program 1: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x82801) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000540)={0x0, 0x5}, 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xc32, @local, 0x3}, {0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, r4, 0xfe06}}, 0x48) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/class/ata_link', 0x10000, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580), 0x2, 0x8}}, 0x20) open_tree(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x82801) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000540)={0x0, 0x5}, 0x8) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xc32, @local, 0x3}, {0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, r4, 0xfe06}}, 0x48) (async) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/class/ata_link', 0x10000, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580), 0x2, 0x8}}, 0x20) (async) [ 566.528996][T15542] __nla_validate_parse: 4 callbacks suppressed [ 566.529013][T15542] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:37:52 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400f0", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:37:52 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "096be6f53bfb24f9d1d4176a3a36a70f"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9993fd9eeafe"}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x66985c1c4d977b6c}, 0x800) (async) r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r6 = dup2(r5, r5) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f0000000000)=0x1) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) 07:37:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc601000023e0a000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:37:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x4c}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 566.709387][T15564] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 566.743597][T15556] syz-executor.1: vmalloc error: size 24576, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 566.788680][T15556] CPU: 0 PID: 15556 Comm: syz-executor.1 Not tainted 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0 [ 566.799217][T15556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.809293][T15556] Call Trace: [ 566.812591][T15556] [ 566.815511][T15556] dump_stack_lvl+0xcd/0x134 [ 566.820122][T15556] warn_alloc.cold+0x9b/0x189 [ 566.824811][T15556] ? zone_watermark_ok_safe+0x290/0x290 [ 566.830350][T15556] ? __kmalloc_node+0x62/0x4a0 [ 566.835123][T15556] ? __vmalloc_node_range+0x7bf/0x1060 [ 566.840630][T15556] __vmalloc_node_range+0xe18/0x1060 [ 566.845952][T15556] ? vfree_atomic+0xe0/0xe0 [ 566.850462][T15556] ? rcu_read_lock_sched_held+0x3a/0x70 [ 566.856121][T15556] ? kernel_clone+0xe7/0xab0 [ 566.860707][T15556] copy_process+0x926/0x7250 [ 566.865297][T15556] ? kernel_clone+0xe7/0xab0 [ 566.869886][T15556] ? find_held_lock+0x2d/0x110 [ 566.874670][T15556] ? __cleanup_sighand+0xb0/0xb0 [ 566.879637][T15556] ? kernel_clone+0x314/0xab0 [ 566.884309][T15556] kernel_clone+0xe7/0xab0 [ 566.888723][T15556] ? create_io_thread+0xf0/0xf0 [ 566.893572][T15556] ? find_held_lock+0x2d/0x110 [ 566.898340][T15556] ? __context_tracking_exit+0xb8/0xe0 [ 566.903802][T15556] __do_compat_sys_ia32_clone+0xac/0xe0 [ 566.909344][T15556] ? pci_biosrom_size+0x90/0x90 [ 566.914201][T15556] ? syscall_enter_from_user_mode+0x21/0x70 [ 566.920102][T15556] ? lockdep_hardirqs_on+0x79/0x100 [ 566.925300][T15556] ? syscall_enter_from_user_mode+0x21/0x70 [ 566.931195][T15556] do_int80_syscall_32+0x46/0x90 [ 566.936149][T15556] entry_INT80_compat+0x71/0x76 [ 566.941007][T15556] RIP: 0023:0xf6f04374 [ 566.945074][T15556] Code: 8b 44 24 04 89 41 08 c7 41 04 00 00 00 00 53 56 57 8b 74 24 24 8b 54 24 20 8b 5c 24 18 8b 7c 24 28 b8 78 00 00 00 89 19 cd 80 <5f> 5e 5b 85 c0 0f 8c 61 81 00 00 74 01 c3 89 f5 ff d3 e8 00 00 00 [ 566.964681][T15556] RSP: 002b:00000000f7539a30 EFLAGS: 00000292 ORIG_RAX: 0000000000000078 [ 566.973098][T15556] RAX: ffffffffffffffda RBX: 00000000003d0f00 RCX: 00000000f579a7a4 [ 566.981071][T15556] RDX: 00000000f579aba8 RSI: 00000000f7539a7c RDI: 00000000f579aba8 [ 566.989132][T15556] RBP: 00000000f6fe0000 R08: 0000000000000000 R09: 0000000000000000 [ 566.997105][T15556] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 567.005073][T15556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 567.013067][T15556] [ 567.021256][T15556] Mem-Info: [ 567.025226][T15010] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 567.027124][T15556] active_anon:546 inactive_anon:105270 isolated_anon:0 [ 567.027124][T15556] active_file:3376 inactive_file:7638 isolated_file:0 [ 567.027124][T15556] unevictable:768 dirty:0 writeback:0 [ 567.027124][T15556] slab_reclaimable:19243 slab_unreclaimable:97208 [ 567.027124][T15556] mapped:27534 shmem:2102 pagetables:934 bounce:0 [ 567.027124][T15556] kernel_misc_reclaimable:0 [ 567.027124][T15556] free:1365406 free_pcp:12834 free_cma:0 [ 567.076751][T15556] Node 0 active_anon:2176kB inactive_anon:420148kB active_file:13432kB inactive_file:30552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110136kB dirty:0kB writeback:0kB shmem:5932kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB kernel_stack:9728kB pagetables:3732kB all_unreclaimable? no [ 567.110476][T15556] Node 1 active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 567.141516][T15556] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 567.169071][T15556] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 567.174911][T15556] Node 0 DMA32 free:1509796kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2176kB inactive_anon:420148kB active_file:13432kB inactive_file:30552kB unevictable:1536kB writepending:0kB present:3129332kB managed:2716640kB mlocked:0kB bounce:0kB free_pcp:36580kB local_pcp:19676kB free_cma:0kB [ 567.206565][T15556] lowmem_reserve[]: 0 0 0 0 0 [ 567.211522][T15556] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 567.243210][T15556] lowmem_reserve[]: 0 0 0 0 0 [ 567.248266][T15556] Node 1 Normal free:3936724kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:15368kB local_pcp:6608kB free_cma:0kB [ 567.278004][T15556] lowmem_reserve[]: 0 0 0 0 0 [ 567.282900][T15556] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 567.297014][T15556] Node 0 DMA32: 695*4kB (UE) 635*8kB (UE) 399*16kB (UME) 461*32kB (UME) 186*64kB (UME) 120*128kB (UM) 27*256kB (UME) 7*512kB (UM) 1*1024kB (E) 2*2048kB (ME) 351*4096kB (UM) = 1509572kB [ 567.315708][T15556] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 567.327426][T15556] Node 1 Normal: 43*4kB (UM) 21*8kB (UE) 22*16kB (UE) 39*32kB (UE) 29*64kB (UME) 14*128kB (UME) 4*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UE) 958*4096kB (M) = 3936724kB [ 567.345328][T15556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 567.355015][T15556] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 567.365442][T15556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 567.375122][T15556] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 567.384518][T15556] 13116 total pagecache pages [ 567.389625][T15556] 0 pages in swap cache [ 567.393788][T15556] Swap cache stats: add 0, delete 0, find 0/0 [ 567.400503][T15556] Free swap = 0kB [ 567.404319][T15556] Total swap = 0kB [ 567.408933][T15556] 2097051 pages RAM [ 567.412920][T15556] 0 pages HighMem/MovableOnly [ 567.417877][T15556] 384546 pages reserved [ 567.422026][T15556] 0 pages cma reserved [ 567.496377][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.508238][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.518302][T15010] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 567.527690][T15010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.538524][T15010] usb 6-1: config 0 descriptor?? [ 567.996267][T15550] UDC core: couldn't find an available UDC or it's busy: -16 [ 568.003713][T15550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 568.015066][T15550] UDC core: couldn't find an available UDC or it's busy: -16 [ 568.022593][T15550] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:37:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "096be6f53bfb24f9d1d4176a3a36a70f"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9993fd9eeafe"}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x66985c1c4d977b6c}, 0x800) r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r6 = dup2(r5, r5) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f0000000000)=0x1) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) 07:37:55 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48047fff", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:37:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) r2 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x1, 0xf7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x6, 0x47, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0xfa5f6011b01348e2, 0x3f, 0x0, 0x7f}}]}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x300, 0x81, 0x3, 0x0, 0xff, 0x6}, 0x27, &(0x7f0000000b00)={0x5, 0xf, 0x27, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x3, 0xf, 0x9, [0xff0000, 0xc0, 0x3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x7, 0x9ca}]}, 0x3, [{0x8c, &(0x7f0000000b40)=@string={0x8c, 0x3, "b6e8fd4790f76362c48eea68d1b4271c1343f429cfba5bdb71d3a0114b63bd4b97dc3c9e7aa4bd7a7ad23ba59afc7839a1a6e2d2605115ccff78874595dfc3309b0719826ba8bfaa4a54a8207f896fb36e332fac9bc8c1c5c0cdacaf3a632deba11ff08f12e6528daaa3be62bf2e3794babbf7599749dbf497db891e29040f8bf79a6bb518f2d5cc4553"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x410}}, {0x61, &(0x7f0000000c40)=@string={0x61, 0x3, "df0ab56610837e8b13e01541a28d04aafe99d0cd04c092f32f80dc6d32e07ea0b63a0e5111243fd3fdf9296c64e203c46222442e9617d39be198702d053e4a910a37ae1a41a685f68aab556bc9ce56483636a0ab6ad7f2816ed24032bcc5d7"}}]}) syz_usb_control_io(r2, &(0x7f0000000e40)={0x18, &(0x7f0000000d00)={0x20, 0xa, 0xa, {0xa, 0x23, "53d730e0d41c2243"}}, &(0x7f0000000d40)={0x0, 0x3, 0x8, @string={0x8, 0x3, "19705c07ba2a"}}, &(0x7f0000000d80)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2a, 0x2, 0x0, 0x800}, @ssp_cap={0x10, 0x10, 0xa, 0x89, 0x1, 0x81, 0xf000, 0xf451, [0xffc0f0]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5a, "d420166d3f0b20bd6872b49caaee2f2a"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x9, 0x1}]}}, &(0x7f0000000dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x2, 0x2, 0x1, "64659d1d", "cea16d51"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x80, 0x2, 0x4, 0x5}}}, &(0x7f0000001280)={0x44, &(0x7f0000000e80)={0x0, 0x5, 0x12, "534fd04ebf71afe45c91bfab60382fee3296"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x400, 0x40}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x2d}, &(0x7f0000001040)={0x40, 0xb, 0x2, "ed05"}, &(0x7f0000001080)={0x40, 0xf, 0x2, 0x26}, &(0x7f00000010c0)={0x40, 0x13, 0x6, @random="688ac469af0a"}, &(0x7f0000001100)={0x40, 0x17, 0x6}, &(0x7f0000001140)={0x40, 0x19, 0x2, "00a9"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0x56}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_disconnect(r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x30, 0x81, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0x68c}}, {{{0x9, 0x5, 0x81, 0x3, 0x70, 0xad, 0x8, 0x7d}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xcf, 0x2, 0x4, 0x8, 0x81}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x500a}}, {0x101, &(0x7f00000004c0)=@string={0x101, 0x3, "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"}}, {0xd1, &(0x7f0000000600)=@string={0xd1, 0x3, "0940fba73648a6c4edd40ba4c8bc39ce63e5c2a000ab318dd3f69c10b2d1d1a9f8420201fdd72d2c217490a6d9b60bb8dbad7917a12056ee296b6af7e7d88301097355663ce608fb2a3af5658a06549798e78d23dc94a97c01ee08a1fbe53e5a7fddd739150b0b691bc500931b6bb748a0c5010e3c9eb1d58e78650dca55ee98fecb03b85550d7243180e5fac57d9748c25aaecd083c982e11abfbb2e297956f3e2666fe29842d07201df53a4778475d4e860d1ebb9f98f9e24746ec8aad9ae235032348b49c1505271da33975f3b3"}}, {0x2b, &(0x7f00000003c0)=@string={0x2b, 0x3, "574adff8cc3c3f86ea79011cc2eebfeafa359da25a0ba957ec573f27caae74d1cc4cb2150fba5764dc"}}, {0xf8, &(0x7f0000000700)=@string={0xf8, 0x3, "5f2e7cef2cece319981b18b0702c427173f2bbc22d6a6b7b3498f1915ac3a7e6c4ae1e6bc903bb12bf7a9babe72228c2ecb564d28e954fdb02bb31209a2242da9ced3ba16b59e84bfc24469a6d2272fc845a86b49b290b058da5b00695bf61367043b723b826946381949e87647e9936a618af2e04d00661bf1692e1c455e41a9566248e2c2664a3ffa5b26aed29e8840f998e5ba1b33da53465bf1cfbdc220eaf78278a26d58496e03846a1aede39bccc729ea2c537c45de9b75e2882a141fd54a658bcf46d21b79928782c34f8d4b30a29d9f8c82f05952921fe79b725c493fcbfaab4b77337a0aa91ded106c6136d3fc7733ad747"}}, {0xc2, &(0x7f0000000800)=@string={0xc2, 0x3, "c3a91d1b5e019e7a6d22399d476300ea143996e42bd072d80d735b8f62cdb714f05d9778f04c43e0af62ccda24fc65b7b9456bf263ab3fe5dd50b62588c8772b9899dd40ab963bacaa1978f0b7c347972e184d674098a3a9bcf5c78775cf45ac30c976636da3baa32d7989fe17a95662ead5f9a523d771efe9b08c1d317333666f315cc19b38a4f0dd5b2545970798cc9d99a0035d3137877b7c5691ce9ae77e366bf79d3dea4c7f9656cbed330abe6c13b394c4af328c0cd10727c38d37db1e"}}, {0x73, &(0x7f0000000400)=@string={0x73, 0x3, "f6e17eaa0be1fcc5f0042316712366420c90440a9182e687c5647e66c532c4d76b6079b11cf9b0eb8fef9e95c27a80736004fb43e2c81f32538c29734045ed7a6c694ba141f86405d3aca22420f7a4297cbd3e12670581e334edae84f76f990774840eed139a78329b43abc8faec7de5c8"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2801}}, {0x66, &(0x7f0000000980)=@string={0x66, 0x3, "748280aac1cee0b4cf6bbf648bb47d63875ec02933471b9fac3bde2e01c76f1592d6a8d9e11f90e7f61d5d0ce8d6605e7dd197e40433b09be8bdae7ce069d2f5dcb8ed6b9fdcac0fdf4d92591fad519c767e72ab01475239b967bfdb7ba04b6dd9f2d465"}}]}) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x14, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYBLOB="6c6c29231a2b2e84233acfca64f89138c26a0515e2b4797af3489f866796787df5cd96e58c4b73fc345767bc2a1dedecd24200d534093393ffbaf33ecacf6365766f94f3b752ecefbd10d79ddf283b9be8d0323e539b41b421dde53694f56fd6086b10e5a2787a420089b5bf96e5121793d6c2170d56ffc714c8862dc0c4a1d909bab9ea7a2d0a11039629a7072fbb88c39f4d086bcc1b32104717f8350b9f00e294a68a402b7aa88a8dab1bd8981d7c6276090f06c9a0402349e74de33e7d6281ed7be61a9ae3bbc546957211e91f36c4dc1127a3b0e7d6c19ecdf063c6ce36989f996a44d9e9cae77d765224dd54", @ANYRES32, @ANYBLOB="eda6f76973bc668e245e", @ANYBLOB="0a401e1fd8d7f0b2e11fbbb06937056b971034d1d5e6473b83d25d3ab68237842ec653cbd75e09be4930a1344c221f36cc18b760bb4968032a83ed7d1cd7f580037f16bb3a3672c866666c5c64bc4cf6223a40d10b042128f8aa90b508c1f7de7c473d5d142407bc2d6e9686082ca0b8d4319fdab75ad7a26e50b2cb34024476ef119f8cb63c440e8c837f2aa65c53d7b2302c82ef436916e5b5557b1f1f033c6f97b5f1ea832e5c1d0d4ba0b8b3d74184c2258c8b74699b850dfd6486", @ANYRES16=r3, @ANYRESHEX=r4, @ANYRESDEC=0x0], 0x0, 0x0, 0x0}, 0x0) 07:37:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x6b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:37:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc601000024002000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:37:55 executing program 1: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x82801) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000540)={0x0, 0x5}, 0x8) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xc32, @local, 0x3}, {0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, r4, 0xfe06}}, 0x48) (async) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/class/ata_link', 0x10000, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580), 0x2, 0x8}}, 0x20) 07:37:55 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48049eff", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 569.603157][T15577] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 569.624122][T15577] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:37:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x100, 0x80000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:37:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x72}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:37:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) 07:37:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400b000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 569.656281][T15010] usbhid 6-1:0.0: can't add hid device: -71 [ 569.662285][T15010] usbhid: probe of 6-1:0.0 failed with error -71 07:37:55 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804f0ff", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 569.725876][T15010] usb 6-1: USB disconnect, device number 101 07:37:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x100, 0x80000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 569.829111][T15599] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 569.863720][T15599] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 570.115274][T15010] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 570.475464][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.486416][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.496233][T15010] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 570.505316][T15010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.517059][T15010] usb 6-1: config 0 descriptor?? [ 570.759013][T15605] UDC core: couldn't find an available UDC or it's busy: -16 [ 570.766601][T15605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 570.774455][T15605] UDC core: couldn't find an available UDC or it's busy: -16 [ 570.786991][T15605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 570.796206][T15607] UDC core: couldn't find an available UDC or it's busy: -16 [ 570.803755][T15607] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 571.095518][T15010] usbhid 6-1:0.0: can't add hid device: -71 [ 571.101561][T15010] usbhid: probe of 6-1:0.0 failed with error -71 [ 571.121285][T15010] usb 6-1: USB disconnect, device number 102 07:37:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc081, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0xffff}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xfe, 0x7, 0x20}}]}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0x400, 0xf2, 0x1, {0x22, 0x437}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xa6}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9, 0x6, 0x1, 0xff, 0x2}, 0x3e, &(0x7f0000000100)={0x5, 0xf, 0x3e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa784f3651b420dc7, 0xff, 0x81, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x40, 0xf00, 0x0, [0xff3f2e, 0xff, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "d2341a2770201df1522f0fe23443f324"}, @ptm_cap={0x3}]}, 0x7, [{0xf4, &(0x7f0000000140)=@string={0xf4, 0x3, "45b38f5ed04cf6342decb8dc961d4f625386461f5328ac685c345b56acc8c11411ab1003a2a2928b270a0361614efc09f1b8e4d1ecf47bf579e9f2053b3a021fd78c03bbe369c1ab5a6809896848c609feeabe788d650586afb441bd540f011bdd9b44100857599dca98c37434b9a0b0efbc06f36ba7ae8cbaf0d223d08b6d8642d646793d229543d8f0037e7b04a24bbc30f1c2713996228b8bc292563e4f57eb3a8fe07ad9b3644a2442fde1421b4b81dd8142c2287e86ee90c14e6cdd825866799bbed395f158f896872bda86289431a1a71633e4782bbd11dafb1d8d45c0f7cbdecd68a16f022b9e9d62ea0cd3f28a1d"}}, {0xea, &(0x7f0000000240)=@string={0xea, 0x3, "800311c23dedc6d8cf07e321a901b323f7cc8b66b05f52f3877260217e7f24dcd6e7cf1c79a65abd796342f044a3fb2c467198cee1632755e2a661e0be361dd6bd009a370e5baa2c8a7576daace092c5c1df87ac69680e63e28fe20e7f635925fe7fdb6c662d6a631e61eba607cac0839986644b5e629d319bc2dc58cc4bbbeccf055eb6722c64316f7bcb44ceac6e9d7f5cc822b19ec68eaeae01afcbf1966bcc30ef13f6c5d61587d08916ed1c6f54df7c26eadc2be65780ecf17127e0d2539656beae07e838b25842e6f1ae82b8fa82794e59d5a4a02d53c104dae177f3142fc17a4a27dffa82"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44d}}, {0xf7, &(0x7f0000000380)=@string={0xf7, 0x3, "b80bb0620e0985c9dfb7ad334de16f3d9af179bbc0925c36f0ab303bf2ce89005a4fcbe9b1722777e5f0ff3fc10ef79c94746bbe807f5bddde83dd54cd7b532613b09f0d3cc6b12500fbaf7920ee4d2423dc9196f4d0120eed3f05e7ec539035b55f7f7cc71edda485bce12486eaa8a19ce658dbdca9951f40decb598e53eb38b703837dcdb7a4a80af9307628e0cde1baf82624b24247d3e0fb6fde4713d908bf18c0286e23275f9c30c2286417694ece5eeba0e5663ab2bc9235b341c53439787b3f8ce014728f02a35222f50493bee43feb2d01351c31017a7e3a6f1d2f1932e2c189e8a11548da5d553144b5724b7229601226"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x58, &(0x7f0000000500)=@string={0x58, 0x3, "f8c52c81463fd8dc04782a10d85983ae250f49ffbaf94314aa599160989806b13a7c339506416fde79b3d3aec1e05f4b4ec72d4e4118ecc336b886f098b9a47fc86ffa9352b12103f3116856808b8d2e22303ee5cd34"}}, {0xba, &(0x7f0000000580)=@string={0xba, 0x3, "1e7b4c8ceb860de864887eee6b3f88932c67ef655272a325574ccf02fe4d876f041b52750f52fc394c624f09b69dc003a82f752307b25d5e41f730f995ecaef55dbd99789cc21e1f7c0658a428921718459b47ae11171bc2edb2e399020c7dc388ea449f16b8366d4f827548483220eb5ab2c1a0a1a0a6e6a3aa41ff1896cc63d6bc7b68df1d46dc1dc9c41175fd4c356a09747ce68b5e47f2f8646d591787ccf3b0a17d95fc10f0eec0d471d9d36fad6ed967dc33bcbd9b"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000dc0)={0x14, &(0x7f0000000b80)={0x0, 0x7, 0xb6, {0xb6, 0x4, "2833c4ea09ae5dfbc92d8b075dfd209e6dc43b4e7572df1f6f0be3ca9e73f60b0d8a4e97a0c2078e4af24290652bef4b46ca21cee1bf2897d62c5be62cb894aa304ce1256ab6c8d21173aa2d53671f49f943a85fa603db82a889b50f3a75151af35953da834264e3a3b28eba0be06e9582c5c6fee58539bce1f8424c2d6b63a9c4c0e96913e72e7b4aa1edb823d835cd6cad6e5293ff5e6621f00a72ef1a1341faf0cd1d175ef994be1e2c6254cf94f67e85ac16"}}, &(0x7f0000000c40)={0x0, 0x3, 0xda, @string={0xda, 0x3, "f44735f4dd377bf3fcdba75a83e531989dd84c5c0d8994b89e6358b7d60b6267f31abe4b6d63478958f376d858eb349cc12bb0a4e3da43f616e676ad863565e518922345f0ba605c6e8e1e97f561cc4bbd63456da345ff5a16f5e4e3ac80f1577adf496e5335596e08fd84b1a32c838148012774002c339e490ff5b19a866d8349703198fc19d3a55459f7730fb2e633bfce941f62150843321b146e945c73c1e31856e357cd3a2d4d287e18af28dca7d7b0d45131358602f8927ee30cf42aa8cfa72312cc1ba82f31e7978533e8d3328c29ebcf8ea397f5"}}, &(0x7f0000000d40)={0x0, 0x22, 0x6, {[@local, @global=@item_4={0x3, 0x1, 0x6, "577c83c9"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x3, 0x1, {0x22, 0x6ec}}}}, &(0x7f0000001000)={0x18, &(0x7f0000000e00)={0x20, 0x12, 0x97, "11b537ad24bc5c3ea04672407478597634bf529691b73cbb4097aad015e359757e8098fdda5d5d09de36a1ab3e86267a2bee55331ae93168eb6949e406bf856a659da5519ed148b92cac71a584a1f2d271cada68975ae43c147d6fb0bce7116e49d46ce70adc56e664ab0c901a45c36707915e2b6ad12a464ad91be06fb8b7c0b3f48911513d3c081d25c3cb8f26a14deb765403f63bfe"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x41}, &(0x7f0000000f40)={0x20, 0x1, 0x63, "3340eb9b3f1dea600d4e0218617250ffc857aecabfff8e7255a46339d3e4d7876e59813d5c77d64ca497d202716d3322e7afc60b9ae7741d8db03294a1b451bc86e5bb5f267c33f737a2b8c9befebe72c6dcdacfea2f44895c354a7011bec799b5a0e1"}, &(0x7f0000000fc0)={0x20, 0x3, 0x1, 0x1f}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x14, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000900)={0x14, &(0x7f00000006c0)={0x0, 0x6, 0x41, {0x41, 0x21, "b5b823b4e6ed4928618cfc6bcd313b2eb820f3675aa2021cc6a4adac9a205934efa7a76a7d3b3cf428f46dc8354f6b1e4539d2934cee52fe7247a09ceb00eb"}}, &(0x7f0000000740)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, &(0x7f0000000880)={0x0, 0x22, 0x14, {[@main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_4={0x3, 0x1, 0x7, "3b3e86cf"}, @global=@item_4={0x3, 0x1, 0x5, "5febb792"}, @main=@item_4={0x3, 0x0, 0x1, "b1be66f6"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x1, 0x1, 0x1, "92"}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1f, 0x7, 0x1, {0x22, 0x2c6}}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000940)={0x0, 0xa, 0x54, "cf33482aa5aaefd1a5acb503651ae454e4d6b8082400252e261f42f7c071e704392a0989b1c6c52cf49457c13a3999af22d1874d639975aa30a8826137344c9d43b94e5863d5b0d5ae42fb959ff4bd55933d98f6"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000a40)={0x20, 0x1, 0x88, "25cf107e0c94e7df6ca502f55baa8a8bd6de52003982b1d26fc5623ba6de0b8b15934c6373dcea511632c78601e31a899e6df60e41a4944a2353f431e7a334f8bcf824d9bc55e758f6821913c8502afeb850c194125c31ee292fd00b7cdb2a4d105db91fa73a60e4fb8b495f16b78dc1d820007af6eb91fa43258bcd0c80eaff19bb8eec00d34473"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x4}}) 07:37:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x7a}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:37:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) (async) 07:37:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x100, 0x80000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x100, 0x80000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) 07:37:57 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:37:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc601000024025000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:37:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x7, 0x0, 0x81, 0x2, 0x2, 0x6, 0x3a, 0xa7, 0x40, 0x1b2, 0x1000, 0x100, 0x38, 0x2, 0xf2d, 0xff39}, [{0x0, 0x6, 0x8, 0x27a, 0x8000000000000000, 0x6, 0x3}], "96eb892680f66f70925b2a540e9c2940f5c3868e688e43e116a56cef90a983f6dc5e82f2e527853c913089335f30e50e88008cc1666601f4f9413dcc47470a3f1595006df88705b6e89e843e90970d537fb6cea3b7a2605ee56b6da60c41cdc0582553173bd2b9cf91e481cda51ecb9020080b5accbfe0f5609084d2191378dbe67107803f2a5cc84714e469ac01935c5a4bc81067bdb5d1d5c60f81e2a1b36ed9ee1c108f121d5e002fb86263df8c916193ff614ea916779a98237d235ed04598ccc37357bb9b9572a179f5bc060c0c5c32f5e7d5785ca4d6756060075cb0db766c3da3cadd4bc4250bfab170a2894a6322733892", ['\x00']}, 0x26d) 07:37:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 571.550046][T15615] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:37:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) (async) write$binfmt_elf64(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x7, 0x0, 0x81, 0x2, 0x2, 0x6, 0x3a, 0xa7, 0x40, 0x1b2, 0x1000, 0x100, 0x38, 0x2, 0xf2d, 0xff39}, [{0x0, 0x6, 0x8, 0x27a, 0x8000000000000000, 0x6, 0x3}], "96eb892680f66f70925b2a540e9c2940f5c3868e688e43e116a56cef90a983f6dc5e82f2e527853c913089335f30e50e88008cc1666601f4f9413dcc47470a3f1595006df88705b6e89e843e90970d537fb6cea3b7a2605ee56b6da60c41cdc0582553173bd2b9cf91e481cda51ecb9020080b5accbfe0f5609084d2191378dbe67107803f2a5cc84714e469ac01935c5a4bc81067bdb5d1d5c60f81e2a1b36ed9ee1c108f121d5e002fb86263df8c916193ff614ea916779a98237d235ed04598ccc37357bb9b9572a179f5bc060c0c5c32f5e7d5785ca4d6756060075cb0db766c3da3cadd4bc4250bfab170a2894a6322733892", ['\x00']}, 0x26d) [ 571.598848][T15615] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 571.609456][T15613] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:37:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc601000024035000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:37:57 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:37:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) [ 571.784997][T15640] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 571.793964][T15636] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 571.810134][T15640] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 571.905480][ T4258] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 572.305470][ T4258] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.317397][ T4258] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.328641][ T4258] usb 6-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 572.346536][ T4258] usb 6-1: config 0 interface 0 has no altsetting 0 [ 572.353163][ T4258] usb 6-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.40 [ 572.365297][ T4258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.374700][ T4258] usb 6-1: config 0 descriptor?? [ 572.629729][T15623] UDC core: couldn't find an available UDC or it's busy: -16 [ 572.637403][T15623] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 572.945457][ T4258] usb 6-1: string descriptor 0 read error: -71 [ 572.953374][ T4258] usbhid 6-1:0.0: can't add hid device: -22 [ 572.959832][ T4258] usbhid: probe of 6-1:0.0 failed with error -22 [ 572.968116][ T4258] usb 6-1: USB disconnect, device number 103 07:37:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x7, 0x0, 0x81, 0x2, 0x2, 0x6, 0x3a, 0xa7, 0x40, 0x1b2, 0x1000, 0x100, 0x38, 0x2, 0xf2d, 0xff39}, [{0x0, 0x6, 0x8, 0x27a, 0x8000000000000000, 0x6, 0x3}], "96eb892680f66f70925b2a540e9c2940f5c3868e688e43e116a56cef90a983f6dc5e82f2e527853c913089335f30e50e88008cc1666601f4f9413dcc47470a3f1595006df88705b6e89e843e90970d537fb6cea3b7a2605ee56b6da60c41cdc0582553173bd2b9cf91e481cda51ecb9020080b5accbfe0f5609084d2191378dbe67107803f2a5cc84714e469ac01935c5a4bc81067bdb5d1d5c60f81e2a1b36ed9ee1c108f121d5e002fb86263df8c916193ff614ea916779a98237d235ed04598ccc37357bb9b9572a179f5bc060c0c5c32f5e7d5785ca4d6756060075cb0db766c3da3cadd4bc4250bfab170a2894a6322733892", ['\x00']}, 0x26d) syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) (async) write$binfmt_elf64(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x7, 0x0, 0x81, 0x2, 0x2, 0x6, 0x3a, 0xa7, 0x40, 0x1b2, 0x1000, 0x100, 0x38, 0x2, 0xf2d, 0xff39}, [{0x0, 0x6, 0x8, 0x27a, 0x8000000000000000, 0x6, 0x3}], "96eb892680f66f70925b2a540e9c2940f5c3868e688e43e116a56cef90a983f6dc5e82f2e527853c913089335f30e50e88008cc1666601f4f9413dcc47470a3f1595006df88705b6e89e843e90970d537fb6cea3b7a2605ee56b6da60c41cdc0582553173bd2b9cf91e481cda51ecb9020080b5accbfe0f5609084d2191378dbe67107803f2a5cc84714e469ac01935c5a4bc81067bdb5d1d5c60f81e2a1b36ed9ee1c108f121d5e002fb86263df8c916193ff614ea916779a98237d235ed04598ccc37357bb9b9572a179f5bc060c0c5c32f5e7d5785ca4d6756060075cb0db766c3da3cadd4bc4250bfab170a2894a6322733892", ['\x00']}, 0x26d) (async) 07:37:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:37:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a020a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:37:59 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:37:59 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc081, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0xffff}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xfe, 0x7, 0x20}}]}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0x400, 0xf2, 0x1, {0x22, 0x437}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xa6}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9, 0x6, 0x1, 0xff, 0x2}, 0x3e, &(0x7f0000000100)={0x5, 0xf, 0x3e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa784f3651b420dc7, 0xff, 0x81, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x40, 0xf00, 0x0, [0xff3f2e, 0xff, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "d2341a2770201df1522f0fe23443f324"}, @ptm_cap={0x3}]}, 0x7, [{0xf4, &(0x7f0000000140)=@string={0xf4, 0x3, "45b38f5ed04cf6342decb8dc961d4f625386461f5328ac685c345b56acc8c11411ab1003a2a2928b270a0361614efc09f1b8e4d1ecf47bf579e9f2053b3a021fd78c03bbe369c1ab5a6809896848c609feeabe788d650586afb441bd540f011bdd9b44100857599dca98c37434b9a0b0efbc06f36ba7ae8cbaf0d223d08b6d8642d646793d229543d8f0037e7b04a24bbc30f1c2713996228b8bc292563e4f57eb3a8fe07ad9b3644a2442fde1421b4b81dd8142c2287e86ee90c14e6cdd825866799bbed395f158f896872bda86289431a1a71633e4782bbd11dafb1d8d45c0f7cbdecd68a16f022b9e9d62ea0cd3f28a1d"}}, {0xea, &(0x7f0000000240)=@string={0xea, 0x3, "800311c23dedc6d8cf07e321a901b323f7cc8b66b05f52f3877260217e7f24dcd6e7cf1c79a65abd796342f044a3fb2c467198cee1632755e2a661e0be361dd6bd009a370e5baa2c8a7576daace092c5c1df87ac69680e63e28fe20e7f635925fe7fdb6c662d6a631e61eba607cac0839986644b5e629d319bc2dc58cc4bbbeccf055eb6722c64316f7bcb44ceac6e9d7f5cc822b19ec68eaeae01afcbf1966bcc30ef13f6c5d61587d08916ed1c6f54df7c26eadc2be65780ecf17127e0d2539656beae07e838b25842e6f1ae82b8fa82794e59d5a4a02d53c104dae177f3142fc17a4a27dffa82"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44d}}, {0xf7, &(0x7f0000000380)=@string={0xf7, 0x3, "b80bb0620e0985c9dfb7ad334de16f3d9af179bbc0925c36f0ab303bf2ce89005a4fcbe9b1722777e5f0ff3fc10ef79c94746bbe807f5bddde83dd54cd7b532613b09f0d3cc6b12500fbaf7920ee4d2423dc9196f4d0120eed3f05e7ec539035b55f7f7cc71edda485bce12486eaa8a19ce658dbdca9951f40decb598e53eb38b703837dcdb7a4a80af9307628e0cde1baf82624b24247d3e0fb6fde4713d908bf18c0286e23275f9c30c2286417694ece5eeba0e5663ab2bc9235b341c53439787b3f8ce014728f02a35222f50493bee43feb2d01351c31017a7e3a6f1d2f1932e2c189e8a11548da5d553144b5724b7229601226"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x58, &(0x7f0000000500)=@string={0x58, 0x3, "f8c52c81463fd8dc04782a10d85983ae250f49ffbaf94314aa599160989806b13a7c339506416fde79b3d3aec1e05f4b4ec72d4e4118ecc336b886f098b9a47fc86ffa9352b12103f3116856808b8d2e22303ee5cd34"}}, {0xba, &(0x7f0000000580)=@string={0xba, 0x3, "1e7b4c8ceb860de864887eee6b3f88932c67ef655272a325574ccf02fe4d876f041b52750f52fc394c624f09b69dc003a82f752307b25d5e41f730f995ecaef55dbd99789cc21e1f7c0658a428921718459b47ae11171bc2edb2e399020c7dc388ea449f16b8366d4f827548483220eb5ab2c1a0a1a0a6e6a3aa41ff1896cc63d6bc7b68df1d46dc1dc9c41175fd4c356a09747ce68b5e47f2f8646d591787ccf3b0a17d95fc10f0eec0d471d9d36fad6ed967dc33bcbd9b"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000dc0)={0x14, &(0x7f0000000b80)={0x0, 0x7, 0xb6, {0xb6, 0x4, "2833c4ea09ae5dfbc92d8b075dfd209e6dc43b4e7572df1f6f0be3ca9e73f60b0d8a4e97a0c2078e4af24290652bef4b46ca21cee1bf2897d62c5be62cb894aa304ce1256ab6c8d21173aa2d53671f49f943a85fa603db82a889b50f3a75151af35953da834264e3a3b28eba0be06e9582c5c6fee58539bce1f8424c2d6b63a9c4c0e96913e72e7b4aa1edb823d835cd6cad6e5293ff5e6621f00a72ef1a1341faf0cd1d175ef994be1e2c6254cf94f67e85ac16"}}, &(0x7f0000000c40)={0x0, 0x3, 0xda, @string={0xda, 0x3, "f44735f4dd377bf3fcdba75a83e531989dd84c5c0d8994b89e6358b7d60b6267f31abe4b6d63478958f376d858eb349cc12bb0a4e3da43f616e676ad863565e518922345f0ba605c6e8e1e97f561cc4bbd63456da345ff5a16f5e4e3ac80f1577adf496e5335596e08fd84b1a32c838148012774002c339e490ff5b19a866d8349703198fc19d3a55459f7730fb2e633bfce941f62150843321b146e945c73c1e31856e357cd3a2d4d287e18af28dca7d7b0d45131358602f8927ee30cf42aa8cfa72312cc1ba82f31e7978533e8d3328c29ebcf8ea397f5"}}, &(0x7f0000000d40)={0x0, 0x22, 0x6, {[@local, @global=@item_4={0x3, 0x1, 0x6, "577c83c9"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x3, 0x1, {0x22, 0x6ec}}}}, &(0x7f0000001000)={0x18, &(0x7f0000000e00)={0x20, 0x12, 0x97, "11b537ad24bc5c3ea04672407478597634bf529691b73cbb4097aad015e359757e8098fdda5d5d09de36a1ab3e86267a2bee55331ae93168eb6949e406bf856a659da5519ed148b92cac71a584a1f2d271cada68975ae43c147d6fb0bce7116e49d46ce70adc56e664ab0c901a45c36707915e2b6ad12a464ad91be06fb8b7c0b3f48911513d3c081d25c3cb8f26a14deb765403f63bfe"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x41}, &(0x7f0000000f40)={0x20, 0x1, 0x63, "3340eb9b3f1dea600d4e0218617250ffc857aecabfff8e7255a46339d3e4d7876e59813d5c77d64ca497d202716d3322e7afc60b9ae7741d8db03294a1b451bc86e5bb5f267c33f737a2b8c9befebe72c6dcdacfea2f44895c354a7011bec799b5a0e1"}, &(0x7f0000000fc0)={0x20, 0x3, 0x1, 0x1f}}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x14, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000900)={0x14, &(0x7f00000006c0)={0x0, 0x6, 0x41, {0x41, 0x21, "b5b823b4e6ed4928618cfc6bcd313b2eb820f3675aa2021cc6a4adac9a205934efa7a76a7d3b3cf428f46dc8354f6b1e4539d2934cee52fe7247a09ceb00eb"}}, &(0x7f0000000740)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, &(0x7f0000000880)={0x0, 0x22, 0x14, {[@main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_4={0x3, 0x1, 0x7, "3b3e86cf"}, @global=@item_4={0x3, 0x1, 0x5, "5febb792"}, @main=@item_4={0x3, 0x0, 0x1, "b1be66f6"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x1, 0x1, 0x1, "92"}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1f, 0x7, 0x1, {0x22, 0x2c6}}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000940)={0x0, 0xa, 0x54, "cf33482aa5aaefd1a5acb503651ae454e4d6b8082400252e261f42f7c071e704392a0989b1c6c52cf49457c13a3999af22d1874d639975aa30a8826137344c9d43b94e5863d5b0d5ae42fb959ff4bd55933d98f6"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000a40)={0x20, 0x1, 0x88, "25cf107e0c94e7df6ca502f55baa8a8bd6de52003982b1d26fc5623ba6de0b8b15934c6373dcea511632c78601e31a899e6df60e41a4944a2353f431e7a334f8bcf824d9bc55e758f6821913c8502afeb850c194125c31ee292fd00b7cdb2a4d105db91fa73a60e4fb8b495f16b78dc1d820007af6eb91fa43258bcd0c80eaff19bb8eec00d34473"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x4}}) 07:37:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0xffffffff, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x8}}, 0x10) 07:37:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0xffffffff, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async, rerun: 32) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) (async, rerun: 64) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x8}}, 0x10) (rerun: 64) [ 573.449142][T15649] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 573.456581][T15646] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 573.471265][T15649] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:37:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:37:59 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804ffff", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:37:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f00000de000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) [ 573.499023][T15654] UDC core: couldn't find an available UDC or it's busy: -16 [ 573.522089][T15654] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:37:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a030a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:37:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0xffffffff, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x8}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0xffffffff, @remote}}}, 0x118) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x8}}, 0x10) (async) 07:37:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x3}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:37:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f00000de000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 07:37:59 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 573.676406][T15667] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 573.718666][T15667] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:37:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) [ 573.765307][ T3677] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 573.786849][T15681] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 574.015259][ T3677] usb 6-1: Using ep0 maxpacket: 32 [ 574.215371][ T3677] usb 6-1: config 1 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.226751][ T3677] usb 6-1: config 1 interface 0 has no altsetting 0 [ 574.385539][ T3677] usb 6-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.40 [ 574.394817][ T3677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.403302][ T3677] usb 6-1: Product: Ñ [ 574.407606][ T3677] usb 6-1: Manufacturer: ΀숑ß⇣Ʃ⎳쳷暋徰ï’犇Ⅰ罾á³ê™¹ëµšæ¹ï‚ê„⳻煆캘æ¡å”§ê›¢î¡ãš¾í˜Â½ãžšå¬Žâ²ªç–Šî‚¬ì–’겇桩挎迢໢æ¿â•™ç¿¾æ³›âµ¦æªæ„žê›«ì¨‡è€èš™ä­¤æ‰žã†ìŠ›å£œä¯Œî²»×뙞Ⱳㅤ筯䓋곎鵮屿⋈麱軆꺮ê¼ï‡‹æ®–ヌá¯ì—¶á—–킇ᚉ᳭呯糟⯜埦燱å’嚖꺾눸䉘芮視禂奎ꓕⶠ셓矡ᓳ섯䩺苺 [ 574.440548][ T3677] usb 6-1: SerialNumber: ஸ抰ऎ즅럟㎭î…㵯뭹鋀㙜꯰㬰컲‰佚犱眧㿿à»é³·ç’”빫羀èžå“ç¯â™“뀓ඟ옼▱ff禯â‘隑탴ฒ㿭å¬ã–徵籿ệê“벅ⓡꆨ꧜ᾕ始厎㣫η綃ëŸê¢¤ï¤Šç˜°î€¨î‡ï¢ºâ¦äŠ²í‡ï¯ á‡à£™á¢¿â£€â®å¼§ã‚œâ£‚á¤ä¹©å»Žêƒ«æ›¥ëˆºéŠ¼ëŒµì•ã¤´ç­¸è°¿á“ è½²êŒ‚≒ӵ뺓㿤ⷫã”ã„œç¨ã©¾áµ¯á¤¯îˆ²è§ê‡¨ä •å·šã…•ë•„䭲⥲በ [ 576.077376][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.087810][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.094733][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.104892][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.114944][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.123543][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.133705][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.142283][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.152633][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.159649][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.166744][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.173610][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.180585][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.187623][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.194529][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.201625][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.208861][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.215930][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.222805][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.229758][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.236717][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.243564][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.250515][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.257423][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.264270][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.271207][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.279165][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.286121][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.292990][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.299938][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.307345][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.314244][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.321241][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.328158][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.335034][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.342028][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.350510][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.360569][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.369266][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.379212][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.391297][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.398331][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.405359][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.412592][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.419539][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.426477][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.433340][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.440275][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.447198][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.454051][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.461000][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.468115][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 07:38:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46d, 0xc081, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0xffff}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xfe, 0x7, 0x20}}]}}}]}}]}}, 0x0) (async, rerun: 32) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0x400, 0xf2, 0x1, {0x22, 0x437}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xa6}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9, 0x6, 0x1, 0xff, 0x2}, 0x3e, &(0x7f0000000100)={0x5, 0xf, 0x3e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa784f3651b420dc7, 0xff, 0x81, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x40, 0xf00, 0x0, [0xff3f2e, 0xff, 0xff000f]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "d2341a2770201df1522f0fe23443f324"}, @ptm_cap={0x3}]}, 0x7, [{0xf4, &(0x7f0000000140)=@string={0xf4, 0x3, "45b38f5ed04cf6342decb8dc961d4f625386461f5328ac685c345b56acc8c11411ab1003a2a2928b270a0361614efc09f1b8e4d1ecf47bf579e9f2053b3a021fd78c03bbe369c1ab5a6809896848c609feeabe788d650586afb441bd540f011bdd9b44100857599dca98c37434b9a0b0efbc06f36ba7ae8cbaf0d223d08b6d8642d646793d229543d8f0037e7b04a24bbc30f1c2713996228b8bc292563e4f57eb3a8fe07ad9b3644a2442fde1421b4b81dd8142c2287e86ee90c14e6cdd825866799bbed395f158f896872bda86289431a1a71633e4782bbd11dafb1d8d45c0f7cbdecd68a16f022b9e9d62ea0cd3f28a1d"}}, {0xea, &(0x7f0000000240)=@string={0xea, 0x3, "800311c23dedc6d8cf07e321a901b323f7cc8b66b05f52f3877260217e7f24dcd6e7cf1c79a65abd796342f044a3fb2c467198cee1632755e2a661e0be361dd6bd009a370e5baa2c8a7576daace092c5c1df87ac69680e63e28fe20e7f635925fe7fdb6c662d6a631e61eba607cac0839986644b5e629d319bc2dc58cc4bbbeccf055eb6722c64316f7bcb44ceac6e9d7f5cc822b19ec68eaeae01afcbf1966bcc30ef13f6c5d61587d08916ed1c6f54df7c26eadc2be65780ecf17127e0d2539656beae07e838b25842e6f1ae82b8fa82794e59d5a4a02d53c104dae177f3142fc17a4a27dffa82"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44d}}, {0xf7, &(0x7f0000000380)=@string={0xf7, 0x3, "b80bb0620e0985c9dfb7ad334de16f3d9af179bbc0925c36f0ab303bf2ce89005a4fcbe9b1722777e5f0ff3fc10ef79c94746bbe807f5bddde83dd54cd7b532613b09f0d3cc6b12500fbaf7920ee4d2423dc9196f4d0120eed3f05e7ec539035b55f7f7cc71edda485bce12486eaa8a19ce658dbdca9951f40decb598e53eb38b703837dcdb7a4a80af9307628e0cde1baf82624b24247d3e0fb6fde4713d908bf18c0286e23275f9c30c2286417694ece5eeba0e5663ab2bc9235b341c53439787b3f8ce014728f02a35222f50493bee43feb2d01351c31017a7e3a6f1d2f1932e2c189e8a11548da5d553144b5724b7229601226"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x58, &(0x7f0000000500)=@string={0x58, 0x3, "f8c52c81463fd8dc04782a10d85983ae250f49ffbaf94314aa599160989806b13a7c339506416fde79b3d3aec1e05f4b4ec72d4e4118ecc336b886f098b9a47fc86ffa9352b12103f3116856808b8d2e22303ee5cd34"}}, {0xba, &(0x7f0000000580)=@string={0xba, 0x3, "1e7b4c8ceb860de864887eee6b3f88932c67ef655272a325574ccf02fe4d876f041b52750f52fc394c624f09b69dc003a82f752307b25d5e41f730f995ecaef55dbd99789cc21e1f7c0658a428921718459b47ae11171bc2edb2e399020c7dc388ea449f16b8366d4f827548483220eb5ab2c1a0a1a0a6e6a3aa41ff1896cc63d6bc7b68df1d46dc1dc9c41175fd4c356a09747ce68b5e47f2f8646d591787ccf3b0a17d95fc10f0eec0d471d9d36fad6ed967dc33bcbd9b"}}]}) (rerun: 32) syz_usb_control_io$hid(r1, &(0x7f0000000dc0)={0x14, &(0x7f0000000b80)={0x0, 0x7, 0xb6, {0xb6, 0x4, "2833c4ea09ae5dfbc92d8b075dfd209e6dc43b4e7572df1f6f0be3ca9e73f60b0d8a4e97a0c2078e4af24290652bef4b46ca21cee1bf2897d62c5be62cb894aa304ce1256ab6c8d21173aa2d53671f49f943a85fa603db82a889b50f3a75151af35953da834264e3a3b28eba0be06e9582c5c6fee58539bce1f8424c2d6b63a9c4c0e96913e72e7b4aa1edb823d835cd6cad6e5293ff5e6621f00a72ef1a1341faf0cd1d175ef994be1e2c6254cf94f67e85ac16"}}, &(0x7f0000000c40)={0x0, 0x3, 0xda, @string={0xda, 0x3, "f44735f4dd377bf3fcdba75a83e531989dd84c5c0d8994b89e6358b7d60b6267f31abe4b6d63478958f376d858eb349cc12bb0a4e3da43f616e676ad863565e518922345f0ba605c6e8e1e97f561cc4bbd63456da345ff5a16f5e4e3ac80f1577adf496e5335596e08fd84b1a32c838148012774002c339e490ff5b19a866d8349703198fc19d3a55459f7730fb2e633bfce941f62150843321b146e945c73c1e31856e357cd3a2d4d287e18af28dca7d7b0d45131358602f8927ee30cf42aa8cfa72312cc1ba82f31e7978533e8d3328c29ebcf8ea397f5"}}, &(0x7f0000000d40)={0x0, 0x22, 0x6, {[@local, @global=@item_4={0x3, 0x1, 0x6, "577c83c9"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x3, 0x1, {0x22, 0x6ec}}}}, &(0x7f0000001000)={0x18, &(0x7f0000000e00)={0x20, 0x12, 0x97, "11b537ad24bc5c3ea04672407478597634bf529691b73cbb4097aad015e359757e8098fdda5d5d09de36a1ab3e86267a2bee55331ae93168eb6949e406bf856a659da5519ed148b92cac71a584a1f2d271cada68975ae43c147d6fb0bce7116e49d46ce70adc56e664ab0c901a45c36707915e2b6ad12a464ad91be06fb8b7c0b3f48911513d3c081d25c3cb8f26a14deb765403f63bfe"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x41}, &(0x7f0000000f40)={0x20, 0x1, 0x63, "3340eb9b3f1dea600d4e0218617250ffc857aecabfff8e7255a46339d3e4d7876e59813d5c77d64ca497d202716d3322e7afc60b9ae7741d8db03294a1b451bc86e5bb5f267c33f737a2b8c9befebe72c6dcdacfea2f44895c354a7011bec799b5a0e1"}, &(0x7f0000000fc0)={0x20, 0x3, 0x1, 0x1f}}) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x14, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000900)={0x14, &(0x7f00000006c0)={0x0, 0x6, 0x41, {0x41, 0x21, "b5b823b4e6ed4928618cfc6bcd313b2eb820f3675aa2021cc6a4adac9a205934efa7a76a7d3b3cf428f46dc8354f6b1e4539d2934cee52fe7247a09ceb00eb"}}, &(0x7f0000000740)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, &(0x7f0000000880)={0x0, 0x22, 0x14, {[@main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x0, 0x1, 0x4}, @global=@item_4={0x3, 0x1, 0x7, "3b3e86cf"}, @global=@item_4={0x3, 0x1, 0x5, "5febb792"}, @main=@item_4={0x3, 0x0, 0x1, "b1be66f6"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x1, 0x1, 0x1, "92"}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1f, 0x7, 0x1, {0x22, 0x2c6}}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000940)={0x0, 0xa, 0x54, "cf33482aa5aaefd1a5acb503651ae454e4d6b8082400252e261f42f7c071e704392a0989b1c6c52cf49457c13a3999af22d1874d639975aa30a8826137344c9d43b94e5863d5b0d5ae42fb959ff4bd55933d98f6"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000a40)={0x20, 0x1, 0x88, "25cf107e0c94e7df6ca502f55baa8a8bd6de52003982b1d26fc5623ba6de0b8b15934c6373dcea511632c78601e31a899e6df60e41a4944a2353f431e7a334f8bcf824d9bc55e758f6821913c8502afeb850c194125c31ee292fd00b7cdb2a4d105db91fa73a60e4fb8b495f16b78dc1d820007af6eb91fa43258bcd0c80eaff19bb8eec00d34473"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x4}}) 07:38:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f00000de000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 07:38:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a040a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:02 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x4}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:02 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) (async) [ 576.474987][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.481961][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.495315][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.506228][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.513666][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.536471][T15695] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 576.546691][T15696] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 576.555279][T15696] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 576.569553][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 07:38:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x5}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRESDEC=r0]) [ 576.583691][T15701] UDC core: couldn't find an available UDC or it's busy: -16 [ 576.591010][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.619539][T15701] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:38:02 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a050a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 576.631240][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.638340][T15701] UDC core: couldn't find an available UDC or it's busy: -16 [ 576.638361][T15701] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 576.638727][T15701] UDC core: couldn't find an available UDC or it's busy: -16 [ 576.703931][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.726503][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.733880][T15711] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 576.746723][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 07:38:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x6}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 576.757703][T15701] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 576.769077][T15714] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 576.770723][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.800115][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 07:38:02 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 576.800217][T15701] UDC core: couldn't find an available UDC or it's busy: -16 [ 576.807936][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.819774][T15714] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 576.857707][T15701] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 576.869411][T15712] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.869947][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.905640][T15721] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 576.905708][T15701] UDC core: couldn't find an available UDC or it's busy: -16 [ 576.924302][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.960584][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 576.975814][T15701] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 576.996900][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.035027][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.051410][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.061317][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.074185][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.081717][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.089337][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.096585][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.103794][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.111045][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.118318][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.125588][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.133654][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.140896][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.148199][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.155472][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.162693][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.174870][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.182059][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.189498][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.196937][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.204124][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.211772][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.222787][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.234593][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.249242][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.260863][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.272341][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.284229][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.298723][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.310184][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.317567][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.324702][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.333172][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.341425][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.348802][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.356155][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.363259][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.370559][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.377821][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.384752][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.392114][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.399241][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.406421][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.413390][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.420566][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.427935][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.435405][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.442302][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.449279][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.456236][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.463109][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.470080][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.477077][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.483953][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.490936][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.497871][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.504728][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.511728][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.518683][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.525647][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.532531][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.539886][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.546849][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.553711][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.560675][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.567616][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.574475][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.581555][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.588498][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.595411][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.602293][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.609272][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.616242][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.623122][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.630147][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.637129][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.644402][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.651379][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.658311][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.665273][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.672153][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.679103][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.686046][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.692908][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.699841][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.706878][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.713738][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.720681][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.727602][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.734451][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.741879][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.749255][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.756228][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.763101][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.770089][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.777074][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.783945][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.790904][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.797924][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.804790][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.811806][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.818705][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.825681][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.832575][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.839531][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.846836][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.853732][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.860650][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.867614][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.874495][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.881399][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.888311][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.895272][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.902161][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.910507][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.917544][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.924420][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.931630][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.938765][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.946401][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.953301][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.960496][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.967768][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.974687][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.981774][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.988865][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 577.995979][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.002848][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.009994][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.017035][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.023899][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.031018][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.038080][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.044953][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.052538][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.059727][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.066816][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.073703][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.080915][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.087999][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.094860][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.102021][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.109134][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.116239][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.123165][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.130305][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.137698][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.144618][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.152311][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.159399][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.166573][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.173456][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.180534][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.187605][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.194485][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.201749][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.208866][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.215971][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.222848][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.229951][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.237390][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.244277][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.251526][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.259085][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.266062][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.273031][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.279972][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.286893][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.293750][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.300716][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.307671][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.314579][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.321510][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.328458][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.335409][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.342279][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.349657][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.357327][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.364257][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.371377][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.378560][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.385748][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.392688][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.399781][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.406982][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.413911][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.421000][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.428092][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.435026][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.442217][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.449316][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.456464][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.463774][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.471259][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.478395][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.485561][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.492488][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.499573][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.506548][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.513414][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.520376][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.527285][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.534135][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.541071][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.548076][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.554941][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.562388][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.569359][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.576273][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.583133][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.590067][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.597006][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.603870][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.610822][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.617814][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.624683][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.631680][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.638594][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.645552][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.652419][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.659361][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.666837][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.673702][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.680627][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.687540][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.694557][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.701485][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.708420][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.715446][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.722315][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.729264][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.736159][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.743020][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.749987][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.756943][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.763810][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.771302][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.778267][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.785212][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.792082][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.799067][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.805998][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.812878][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.819798][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.826709][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.833560][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.840485][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.847414][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.854273][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.861198][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.868660][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.875613][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.882471][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.889415][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.896361][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.903237][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.910185][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.917149][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.924006][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.930922][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.937828][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.944681][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.951742][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.958682][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.965611][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.973024][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.979971][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.986875][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 578.993733][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.000676][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.007604][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.014561][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.021478][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.028387][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.035321][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.042201][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.049178][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.056113][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.062984][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.069955][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.077326][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.084199][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.091147][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.098052][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.104909][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.111846][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.118755][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.125709][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.132566][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.139483][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.146389][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.153237][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.160168][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.167076][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.174441][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.181373][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.188394][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.195356][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.202235][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.209189][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.216143][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.223035][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.229993][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.236923][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.243804][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.250915][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.257828][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.264688][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.271851][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.279628][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.286608][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.293503][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.300421][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.307389][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.314253][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.321219][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.328132][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.334978][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.341905][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.348824][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.356115][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.362982][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.369946][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.376954][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.384189][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.391178][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.398187][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.405048][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.411990][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.418900][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.425854][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.432902][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.439954][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.447670][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.454526][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.461446][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.468427][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.475371][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.482725][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.489793][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.496760][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.503637][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.510635][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.517600][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.524479][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.531570][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.538478][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 07:38:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040380709174000000000010902240001000000000000000000000a0000000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="00eee031ec0043bde7a0809659ca895c6443fbee4c401d7b50e0e9b2174e757c00", @ANYBLOB="ec2e169e5d5eb7c1ab2fe65770ab11e3837c07ec940c91bd383eb020b3d8b2ecd65ae559a93c1eeeb8462a01f33c5c113142f5005d558b4c821b8cc63fb865e2ce7cacba761b"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000540)={0x18, &(0x7f0000000300)={0x0, 0x3, 0xbe, {0xbe, 0xb, "f2b86dda725ae753ee8a941924b500501425ad1759226d9ff0a3ec83f0c80bbfa4e640dccac4778af57b4cd8f8e551e691acedc848d2883edc34af2323e49916ae8d2266728605987c5a4ce005abfecbf441bcc34df2bcde2daa9a580ca91e3fa4d12ffe17e9e86c5c8dc2bd9668127385cb9105590e301f4961642ef8561f7e6437f353e4778ab19d4f296d890dc31a7e3bb1f12280c48349b5ac7c13f9949bf78c0f95995727e3087a0acfbf94bd5af708098b223a5845d01da892"}}, &(0x7f0000000040)={0x0, 0x3, 0x10, @string={0x10, 0x3, "dc2f6385abcb6c236a0be0207ad4"}}, &(0x7f0000000400)={0x0, 0xf, 0x49, {0x5, 0xf, 0x49, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "ac95105fa8498a6861414d46de4a670c"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "75a37b6ffdefac37d4cebd20eadb8d66"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3f, 0x4, 0x5, 0xf000, 0x1, [0xc8, 0xff3f, 0x3f, 0x3f0f]}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x1f, 0x40, "4009bd25", "d04abb46"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x60, 0x10, 0x9, 0x81, 0x5, 0x2, 0x63}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000580)={0x20, 0x15, 0xda, "4c73c5e3e81f10004d2eb5b0bd4698ca8d89977fdf5a607ecfdf9c5b7ab34377d1b9135d8641f09fcbd227504af8cd3f7d8a82525db91761b4182dd3ff88762a3f1f726652ac99a29fc8a256b8a32dca7ae1b95c4874cab93b2ed20db17416ac0351c7792148e3e7e17cff15bf857b10f05b155db96bb0aba55dff9e20305bdb4f8ad5226599086c46871644fd94a177c01da6c002c62bb749dae6103f03adc21b1a5aa5278ca70e4ab4b5d9d6775154c2694872204c00a720b47a05a6f3c7a19c78ef5f898ddb5dd961b506c76576efdec54b136abe358409fe"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xc0, 0x2, [0x0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0xfc}, &(0x7f0000000800)={0x40, 0xb, 0x2, "c41e"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, &(0x7f0000000900)={0x40, 0x19, 0x2, "40c9"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000009c0)={0x40, 0x1e, 0x1}, &(0x7f0000000a00)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0xc, &(0x7f0000000000)={0x0, 0x22, 0x17, {0x17, 0x9, "24560a04bd61f8f0e656f8fac4ad0277583058ebd9"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x10, &(0x7f0000000180)={0x40, 0x30, 0x3d, "ed05960553aa767bbd382e65a3bc9f069f88c1d56eabac30d4796d09102d4722058d66ecccc260c178722f5db6a93897e7188a8c3d88c5c32c85a89499"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x80}}) 07:38:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x7}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a060a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRESDEC=r0]) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRESDEC=r0]) (async) 07:38:05 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) [ 579.545713][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.552645][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.559878][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.567122][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.574187][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.581472][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.613448][T15727] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 579.634184][T15730] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 579.637278][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 07:38:05 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 579.663181][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.671354][T15730] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 579.677133][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.692914][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 07:38:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 579.715507][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.737454][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.750877][T15728] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 07:38:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a070a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 579.758069][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.772097][T15739] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 579.804870][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 07:38:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x9}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 579.811763][T15746] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.853763][T15748] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:05 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 579.859326][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.897925][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.905463][T15748] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 579.924573][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 07:38:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0xe}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 579.948081][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.969966][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 579.974826][T15752] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 579.991957][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.010758][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.030780][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.051659][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.088081][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.099527][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.107107][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.114151][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.121876][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.129319][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.136909][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.143940][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.151454][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.158793][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.166104][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.173161][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.188574][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.202511][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.215298][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.228127][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.241008][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.253825][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.267725][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.280617][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.294792][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.309156][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.322115][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.336238][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.350206][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.364262][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.377164][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.391163][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.405375][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.412432][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.419561][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.426678][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.433755][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.440873][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.449015][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.456320][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.463386][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.470975][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.485302][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.492360][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.499558][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.507801][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.514826][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.522187][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.529430][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.536650][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.543658][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.551332][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.575395][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.582398][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.592839][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.616967][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.624254][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.631518][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.638665][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.646284][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.653338][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.661163][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.668340][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.675515][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.682479][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.689683][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.696858][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.703826][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.712392][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.719595][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.726781][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.733751][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.740814][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.747940][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.754882][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.762051][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.769110][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.776375][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.783307][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.790425][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.797561][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.804486][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.811664][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.819062][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.826227][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.833154][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.840254][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.847309][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.854240][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.861423][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.868528][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.875660][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.882623][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.889737][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.896853][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.903821][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.910833][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.918143][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.925066][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.932065][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.939265][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.946314][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.953315][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.960304][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.967289][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.974183][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.981187][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.988161][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 580.995067][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.002058][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.009020][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.016018][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.023491][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.030565][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.037568][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.044520][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.051528][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.058490][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.065493][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.072519][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.079678][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.086654][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.093553][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.100564][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.112760][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.120235][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.127265][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.134178][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.141194][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.148214][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.155365][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.162310][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.169440][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.176661][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.183616][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.190723][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.197837][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.204798][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.212065][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.219154][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.226852][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.234724][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.241838][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.248932][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.256066][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.263009][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.270090][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.277159][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.284123][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.291157][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.298159][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.305078][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.312095][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.319101][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.326651][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.333587][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.340546][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.347655][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.354561][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.361563][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.368521][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.375530][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.382461][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.389472][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.396479][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.403393][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.410426][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.417422][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.424378][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.431894][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.438839][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.445797][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.452662][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.459599][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.466524][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.473378][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.480310][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.487212][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.494054][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.501121][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.508158][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.515003][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.521901][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.528824][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.536513][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.543390][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.550356][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.557547][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.564403][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.571356][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.578254][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.585096][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.592360][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.599340][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.606288][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.613152][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.620064][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.627009][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.634720][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.641653][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.648569][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.655548][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.662423][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.669392][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.676319][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.683188][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.690161][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.697181][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.704043][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.710991][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.717901][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.724780][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.731729][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.739039][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.746005][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.752866][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.759808][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.766713][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.773570][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.780525][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.787427][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.794299][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.801298][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.808247][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.815125][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.822078][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.829058][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.835971][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.843158][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.850220][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.857145][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.864098][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.871030][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.877928][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.884776][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.891717][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.898600][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.905929][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.912799][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.919757][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.926678][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.933533][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.940917][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.947864][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.954746][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.961675][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.968614][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.975560][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.982426][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.989515][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 581.996422][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.003280][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.010300][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.017213][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.024087][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.031011][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.037951][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.045292][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.052175][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.059108][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.066049][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.072919][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.079859][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.086759][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.093599][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.100536][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.107486][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.114355][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.121304][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.128248][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.135110][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.142049][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.149505][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.156463][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.163331][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.170272][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.177177][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.184028][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.190940][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.197884][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.204773][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.211699][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.218596][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.225555][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.232412][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.239381][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.246809][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.253705][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.260657][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.267587][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.274428][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.281344][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.288297][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.295273][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.302147][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.309076][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.316000][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.322875][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.329834][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.336760][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.343630][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.351100][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.358037][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.364897][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.371827][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.378764][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.385873][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.392744][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.399742][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.406702][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.413596][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.420618][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.427591][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.434461][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.441399][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.448316][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.455805][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.462696][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.469690][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.476601][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.483464][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.490445][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.497399][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.504251][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.511184][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.518095][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.524958][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.531895][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.538794][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.545759][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.552626][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.560012][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.566991][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.573855][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.580772][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.587668][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.594526][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.601445][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.608372][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.615309][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 07:38:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040380709174000000000010902240001000000000000000000000a0000000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="00eee031ec0043bde7a0809659ca895c6443fbee4c401d7b50e0e9b2174e757c00", @ANYBLOB="ec2e169e5d5eb7c1ab2fe65770ab11e3837c07ec940c91bd383eb020b3d8b2ecd65ae559a93c1eeeb8462a01f33c5c113142f5005d558b4c821b8cc63fb865e2ce7cacba761b"], 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) syz_usb_disconnect(r1) (async, rerun: 32) syz_usb_control_io(r1, &(0x7f0000000540)={0x18, &(0x7f0000000300)={0x0, 0x3, 0xbe, {0xbe, 0xb, "f2b86dda725ae753ee8a941924b500501425ad1759226d9ff0a3ec83f0c80bbfa4e640dccac4778af57b4cd8f8e551e691acedc848d2883edc34af2323e49916ae8d2266728605987c5a4ce005abfecbf441bcc34df2bcde2daa9a580ca91e3fa4d12ffe17e9e86c5c8dc2bd9668127385cb9105590e301f4961642ef8561f7e6437f353e4778ab19d4f296d890dc31a7e3bb1f12280c48349b5ac7c13f9949bf78c0f95995727e3087a0acfbf94bd5af708098b223a5845d01da892"}}, &(0x7f0000000040)={0x0, 0x3, 0x10, @string={0x10, 0x3, "dc2f6385abcb6c236a0be0207ad4"}}, &(0x7f0000000400)={0x0, 0xf, 0x49, {0x5, 0xf, 0x49, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "ac95105fa8498a6861414d46de4a670c"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "75a37b6ffdefac37d4cebd20eadb8d66"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3f, 0x4, 0x5, 0xf000, 0x1, [0xc8, 0xff3f, 0x3f, 0x3f0f]}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x1f, 0x40, "4009bd25", "d04abb46"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x60, 0x10, 0x9, 0x81, 0x5, 0x2, 0x63}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000580)={0x20, 0x15, 0xda, "4c73c5e3e81f10004d2eb5b0bd4698ca8d89977fdf5a607ecfdf9c5b7ab34377d1b9135d8641f09fcbd227504af8cd3f7d8a82525db91761b4182dd3ff88762a3f1f726652ac99a29fc8a256b8a32dca7ae1b95c4874cab93b2ed20db17416ac0351c7792148e3e7e17cff15bf857b10f05b155db96bb0aba55dff9e20305bdb4f8ad5226599086c46871644fd94a177c01da6c002c62bb749dae6103f03adc21b1a5aa5278ca70e4ab4b5d9d6775154c2694872204c00a720b47a05a6f3c7a19c78ef5f898ddb5dd961b506c76576efdec54b136abe358409fe"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xc0, 0x2, [0x0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0xfc}, &(0x7f0000000800)={0x40, 0xb, 0x2, "c41e"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, &(0x7f0000000900)={0x40, 0x19, 0x2, "40c9"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000009c0)={0x40, 0x1e, 0x1}, &(0x7f0000000a00)={0x40, 0x21, 0x1}}) (rerun: 32) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0xc, &(0x7f0000000000)={0x0, 0x22, 0x17, {0x17, 0x9, "24560a04bd61f8f0e656f8fac4ad0277583058ebd9"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x10, &(0x7f0000000180)={0x40, 0x30, 0x3d, "ed05960553aa767bbd382e65a3bc9f069f88c1d56eabac30d4796d09102d4722058d66ecccc260c178722f5db6a93897e7188a8c3d88c5c32c85a89499"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x80}}) 07:38:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a080a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0xf}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:08 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x2}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[0x1c00, 0x6], 0x2, 0x800, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) openat$zero(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) 07:38:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRESDEC=r0]) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRESDEC=r0]) (async) [ 582.622179][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.629126][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.636079][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.645076][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.652409][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 07:38:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x2}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[0x1c00, 0x6], 0x2, 0x800, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x106, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) openat$zero(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) [ 582.683344][T15758] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 582.704723][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.721887][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.730357][T15758] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 582.742090][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.763235][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 07:38:08 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x60}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 582.779572][T15763] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 07:38:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a090a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x2}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[0x1c00, 0x6], 0x2, 0x800, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) openat$zero(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x2}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[0x1c00, 0x6], 0x2, 0x800}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x106, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) openat$zero(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) [ 582.805245][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.812149][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.816275][T15775] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.853915][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.868183][T15777] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 582.884586][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 07:38:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 582.903280][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.931037][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.934328][T15788] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 582.956856][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 582.969544][T15788] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 582.976703][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.030918][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.054078][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.063466][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.071522][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.078560][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.086403][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.093424][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.100538][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.107644][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.114652][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.121752][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.128848][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.135926][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.142931][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.158987][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.166047][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.173657][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.180770][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.187845][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.194855][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.201937][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.209025][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.216110][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.223113][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.230201][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.237253][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.244256][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.251332][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.258399][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.266163][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.274158][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.281434][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.288646][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.296708][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.303692][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.310935][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.318129][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.325089][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.332315][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.339586][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.355389][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.362307][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.369545][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.377824][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.384710][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.391901][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.399416][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.406516][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.413392][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.420555][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.427884][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.434853][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.441996][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.449111][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.456194][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.463065][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.470241][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.478281][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.490154][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.497328][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.504202][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.511520][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.518624][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.525773][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.532651][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.539832][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.547028][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.553900][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.560977][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.568105][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.574977][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.582391][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.589442][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.596549][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.603411][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.610463][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.617695][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.624572][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.631763][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.638812][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.645939][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.652826][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.659918][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.666997][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.673990][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.681990][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.689171][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.696235][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.703125][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.710291][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.717397][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.724274][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.731412][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.738643][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.745838][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.752722][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.759802][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.766784][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.773651][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.780601][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.787897][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.794771][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.801705][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.808658][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.815616][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.822487][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.829432][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.836472][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.843432][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.850391][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.857328][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.864202][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.871194][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.878115][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.885627][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.892522][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.899571][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.906522][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.913386][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.920323][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.927233][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.934081][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.941033][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.947945][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.954789][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.961707][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.968628][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.975559][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.982428][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.990254][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 583.997299][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.004272][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.011260][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.018211][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.025098][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.032095][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.039038][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.046020][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.052939][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.059895][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.066930][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.073804][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.080774][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.087703][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.094928][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.101891][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.108827][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.115771][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.122671][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.129620][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.136533][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.143407][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.150377][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.157338][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.164223][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.171529][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.178719][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.185815][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.193188][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.200393][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.207530][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.214403][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.221549][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.228598][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.235673][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.242553][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.249663][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.256711][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.263595][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.270732][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.277932][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.284819][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.292006][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.300133][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.307266][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.314147][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.321283][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.328519][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.335593][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.342477][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.349633][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.357473][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.364364][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.371451][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.378481][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.385577][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.392456][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.399922][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.406993][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.413864][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.421217][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.428321][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.435452][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.442332][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.449454][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.456560][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.463437][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.470575][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.477668][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.484534][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.491666][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.499103][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.506053][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.512922][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.519849][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.526763][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.533628][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.540574][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.547511][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.554365][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.561306][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.568243][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.575119][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.582089][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.589151][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.596171][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.603458][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.610493][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.617459][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.624357][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.631369][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.638320][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.645423][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.652353][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.659353][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.666371][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.673281][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.680301][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.687398][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.694307][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.701307][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.709183][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.716237][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.723244][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.730267][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.737290][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.744205][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.751207][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.758189][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.765349][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.772331][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.779339][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.786333][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.793253][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.800298][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.807688][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.814565][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.821490][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.828453][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.835404][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.842290][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.849259][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.856211][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.863082][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.870020][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.876961][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.883835][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.890778][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.897689][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.904548][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.912005][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.918979][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.925957][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.933004][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.939950][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.946970][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.953843][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.960800][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.967783][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.974669][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.981656][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.988697][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 584.995644][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 585.002514][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 585.009487][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 585.016800][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 585.023677][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 585.030637][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 585.037704][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 585.044597][ T3677] wacom 0003:056A:0016.003E: unknown main item tag 0x0 [ 585.052077][ T3677] wacom 0003:056A:0016.003E: Unknown device_type for '΀숑ß⇣Ʃ⎳쳷暋徰ï’犇Ⅰ罾á³ê™¹ëµšæ¹ï‚ê„⳻煆캘æ¡å”§ê›¢î¡ãš¾í˜Â½ãžšå¬Žâ²ªç–Šî‚¬ì–’겇桩挎迢໢æ¿â•'. Assuming pen. [ 585.074251][ T3677] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:0016.003E/input/input11 [ 585.160117][ T3677] wacom 0003:056A:0016.003E: hidraw0: USB HID v4.00 Device [΀숑ß⇣Ʃ⎳쳷暋徰ï’犇Ⅰ罾á³ê™¹ëµšæ¹ï‚ê„⳻煆캘æ¡å”§ê›¢î¡ãš¾í˜Â½ãžšå¬Žâ²ªç–Šî‚¬ì–’겇桩挎迢໢æ¿â•] on usb-dummy_hcd.5-1/input0 [ 585.189848][ T3677] usb 6-1: USB disconnect, device number 104 [ 585.585300][ T3677] usb 6-1: new high-speed USB device number 105 using dummy_hcd 07:38:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040380709174000000000010902240001000000000000000000000a0000000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="00eee031ec0043bde7a0809659ca895c6443fbee4c401d7b50e0e9b2174e757c00", @ANYBLOB="ec2e169e5d5eb7c1ab2fe65770ab11e3837c07ec940c91bd383eb020b3d8b2ecd65ae559a93c1eeeb8462a01f33c5c113142f5005d558b4c821b8cc63fb865e2ce7cacba761b"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000540)={0x18, &(0x7f0000000300)={0x0, 0x3, 0xbe, {0xbe, 0xb, "f2b86dda725ae753ee8a941924b500501425ad1759226d9ff0a3ec83f0c80bbfa4e640dccac4778af57b4cd8f8e551e691acedc848d2883edc34af2323e49916ae8d2266728605987c5a4ce005abfecbf441bcc34df2bcde2daa9a580ca91e3fa4d12ffe17e9e86c5c8dc2bd9668127385cb9105590e301f4961642ef8561f7e6437f353e4778ab19d4f296d890dc31a7e3bb1f12280c48349b5ac7c13f9949bf78c0f95995727e3087a0acfbf94bd5af708098b223a5845d01da892"}}, &(0x7f0000000040)={0x0, 0x3, 0x10, @string={0x10, 0x3, "dc2f6385abcb6c236a0be0207ad4"}}, &(0x7f0000000400)={0x0, 0xf, 0x49, {0x5, 0xf, 0x49, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "ac95105fa8498a6861414d46de4a670c"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "75a37b6ffdefac37d4cebd20eadb8d66"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3f, 0x4, 0x5, 0xf000, 0x1, [0xc8, 0xff3f, 0x3f, 0x3f0f]}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x1f, 0x40, "4009bd25", "d04abb46"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x60, 0x10, 0x9, 0x81, 0x5, 0x2, 0x63}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000580)={0x20, 0x15, 0xda, "4c73c5e3e81f10004d2eb5b0bd4698ca8d89977fdf5a607ecfdf9c5b7ab34377d1b9135d8641f09fcbd227504af8cd3f7d8a82525db91761b4182dd3ff88762a3f1f726652ac99a29fc8a256b8a32dca7ae1b95c4874cab93b2ed20db17416ac0351c7792148e3e7e17cff15bf857b10f05b155db96bb0aba55dff9e20305bdb4f8ad5226599086c46871644fd94a177c01da6c002c62bb749dae6103f03adc21b1a5aa5278ca70e4ab4b5d9d6775154c2694872204c00a720b47a05a6f3c7a19c78ef5f898ddb5dd961b506c76576efdec54b136abe358409fe"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xc0, 0x2, [0x0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0xfc}, &(0x7f0000000800)={0x40, 0xb, 0x2, "c41e"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, &(0x7f0000000900)={0x40, 0x19, 0x2, "40c9"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000009c0)={0x40, 0x1e, 0x1}, &(0x7f0000000a00)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0xc, &(0x7f0000000000)={0x0, 0x22, 0x17, {0x17, 0x9, "24560a04bd61f8f0e656f8fac4ad0277583058ebd9"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x10, &(0x7f0000000180)={0x40, 0x30, 0x3d, "ed05960553aa767bbd382e65a3bc9f069f88c1d56eabac30d4796d09102d4722058d66ecccc260c178722f5db6a93897e7188a8c3d88c5c32c85a89499"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x80}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040380709174000000000010902240001000000000000000000000a0000000000000000"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="00eee031ec0043bde7a0809659ca895c6443fbee4c401d7b50e0e9b2174e757c00", @ANYBLOB="ec2e169e5d5eb7c1ab2fe65770ab11e3837c07ec940c91bd383eb020b3d8b2ecd65ae559a93c1eeeb8462a01f33c5c113142f5005d558b4c821b8cc63fb865e2ce7cacba761b"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_control_io(r1, &(0x7f0000000540)={0x18, &(0x7f0000000300)={0x0, 0x3, 0xbe, {0xbe, 0xb, "f2b86dda725ae753ee8a941924b500501425ad1759226d9ff0a3ec83f0c80bbfa4e640dccac4778af57b4cd8f8e551e691acedc848d2883edc34af2323e49916ae8d2266728605987c5a4ce005abfecbf441bcc34df2bcde2daa9a580ca91e3fa4d12ffe17e9e86c5c8dc2bd9668127385cb9105590e301f4961642ef8561f7e6437f353e4778ab19d4f296d890dc31a7e3bb1f12280c48349b5ac7c13f9949bf78c0f95995727e3087a0acfbf94bd5af708098b223a5845d01da892"}}, &(0x7f0000000040)={0x0, 0x3, 0x10, @string={0x10, 0x3, "dc2f6385abcb6c236a0be0207ad4"}}, &(0x7f0000000400)={0x0, 0xf, 0x49, {0x5, 0xf, 0x49, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "ac95105fa8498a6861414d46de4a670c"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "75a37b6ffdefac37d4cebd20eadb8d66"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3f, 0x4, 0x5, 0xf000, 0x1, [0xc8, 0xff3f, 0x3f, 0x3f0f]}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x1f, 0x40, "4009bd25", "d04abb46"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x60, 0x10, 0x9, 0x81, 0x5, 0x2, 0x63}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000580)={0x20, 0x15, 0xda, "4c73c5e3e81f10004d2eb5b0bd4698ca8d89977fdf5a607ecfdf9c5b7ab34377d1b9135d8641f09fcbd227504af8cd3f7d8a82525db91761b4182dd3ff88762a3f1f726652ac99a29fc8a256b8a32dca7ae1b95c4874cab93b2ed20db17416ac0351c7792148e3e7e17cff15bf857b10f05b155db96bb0aba55dff9e20305bdb4f8ad5226599086c46871644fd94a177c01da6c002c62bb749dae6103f03adc21b1a5aa5278ca70e4ab4b5d9d6775154c2694872204c00a720b47a05a6f3c7a19c78ef5f898ddb5dd961b506c76576efdec54b136abe358409fe"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xc0, 0x2, [0x0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x1f}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0xfc}, &(0x7f0000000800)={0x40, 0xb, 0x2, "c41e"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, &(0x7f0000000900)={0x40, 0x19, 0x2, "40c9"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x8001}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000009c0)={0x40, 0x1e, 0x1}, &(0x7f0000000a00)={0x40, 0x21, 0x1}}) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0xc, &(0x7f0000000000)={0x0, 0x22, 0x17, {0x17, 0x9, "24560a04bd61f8f0e656f8fac4ad0277583058ebd9"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x10, &(0x7f0000000180)={0x40, 0x30, 0x3d, "ed05960553aa767bbd382e65a3bc9f069f88c1d56eabac30d4796d09102d4722058d66ecccc260c178722f5db6a93897e7188a8c3d88c5c32c85a89499"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x80}}) (async) 07:38:11 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:11 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000240)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @mcast2, 0x16}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000500)="b36e6aa9eb76ecd5019779cec7066ef572999bca438995a453a6421f2337915665e8f38afb072d518a6b315b7dc19ad5befe238c3897d66841a30210c7336ad7642c911ec9229837c2eaf35d0009cb47dcc422bafbe4677b0b4aa6b691a23704485318c0ff929d8ec22bf13bd6e0c55da7d71d048c828efc93f4dbf5275b593a9b3199079b2a90dc023ddc678c0f21f83a13d56c888cb7dc2be92ca95c2049314f7bcef07ba5c86e28797db57af38a9127685872d94a86c265b429d0637598222d98521e5a3e96fc8c2026754bbc2b2b49c597a81e05844ae7677b6dea27ba51c2a20489ae3c0ff20a66425a321c07c9d9", 0xf1}, {&(0x7f0000000600)="c35dfd580c5ee0cbde665013c49cd12f54e7bf8c56ac623d37559a8be7f41b2a1b386082ea68812a371994c4da1befce14fda9cb2cc9990b2aaa4adbbc8ace9b05d91378e3dc4c50e18ae5643b957b7f3121c708641d0ec42d06be0dff04986ada2d7280bb8c7e5cdb706b4de2ca5a6f555ffdf8cce2237cae2cde4a75cbe7b37dee23419afa7f96d21f2835a5655f4bf1b000cb9343f3077245a3619dd09b13861233aecb492cdacd4ef004e7e231465f0cb92566922a623276c8f8ac591eca96a22eee68672af6763a207fdfe9f771e48c4391941381721d", 0xd9}, {&(0x7f0000000700)="3a4fb1824f19ba9bafe170152b517611ed1e32c8e6bd8e0152ff22b28965bae63947f9d83006efb835bb8784df51bab1d3c235029a337766426608b939a9721e52f07f7544ad10eb883a039bb529b3c98726aabba013689e60b73c830648b2eb96aff189efc12bee1c17191a87838b", 0x6f}, {&(0x7f0000000780)="4106f30ab8f0ce5a718ceedf1a0ad15ad9fd20e204aa864b636e6b39f7717c69ae84e1c6027418345b45634a66dde67d959ef9eb04519e0f0147b43f8243326856e3baab3fadadcb56fd576df5e733", 0x4f}, {&(0x7f0000000800)="e3c819416f9654ba3adc1c088e2fee65351e49f698bea72de39996cdc8099c2c2ac687c5700c48bc04697a104cc41a1d5d3330f01a59a200d63c97c857fced83f37389d6857009a8ce76f317a1d4574cace0f6bdd88c48fc244d4ab124c38abb559d9ab9eb7ea87ed2d39709610837747df8751731b27001776ae3e1192b340f4c21f6dc1b6c376c2fd2cb9fb6a50fdab3daa99c0baeaf", 0x97}, {&(0x7f00000008c0)="55fc8f1ecfc8c1245e5005dc2426abc199758e9a38a0c6feb436545e724b368f4d6527ed280563f162c54faf264ff33ef2dea7a2892ee5e06e5a57e8899bc305c5df669794c9bc4149ecdd9a5f925ef80e40f9d64ca99ba3b6301b381b2bf2ff1b3fce01035bbcce23238af91c37873cd1307cae4823b9aad07e5f7d5a82c0f9ea1c0d2699c893a89f0482171b829d4ee678982379f28c28be54a79489f7e8e2b3efdc3378970b8075cbea9aef7520ff713c2eb648df33f33e1c1a78777ced71d890e73ce7dd5ee08ec1060566164a155231935609e9c70fc3004c16e1daf49b", 0xe0}], 0x6}, 0x41) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) writev(r0, &(0x7f0000002e80)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f00000002c0)="bc8ec9a59b3d30732185d39977626dda8a9cce4ab9d08c60abec42ed91c14942c85295f2153c001861a0d433", 0x2c}, {&(0x7f0000001a00)="e42ba4bc5c003e0fcba25ded554b4d49b12e71f9c4249c4475e76db9a0eaf96233564fb52e86c132f1b70d337b524f8840a4ab1634dd25f5c16f28a0cb06fea4c72229d941289116fa9f46aea437ab5aeedf115a46bfa3c110260b05c03853ca4473add5c1a793f3c2b24e7ddfd0605eeaabff5b24a40bc8c5ed712651ea79695bb3dd498011e24622b736b55bd6fe1386e5b24340e49fe5caeda23afde18c57789030f0377b8494c8562d76121951dbebea03226e2ab2aa5d8862f9520ff5b80b077a", 0xc3}, {&(0x7f0000001b00)="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", 0xfb}, {&(0x7f0000001c00)="d27d13fdcf67530dcd944774cc0f5731fcff9123f24e70ff5a1b8f88503153abe5b99dbdc197cec2afd76beb988530ff07f845761ebeea3e81e3f6750d41686e194531c373b7cfcfcf", 0x49}, {&(0x7f0000001c80)="ed912af33c77954b34283816f58c007200831698eb55564ec64fbe34cb7ddbd815ed467ac991d6c5c6351d907b042cf6bcd5b1e91490b24b8e11c46f1414cc36293c6401901de140affa9fd939cf0fb2f5465cecc688eb3b4e281f636268120b81a45c4ec9171e5a42c60edb9dd0dd3aa4bc4f728181b648c887d315540bade5003cbe4bca13ac3f87c454f90f9ac5b27b1578c0572cf1945305fd13fa8abade0936552051e0b95bd346", 0xaa}, {&(0x7f0000001d40)="cca3d1d3c226f09e61bbbd5bdfd70cb73fc8a678053c36eddd46d8eb418ea5f846fea328aa59d842df46b4db2904cbd5592f156e02749490859f67aa63d2cba43c2ee47bc975687b8c8d0dcc4c35fc58d3bee25f1064d699", 0x58}, {&(0x7f0000001dc0)="4bd5b021dec43c57b167da27ef616cf8c674bd55f5b5db6cc4fe0d94d6ad9f5106b008b13810fbef30123549bd1280b3af1bfd9892f6f0230c1a42dde7a3a287cc13220798cc7bff2270ef94612435df342f0392ca24c7329fefa7bafc887bb2260fdc56650ec1728956d2b0f41bbdcea439caaf9aba02161e44170f986c65dbca4a0a2798486c98b40fb79e2bf3", 0x8e}, {&(0x7f0000001e80)="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", 0x1000}], 0x9) 07:38:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a0e0a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x48200) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:38:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x48200) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x48200) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) 07:38:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x3}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 585.734242][T15796] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 585.753498][T15796] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 585.774780][T15799] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:38:11 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:11 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000240)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @mcast2, 0x16}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000500)="b36e6aa9eb76ecd5019779cec7066ef572999bca438995a453a6421f2337915665e8f38afb072d518a6b315b7dc19ad5befe238c3897d66841a30210c7336ad7642c911ec9229837c2eaf35d0009cb47dcc422bafbe4677b0b4aa6b691a23704485318c0ff929d8ec22bf13bd6e0c55da7d71d048c828efc93f4dbf5275b593a9b3199079b2a90dc023ddc678c0f21f83a13d56c888cb7dc2be92ca95c2049314f7bcef07ba5c86e28797db57af38a9127685872d94a86c265b429d0637598222d98521e5a3e96fc8c2026754bbc2b2b49c597a81e05844ae7677b6dea27ba51c2a20489ae3c0ff20a66425a321c07c9d9", 0xf1}, {&(0x7f0000000600)="c35dfd580c5ee0cbde665013c49cd12f54e7bf8c56ac623d37559a8be7f41b2a1b386082ea68812a371994c4da1befce14fda9cb2cc9990b2aaa4adbbc8ace9b05d91378e3dc4c50e18ae5643b957b7f3121c708641d0ec42d06be0dff04986ada2d7280bb8c7e5cdb706b4de2ca5a6f555ffdf8cce2237cae2cde4a75cbe7b37dee23419afa7f96d21f2835a5655f4bf1b000cb9343f3077245a3619dd09b13861233aecb492cdacd4ef004e7e231465f0cb92566922a623276c8f8ac591eca96a22eee68672af6763a207fdfe9f771e48c4391941381721d", 0xd9}, {&(0x7f0000000700)="3a4fb1824f19ba9bafe170152b517611ed1e32c8e6bd8e0152ff22b28965bae63947f9d83006efb835bb8784df51bab1d3c235029a337766426608b939a9721e52f07f7544ad10eb883a039bb529b3c98726aabba013689e60b73c830648b2eb96aff189efc12bee1c17191a87838b", 0x6f}, {&(0x7f0000000780)="4106f30ab8f0ce5a718ceedf1a0ad15ad9fd20e204aa864b636e6b39f7717c69ae84e1c6027418345b45634a66dde67d959ef9eb04519e0f0147b43f8243326856e3baab3fadadcb56fd576df5e733", 0x4f}, {&(0x7f0000000800)="e3c819416f9654ba3adc1c088e2fee65351e49f698bea72de39996cdc8099c2c2ac687c5700c48bc04697a104cc41a1d5d3330f01a59a200d63c97c857fced83f37389d6857009a8ce76f317a1d4574cace0f6bdd88c48fc244d4ab124c38abb559d9ab9eb7ea87ed2d39709610837747df8751731b27001776ae3e1192b340f4c21f6dc1b6c376c2fd2cb9fb6a50fdab3daa99c0baeaf", 0x97}, {&(0x7f00000008c0)="55fc8f1ecfc8c1245e5005dc2426abc199758e9a38a0c6feb436545e724b368f4d6527ed280563f162c54faf264ff33ef2dea7a2892ee5e06e5a57e8899bc305c5df669794c9bc4149ecdd9a5f925ef80e40f9d64ca99ba3b6301b381b2bf2ff1b3fce01035bbcce23238af91c37873cd1307cae4823b9aad07e5f7d5a82c0f9ea1c0d2699c893a89f0482171b829d4ee678982379f28c28be54a79489f7e8e2b3efdc3378970b8075cbea9aef7520ff713c2eb648df33f33e1c1a78777ced71d890e73ce7dd5ee08ec1060566164a155231935609e9c70fc3004c16e1daf49b", 0xe0}], 0x6}, 0x41) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) writev(r0, &(0x7f0000002e80)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f00000002c0)="bc8ec9a59b3d30732185d39977626dda8a9cce4ab9d08c60abec42ed91c14942c85295f2153c001861a0d433", 0x2c}, {&(0x7f0000001a00)="e42ba4bc5c003e0fcba25ded554b4d49b12e71f9c4249c4475e76db9a0eaf96233564fb52e86c132f1b70d337b524f8840a4ab1634dd25f5c16f28a0cb06fea4c72229d941289116fa9f46aea437ab5aeedf115a46bfa3c110260b05c03853ca4473add5c1a793f3c2b24e7ddfd0605eeaabff5b24a40bc8c5ed712651ea79695bb3dd498011e24622b736b55bd6fe1386e5b24340e49fe5caeda23afde18c57789030f0377b8494c8562d76121951dbebea03226e2ab2aa5d8862f9520ff5b80b077a", 0xc3}, {&(0x7f0000001b00)="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", 0xfb}, {&(0x7f0000001c00)="d27d13fdcf67530dcd944774cc0f5731fcff9123f24e70ff5a1b8f88503153abe5b99dbdc197cec2afd76beb988530ff07f845761ebeea3e81e3f6750d41686e194531c373b7cfcfcf", 0x49}, {&(0x7f0000001c80)="ed912af33c77954b34283816f58c007200831698eb55564ec64fbe34cb7ddbd815ed467ac991d6c5c6351d907b042cf6bcd5b1e91490b24b8e11c46f1414cc36293c6401901de140affa9fd939cf0fb2f5465cecc688eb3b4e281f636268120b81a45c4ec9171e5a42c60edb9dd0dd3aa4bc4f728181b648c887d315540bade5003cbe4bca13ac3f87c454f90f9ac5b27b1578c0572cf1945305fd13fa8abade0936552051e0b95bd346", 0xaa}, {&(0x7f0000001d40)="cca3d1d3c226f09e61bbbd5bdfd70cb73fc8a678053c36eddd46d8eb418ea5f846fea328aa59d842df46b4db2904cbd5592f156e02749490859f67aa63d2cba43c2ee47bc975687b8c8d0dcc4c35fc58d3bee25f1064d699", 0x58}, {&(0x7f0000001dc0)="4bd5b021dec43c57b167da27ef616cf8c674bd55f5b5db6cc4fe0d94d6ad9f5106b008b13810fbef30123549bd1280b3af1bfd9892f6f0230c1a42dde7a3a287cc13220798cc7bff2270ef94612435df342f0392ca24c7329fefa7bafc887bb2260fdc56650ec1728956d2b0f41bbdcea439caaf9aba02161e44170f986c65dbca4a0a2798486c98b40fb79e2bf3", 0x8e}, {&(0x7f0000001e80)="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", 0x1000}], 0x9) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) (async) sendmsg$sock(r2, &(0x7f0000000240)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @mcast2, 0x16}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000500)="b36e6aa9eb76ecd5019779cec7066ef572999bca438995a453a6421f2337915665e8f38afb072d518a6b315b7dc19ad5befe238c3897d66841a30210c7336ad7642c911ec9229837c2eaf35d0009cb47dcc422bafbe4677b0b4aa6b691a23704485318c0ff929d8ec22bf13bd6e0c55da7d71d048c828efc93f4dbf5275b593a9b3199079b2a90dc023ddc678c0f21f83a13d56c888cb7dc2be92ca95c2049314f7bcef07ba5c86e28797db57af38a9127685872d94a86c265b429d0637598222d98521e5a3e96fc8c2026754bbc2b2b49c597a81e05844ae7677b6dea27ba51c2a20489ae3c0ff20a66425a321c07c9d9", 0xf1}, {&(0x7f0000000600)="c35dfd580c5ee0cbde665013c49cd12f54e7bf8c56ac623d37559a8be7f41b2a1b386082ea68812a371994c4da1befce14fda9cb2cc9990b2aaa4adbbc8ace9b05d91378e3dc4c50e18ae5643b957b7f3121c708641d0ec42d06be0dff04986ada2d7280bb8c7e5cdb706b4de2ca5a6f555ffdf8cce2237cae2cde4a75cbe7b37dee23419afa7f96d21f2835a5655f4bf1b000cb9343f3077245a3619dd09b13861233aecb492cdacd4ef004e7e231465f0cb92566922a623276c8f8ac591eca96a22eee68672af6763a207fdfe9f771e48c4391941381721d", 0xd9}, {&(0x7f0000000700)="3a4fb1824f19ba9bafe170152b517611ed1e32c8e6bd8e0152ff22b28965bae63947f9d83006efb835bb8784df51bab1d3c235029a337766426608b939a9721e52f07f7544ad10eb883a039bb529b3c98726aabba013689e60b73c830648b2eb96aff189efc12bee1c17191a87838b", 0x6f}, {&(0x7f0000000780)="4106f30ab8f0ce5a718ceedf1a0ad15ad9fd20e204aa864b636e6b39f7717c69ae84e1c6027418345b45634a66dde67d959ef9eb04519e0f0147b43f8243326856e3baab3fadadcb56fd576df5e733", 0x4f}, {&(0x7f0000000800)="e3c819416f9654ba3adc1c088e2fee65351e49f698bea72de39996cdc8099c2c2ac687c5700c48bc04697a104cc41a1d5d3330f01a59a200d63c97c857fced83f37389d6857009a8ce76f317a1d4574cace0f6bdd88c48fc244d4ab124c38abb559d9ab9eb7ea87ed2d39709610837747df8751731b27001776ae3e1192b340f4c21f6dc1b6c376c2fd2cb9fb6a50fdab3daa99c0baeaf", 0x97}, {&(0x7f00000008c0)="55fc8f1ecfc8c1245e5005dc2426abc199758e9a38a0c6feb436545e724b368f4d6527ed280563f162c54faf264ff33ef2dea7a2892ee5e06e5a57e8899bc305c5df669794c9bc4149ecdd9a5f925ef80e40f9d64ca99ba3b6301b381b2bf2ff1b3fce01035bbcce23238af91c37873cd1307cae4823b9aad07e5f7d5a82c0f9ea1c0d2699c893a89f0482171b829d4ee678982379f28c28be54a79489f7e8e2b3efdc3378970b8075cbea9aef7520ff713c2eb648df33f33e1c1a78777ced71d890e73ce7dd5ee08ec1060566164a155231935609e9c70fc3004c16e1daf49b", 0xe0}], 0x6}, 0x41) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) writev(r0, &(0x7f0000002e80)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f00000002c0)="bc8ec9a59b3d30732185d39977626dda8a9cce4ab9d08c60abec42ed91c14942c85295f2153c001861a0d433", 0x2c}, {&(0x7f0000001a00)="e42ba4bc5c003e0fcba25ded554b4d49b12e71f9c4249c4475e76db9a0eaf96233564fb52e86c132f1b70d337b524f8840a4ab1634dd25f5c16f28a0cb06fea4c72229d941289116fa9f46aea437ab5aeedf115a46bfa3c110260b05c03853ca4473add5c1a793f3c2b24e7ddfd0605eeaabff5b24a40bc8c5ed712651ea79695bb3dd498011e24622b736b55bd6fe1386e5b24340e49fe5caeda23afde18c57789030f0377b8494c8562d76121951dbebea03226e2ab2aa5d8862f9520ff5b80b077a", 0xc3}, {&(0x7f0000001b00)="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", 0xfb}, {&(0x7f0000001c00)="d27d13fdcf67530dcd944774cc0f5731fcff9123f24e70ff5a1b8f88503153abe5b99dbdc197cec2afd76beb988530ff07f845761ebeea3e81e3f6750d41686e194531c373b7cfcfcf", 0x49}, {&(0x7f0000001c80)="ed912af33c77954b34283816f58c007200831698eb55564ec64fbe34cb7ddbd815ed467ac991d6c5c6351d907b042cf6bcd5b1e91490b24b8e11c46f1414cc36293c6401901de140affa9fd939cf0fb2f5465cecc688eb3b4e281f636268120b81a45c4ec9171e5a42c60edb9dd0dd3aa4bc4f728181b648c887d315540bade5003cbe4bca13ac3f87c454f90f9ac5b27b1578c0572cf1945305fd13fa8abade0936552051e0b95bd346", 0xaa}, {&(0x7f0000001d40)="cca3d1d3c226f09e61bbbd5bdfd70cb73fc8a678053c36eddd46d8eb418ea5f846fea328aa59d842df46b4db2904cbd5592f156e02749490859f67aa63d2cba43c2ee47bc975687b8c8d0dcc4c35fc58d3bee25f1064d699", 0x58}, {&(0x7f0000001dc0)="4bd5b021dec43c57b167da27ef616cf8c674bd55f5b5db6cc4fe0d94d6ad9f5106b008b13810fbef30123549bd1280b3af1bfd9892f6f0230c1a42dde7a3a287cc13220798cc7bff2270ef94612435df342f0392ca24c7329fefa7bafc887bb2260fdc56650ec1728956d2b0f41bbdcea439caaf9aba02161e44170f986c65dbca4a0a2798486c98b40fb79e2bf3", 0x8e}, {&(0x7f0000001e80)="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", 0x1000}], 0x9) (async) 07:38:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a100a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x48200) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 585.940814][T15807] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 585.942834][T15809] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 586.001600][T15809] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 586.015241][ T3677] usb 6-1: device not accepting address 105, error -71 [ 586.395333][ T3677] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 586.775332][ T3677] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.785615][ T3677] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 586.794579][ T3677] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 586.803916][ T3677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.814518][ T3677] usb 6-1: config 0 descriptor?? [ 587.761671][T15823] UDC core: couldn't find an available UDC or it's busy: -16 [ 587.769491][T15823] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 587.983602][T15823] UDC core: couldn't find an available UDC or it's busy: -16 [ 587.985255][T15826] UDC core: couldn't find an available UDC or it's busy: -16 [ 587.992597][T15823] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 588.010403][T15826] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:38:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f00000009c0)={0x14, &(0x7f00000008c0)={0x0, 0x3, 0x2, {0x2, 0x2}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8c7}}, &(0x7f0000000940)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "27768de1"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0xb, "ffa38395"}, @main=@item_4={0x3, 0x0, 0x8, "082baa60"}, @local=@item_4={0x3, 0x2, 0x0, "1cd50954"}, @main=@item_012={0x2, 0x0, 0x9, "8e77"}, @local=@item_4={0x3, 0x2, 0x3, "b0d194ac"}, @global=@item_012={0x0, 0x1, 0x1}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0xecc}}}}, &(0x7f0000000c40)={0x18, &(0x7f0000000a00)={0x40, 0x0, 0x85, "d2ae7f8429695f2fecc804fc6cce2e2eacb2110e936175d2b7dd2b5eee5f2b2428dbd990aa527cc6f7405fd27d750e25726e1e2c2c668266de2e04cb03ed84174ad925391130edcf32cd5f013a2022053476b5f96d3196b1d262f76cb72c7fb80f9f49a0a08a1567c1428d650782f22cc0527e01c616a1f3f157daf11f9c4302d5feffc464"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b40)={0x20, 0x1, 0x84, "61719b63fcbe112e93a7865d47f0d54dc9a04961dbd0fc0bafd0d8211fc16154a221fcdf0a201864a47ea9d99d07057ccd089adc0c4f6feb0e07d44ace031189a02255229831c7bd2c04762f540f9a08dad75fb0c333f2e7bbea4b114fd873f053e18955503e9fe74fd8dda8adfa591566eb2c55f25fbc108389cd5959aabdfeb7979250"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x18, &(0x7f0000000140)={0x0, 0xb, 0x89, {0x89, 0x4, "bc1d9dd0b36ccca69d951805d5afb3d5f24135c1222f00b6d7ee1da9a43129df3b290d37414694eb0bea223aadfc04af7a277c5d4f9080ba2e6385d4ffbf2ceaed2d4d2fd03fa2340850cccd7db6eb25ac7d93b46c19d0b4210c4a72bea118e041e02f8e97230c96a868a94e397ec553933fc62aa7979185d811079b953aba1cfcc5c7483e94e8"}}, &(0x7f0000000000)={0x0, 0x3, 0x26, @string={0x26, 0x3, "3d8a02d936b0983dbfeed412a113fe2094697e77f383d8fa36b88cc4598f1d8dbf485685"}}, &(0x7f0000000200)={0x0, 0xf, 0x42, {0x5, 0xf, 0x42, 0x4, [@generic={0xe, 0x10, 0xa, "a478bedb0231e00ba7e0a0"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "b4cc75feb7a1ea9e360241621f457dac"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0x2, 0xdc}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "19eddf09a1e1756e8abc305ed5d7db90"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x38, 0x1, "c02b5a18", "8cf18658"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x18, 0x8, 0x94, 0x80, 0x81}}}, &(0x7f0000000840)={0x44, &(0x7f0000000340)={0x0, 0x14, 0xbc, "b2c14fdbfc5c3bd4b623ca1be05d1e8225b0cf1916fc88384bf39838a68c8c0c4188025bb974b427d1cb704698a9f53e57a201f2b7fbfbaba87d24591c9f8120874a45e6abe3eb26e9c9a69d3931813cb6bd4cc0349565ed06f68a035bea202ab7ec7732bb0e5b500e72a6643750f0d405651bf5fe1801ad83f6663cf90d0681e2764a103bbba11035e2f2d7f0119ef2a3d9d375e41c4a79ac959475f6707c4f274ce9c0b057e16330cde2d6af12a096f257b0610eac935a90591519"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x89}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x4, 0x4, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xcc}, &(0x7f0000000600)={0x40, 0xb, 0x2, "c8d6"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "b7e9"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x80}}) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) 07:38:13 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) (async) sendmsg$sock(r2, &(0x7f0000000240)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @mcast2, 0x16}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000500)="b36e6aa9eb76ecd5019779cec7066ef572999bca438995a453a6421f2337915665e8f38afb072d518a6b315b7dc19ad5befe238c3897d66841a30210c7336ad7642c911ec9229837c2eaf35d0009cb47dcc422bafbe4677b0b4aa6b691a23704485318c0ff929d8ec22bf13bd6e0c55da7d71d048c828efc93f4dbf5275b593a9b3199079b2a90dc023ddc678c0f21f83a13d56c888cb7dc2be92ca95c2049314f7bcef07ba5c86e28797db57af38a9127685872d94a86c265b429d0637598222d98521e5a3e96fc8c2026754bbc2b2b49c597a81e05844ae7677b6dea27ba51c2a20489ae3c0ff20a66425a321c07c9d9", 0xf1}, {&(0x7f0000000600)="c35dfd580c5ee0cbde665013c49cd12f54e7bf8c56ac623d37559a8be7f41b2a1b386082ea68812a371994c4da1befce14fda9cb2cc9990b2aaa4adbbc8ace9b05d91378e3dc4c50e18ae5643b957b7f3121c708641d0ec42d06be0dff04986ada2d7280bb8c7e5cdb706b4de2ca5a6f555ffdf8cce2237cae2cde4a75cbe7b37dee23419afa7f96d21f2835a5655f4bf1b000cb9343f3077245a3619dd09b13861233aecb492cdacd4ef004e7e231465f0cb92566922a623276c8f8ac591eca96a22eee68672af6763a207fdfe9f771e48c4391941381721d", 0xd9}, {&(0x7f0000000700)="3a4fb1824f19ba9bafe170152b517611ed1e32c8e6bd8e0152ff22b28965bae63947f9d83006efb835bb8784df51bab1d3c235029a337766426608b939a9721e52f07f7544ad10eb883a039bb529b3c98726aabba013689e60b73c830648b2eb96aff189efc12bee1c17191a87838b", 0x6f}, {&(0x7f0000000780)="4106f30ab8f0ce5a718ceedf1a0ad15ad9fd20e204aa864b636e6b39f7717c69ae84e1c6027418345b45634a66dde67d959ef9eb04519e0f0147b43f8243326856e3baab3fadadcb56fd576df5e733", 0x4f}, {&(0x7f0000000800)="e3c819416f9654ba3adc1c088e2fee65351e49f698bea72de39996cdc8099c2c2ac687c5700c48bc04697a104cc41a1d5d3330f01a59a200d63c97c857fced83f37389d6857009a8ce76f317a1d4574cace0f6bdd88c48fc244d4ab124c38abb559d9ab9eb7ea87ed2d39709610837747df8751731b27001776ae3e1192b340f4c21f6dc1b6c376c2fd2cb9fb6a50fdab3daa99c0baeaf", 0x97}, {&(0x7f00000008c0)="55fc8f1ecfc8c1245e5005dc2426abc199758e9a38a0c6feb436545e724b368f4d6527ed280563f162c54faf264ff33ef2dea7a2892ee5e06e5a57e8899bc305c5df669794c9bc4149ecdd9a5f925ef80e40f9d64ca99ba3b6301b381b2bf2ff1b3fce01035bbcce23238af91c37873cd1307cae4823b9aad07e5f7d5a82c0f9ea1c0d2699c893a89f0482171b829d4ee678982379f28c28be54a79489f7e8e2b3efdc3378970b8075cbea9aef7520ff713c2eb648df33f33e1c1a78777ced71d890e73ce7dd5ee08ec1060566164a155231935609e9c70fc3004c16e1daf49b", 0xe0}], 0x6}, 0x41) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) writev(r0, &(0x7f0000002e80)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f00000002c0)="bc8ec9a59b3d30732185d39977626dda8a9cce4ab9d08c60abec42ed91c14942c85295f2153c001861a0d433", 0x2c}, {&(0x7f0000001a00)="e42ba4bc5c003e0fcba25ded554b4d49b12e71f9c4249c4475e76db9a0eaf96233564fb52e86c132f1b70d337b524f8840a4ab1634dd25f5c16f28a0cb06fea4c72229d941289116fa9f46aea437ab5aeedf115a46bfa3c110260b05c03853ca4473add5c1a793f3c2b24e7ddfd0605eeaabff5b24a40bc8c5ed712651ea79695bb3dd498011e24622b736b55bd6fe1386e5b24340e49fe5caeda23afde18c57789030f0377b8494c8562d76121951dbebea03226e2ab2aa5d8862f9520ff5b80b077a", 0xc3}, {&(0x7f0000001b00)="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", 0xfb}, {&(0x7f0000001c00)="d27d13fdcf67530dcd944774cc0f5731fcff9123f24e70ff5a1b8f88503153abe5b99dbdc197cec2afd76beb988530ff07f845761ebeea3e81e3f6750d41686e194531c373b7cfcfcf", 0x49}, {&(0x7f0000001c80)="ed912af33c77954b34283816f58c007200831698eb55564ec64fbe34cb7ddbd815ed467ac991d6c5c6351d907b042cf6bcd5b1e91490b24b8e11c46f1414cc36293c6401901de140affa9fd939cf0fb2f5465cecc688eb3b4e281f636268120b81a45c4ec9171e5a42c60edb9dd0dd3aa4bc4f728181b648c887d315540bade5003cbe4bca13ac3f87c454f90f9ac5b27b1578c0572cf1945305fd13fa8abade0936552051e0b95bd346", 0xaa}, {&(0x7f0000001d40)="cca3d1d3c226f09e61bbbd5bdfd70cb73fc8a678053c36eddd46d8eb418ea5f846fea328aa59d842df46b4db2904cbd5592f156e02749490859f67aa63d2cba43c2ee47bc975687b8c8d0dcc4c35fc58d3bee25f1064d699", 0x58}, {&(0x7f0000001dc0)="4bd5b021dec43c57b167da27ef616cf8c674bd55f5b5db6cc4fe0d94d6ad9f5106b008b13810fbef30123549bd1280b3af1bfd9892f6f0230c1a42dde7a3a287cc13220798cc7bff2270ef94612435df342f0392ca24c7329fefa7bafc887bb2260fdc56650ec1728956d2b0f41bbdcea439caaf9aba02161e44170f986c65dbca4a0a2798486c98b40fb79e2bf3", 0x8e}, {&(0x7f0000001e80)="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", 0x1000}], 0x9) 07:38:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f00003fb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x63f4d000) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) 07:38:13 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x4}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a350a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 588.028374][ T3677] usb 6-1: USB disconnect, device number 106 07:38:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x8, 0x0, [0x3, 0x3, 0x1, 0x7ff, 0x6, 0x1, 0x0, 0x80000001, 0x5, 0x80000001, 0x3, 0x5c48, 0x3, 0x101, 0x81, 0xfffffff8]}], r1, 0x1, 0x1, 0x48}}, 0x20) 07:38:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x5}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f00003fb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x63f4d000) (async, rerun: 64) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) (rerun: 64) [ 588.078194][T15841] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 588.109400][T15841] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a480a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f00003fb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x63f4d000) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) mmap(&(0x7f00003fb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x63f4d000) (async) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) (async) 07:38:13 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 588.269417][T15854] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 588.284009][T15854] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 588.312723][T15855] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 588.475332][ T3677] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 588.835403][ T3677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.846423][ T3677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.856294][ T3677] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 588.865726][ T3677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.880822][ T3677] usb 6-1: config 0 descriptor?? [ 589.127624][T15842] UDC core: couldn't find an available UDC or it's busy: -16 [ 589.135037][T15842] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 589.546779][T15842] UDC core: couldn't find an available UDC or it's busy: -16 [ 589.554169][T15842] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 589.566790][ T3677] saitek 0003:0738:1709.003F: unknown main item tag 0x0 [ 589.574692][ T3677] saitek 0003:0738:1709.003F: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 [ 589.775111][ T3677] usb 6-1: USB disconnect, device number 107 07:38:15 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f00000009c0)={0x14, &(0x7f00000008c0)={0x0, 0x3, 0x2, {0x2, 0x2}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8c7}}, &(0x7f0000000940)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "27768de1"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0xb, "ffa38395"}, @main=@item_4={0x3, 0x0, 0x8, "082baa60"}, @local=@item_4={0x3, 0x2, 0x0, "1cd50954"}, @main=@item_012={0x2, 0x0, 0x9, "8e77"}, @local=@item_4={0x3, 0x2, 0x3, "b0d194ac"}, @global=@item_012={0x0, 0x1, 0x1}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0xecc}}}}, &(0x7f0000000c40)={0x18, &(0x7f0000000a00)={0x40, 0x0, 0x85, "d2ae7f8429695f2fecc804fc6cce2e2eacb2110e936175d2b7dd2b5eee5f2b2428dbd990aa527cc6f7405fd27d750e25726e1e2c2c668266de2e04cb03ed84174ad925391130edcf32cd5f013a2022053476b5f96d3196b1d262f76cb72c7fb80f9f49a0a08a1567c1428d650782f22cc0527e01c616a1f3f157daf11f9c4302d5feffc464"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b40)={0x20, 0x1, 0x84, "61719b63fcbe112e93a7865d47f0d54dc9a04961dbd0fc0bafd0d8211fc16154a221fcdf0a201864a47ea9d99d07057ccd089adc0c4f6feb0e07d44ace031189a02255229831c7bd2c04762f540f9a08dad75fb0c333f2e7bbea4b114fd873f053e18955503e9fe74fd8dda8adfa591566eb2c55f25fbc108389cd5959aabdfeb7979250"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0x9}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x18, &(0x7f0000000140)={0x0, 0xb, 0x89, {0x89, 0x4, "bc1d9dd0b36ccca69d951805d5afb3d5f24135c1222f00b6d7ee1da9a43129df3b290d37414694eb0bea223aadfc04af7a277c5d4f9080ba2e6385d4ffbf2ceaed2d4d2fd03fa2340850cccd7db6eb25ac7d93b46c19d0b4210c4a72bea118e041e02f8e97230c96a868a94e397ec553933fc62aa7979185d811079b953aba1cfcc5c7483e94e8"}}, &(0x7f0000000000)={0x0, 0x3, 0x26, @string={0x26, 0x3, "3d8a02d936b0983dbfeed412a113fe2094697e77f383d8fa36b88cc4598f1d8dbf485685"}}, &(0x7f0000000200)={0x0, 0xf, 0x42, {0x5, 0xf, 0x42, 0x4, [@generic={0xe, 0x10, 0xa, "a478bedb0231e00ba7e0a0"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "b4cc75feb7a1ea9e360241621f457dac"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0x2, 0xdc}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "19eddf09a1e1756e8abc305ed5d7db90"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x38, 0x1, "c02b5a18", "8cf18658"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x18, 0x8, 0x94, 0x80, 0x81}}}, &(0x7f0000000840)={0x44, &(0x7f0000000340)={0x0, 0x14, 0xbc, "b2c14fdbfc5c3bd4b623ca1be05d1e8225b0cf1916fc88384bf39838a68c8c0c4188025bb974b427d1cb704698a9f53e57a201f2b7fbfbaba87d24591c9f8120874a45e6abe3eb26e9c9a69d3931813cb6bd4cc0349565ed06f68a035bea202ab7ec7732bb0e5b500e72a6643750f0d405651bf5fe1801ad83f6663cf90d0681e2764a103bbba11035e2f2d7f0119ef2a3d9d375e41c4a79ac959475f6707c4f274ce9c0b057e16330cde2d6af12a096f257b0610eac935a90591519"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x89}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x4, 0x4, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xcc}, &(0x7f0000000600)={0x40, 0xb, 0x2, "c8d6"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "b7e9"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x80}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) 07:38:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x6}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a4c0a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x8, 0x0, [0x3, 0x3, 0x1, 0x7ff, 0x6, 0x1, 0x0, 0x80000001, 0x5, 0x80000001, 0x3, 0x5c48, 0x3, 0x101, 0x81, 0xfffffff8]}], r1, 0x1, 0x1, 0x48}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x8, 0x0, [0x3, 0x3, 0x1, 0x7ff, 0x6, 0x1, 0x0, 0x80000001, 0x5, 0x80000001, 0x3, 0x5c48, 0x3, 0x101, 0x81, 0xfffffff8]}], r1, 0x1, 0x1, 0x48}}, 0x20) (async) 07:38:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x1) mmap(&(0x7f0000638000/0xb000)=nil, 0xb000, 0x0, 0x4000010, r0, 0x0) 07:38:15 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x1) mmap(&(0x7f0000638000/0xb000)=nil, 0xb000, 0x0, 0x4000010, r0, 0x0) 07:38:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x7}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 590.324286][T15868] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 590.329782][T15865] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 590.346647][T15868] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:16 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x8, 0x0, [0x3, 0x3, 0x1, 0x7ff, 0x6, 0x1, 0x0, 0x80000001, 0x5, 0x80000001, 0x3, 0x5c48, 0x3, 0x101, 0x81, 0xfffffff8]}], r1, 0x1, 0x1, 0x48}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x8, 0x0, [0x3, 0x3, 0x1, 0x7ff, 0x6, 0x1, 0x0, 0x80000001, 0x5, 0x80000001, 0x3, 0x5c48, 0x3, 0x101, 0x81, 0xfffffff8]}], r1, 0x1, 0x1, 0x48}}, 0x20) (async) [ 590.387737][T15874] UDC core: couldn't find an available UDC or it's busy: -16 07:38:16 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a600a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x1) mmap(&(0x7f0000638000/0xb000)=nil, 0xb000, 0x0, 0x4000010, r0, 0x0) [ 590.430123][T15874] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 590.527858][T15882] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 590.543726][T15882] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 590.559534][T15884] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 590.639129][ T20] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 590.698498][T15891] UDC core: couldn't find an available UDC or it's busy: -16 [ 590.706114][T15891] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 591.005457][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.020793][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.030815][ T20] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 591.040121][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.051111][ T20] usb 6-1: config 0 descriptor?? [ 591.415355][ T20] usbhid 6-1:0.0: can't add hid device: -71 [ 591.421506][ T20] usbhid: probe of 6-1:0.0 failed with error -71 [ 591.440139][ T20] usb 6-1: USB disconnect, device number 108 07:38:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) syz_usb_disconnect(r1) (async) syz_usb_control_io$hid(r1, &(0x7f00000009c0)={0x14, &(0x7f00000008c0)={0x0, 0x3, 0x2, {0x2, 0x2}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8c7}}, &(0x7f0000000940)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0x0, "27768de1"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0xb, "ffa38395"}, @main=@item_4={0x3, 0x0, 0x8, "082baa60"}, @local=@item_4={0x3, 0x2, 0x0, "1cd50954"}, @main=@item_012={0x2, 0x0, 0x9, "8e77"}, @local=@item_4={0x3, 0x2, 0x3, "b0d194ac"}, @global=@item_012={0x0, 0x1, 0x1}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0xecc}}}}, &(0x7f0000000c40)={0x18, &(0x7f0000000a00)={0x40, 0x0, 0x85, "d2ae7f8429695f2fecc804fc6cce2e2eacb2110e936175d2b7dd2b5eee5f2b2428dbd990aa527cc6f7405fd27d750e25726e1e2c2c668266de2e04cb03ed84174ad925391130edcf32cd5f013a2022053476b5f96d3196b1d262f76cb72c7fb80f9f49a0a08a1567c1428d650782f22cc0527e01c616a1f3f157daf11f9c4302d5feffc464"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b40)={0x20, 0x1, 0x84, "61719b63fcbe112e93a7865d47f0d54dc9a04961dbd0fc0bafd0d8211fc16154a221fcdf0a201864a47ea9d99d07057ccd089adc0c4f6feb0e07d44ace031189a02255229831c7bd2c04762f540f9a08dad75fb0c333f2e7bbea4b114fd873f053e18955503e9fe74fd8dda8adfa591566eb2c55f25fbc108389cd5959aabdfeb7979250"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x18, &(0x7f0000000140)={0x0, 0xb, 0x89, {0x89, 0x4, "bc1d9dd0b36ccca69d951805d5afb3d5f24135c1222f00b6d7ee1da9a43129df3b290d37414694eb0bea223aadfc04af7a277c5d4f9080ba2e6385d4ffbf2ceaed2d4d2fd03fa2340850cccd7db6eb25ac7d93b46c19d0b4210c4a72bea118e041e02f8e97230c96a868a94e397ec553933fc62aa7979185d811079b953aba1cfcc5c7483e94e8"}}, &(0x7f0000000000)={0x0, 0x3, 0x26, @string={0x26, 0x3, "3d8a02d936b0983dbfeed412a113fe2094697e77f383d8fa36b88cc4598f1d8dbf485685"}}, &(0x7f0000000200)={0x0, 0xf, 0x42, {0x5, 0xf, 0x42, 0x4, [@generic={0xe, 0x10, 0xa, "a478bedb0231e00ba7e0a0"}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "b4cc75feb7a1ea9e360241621f457dac"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0x2, 0xdc}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "19eddf09a1e1756e8abc305ed5d7db90"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x38, 0x1, "c02b5a18", "8cf18658"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x18, 0x8, 0x94, 0x80, 0x81}}}, &(0x7f0000000840)={0x44, &(0x7f0000000340)={0x0, 0x14, 0xbc, "b2c14fdbfc5c3bd4b623ca1be05d1e8225b0cf1916fc88384bf39838a68c8c0c4188025bb974b427d1cb704698a9f53e57a201f2b7fbfbaba87d24591c9f8120874a45e6abe3eb26e9c9a69d3931813cb6bd4cc0349565ed06f68a035bea202ab7ec7732bb0e5b500e72a6643750f0d405651bf5fe1801ad83f6663cf90d0681e2764a103bbba11035e2f2d7f0119ef2a3d9d375e41c4a79ac959475f6707c4f274ce9c0b057e16330cde2d6af12a096f257b0610eac935a90591519"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x89}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x4, 0x4, [0x0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xcc}, &(0x7f0000000600)={0x40, 0xb, 0x2, "c8d6"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x13, 0x6}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "b7e9"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x80}}) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) 07:38:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a680a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x812, r0, 0xff6c4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) name_to_handle_at(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x200, 0x1fc, 0x6, 0x7f, 0x20, 0x9}}, &(0x7f0000000280), 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000000)="6303ee98e10b13b7a312130599a0898aa17660a7498fdf04cb93492cdc647f1e0727bb227355f8f69a19797df57af339f2e7ff79e987967980e7951e6212eb00c36a66c7c0850402da645afec6f24f9218d9d672ad603f903e2ab51d4ca8f7d8caf2400a641a1bb9af2ac635554a8c25cd3b2cfdbb5dfe28bf2f0f2259a1339178c968e19be288acd78f0a0599251e356649d07b5b5715bdcdd01e5038b1e929606d7fd8585573d677c9326d97349ab331f48af8e87290ca5f8bbb1d3681c1be34b19327d4c69ac4b7e3753f68aa9b4a45b7f9b7461c88acc86bc4dc697c2fe98325e367cec70339d6caf95f89d9ef8d8e3285a171c70cfb56c0702982f57e1a") 07:38:17 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x0, r0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) 07:38:17 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x812, r0, 0xff6c4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) name_to_handle_at(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x200, 0x1fc, 0x6, 0x7f, 0x20, 0x9}}, &(0x7f0000000280), 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000000)="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") socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x812, r0, 0xff6c4000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) name_to_handle_at(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x200, 0x1fc, 0x6, 0x7f, 0x20, 0x9}}, &(0x7f0000000280), 0x1000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000000)="6303ee98e10b13b7a312130599a0898aa17660a7498fdf04cb93492cdc647f1e0727bb227355f8f69a19797df57af339f2e7ff79e987967980e7951e6212eb00c36a66c7c0850402da645afec6f24f9218d9d672ad603f903e2ab51d4ca8f7d8caf2400a641a1bb9af2ac635554a8c25cd3b2cfdbb5dfe28bf2f0f2259a1339178c968e19be288acd78f0a0599251e356649d07b5b5715bdcdd01e5038b1e929606d7fd8585573d677c9326d97349ab331f48af8e87290ca5f8bbb1d3681c1be34b19327d4c69ac4b7e3753f68aa9b4a45b7f9b7461c88acc86bc4dc697c2fe98325e367cec70339d6caf95f89d9ef8d8e3285a171c70cfb56c0702982f57e1a") (async) [ 591.837291][T15899] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 591.848008][T15900] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 591.876273][T15900] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:17 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) (async) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x0, r0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async, rerun: 32) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (rerun: 32) 07:38:17 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 591.891072][T15904] UDC core: couldn't find an available UDC or it's busy: -16 [ 591.913009][T15904] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:38:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x9}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a6c0a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:17 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x0, r0) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) [ 591.974892][T15915] UDC core: couldn't find an available UDC or it's busy: -16 [ 592.005323][T15915] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 592.033959][T15917] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 592.040532][T15919] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 592.145310][T15010] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 592.516013][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.531431][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.541283][T15010] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 592.554893][T15010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.570819][T15010] usb 6-1: config 0 descriptor?? [ 592.915337][T15010] usbhid 6-1:0.0: can't add hid device: -71 [ 592.921358][T15010] usbhid: probe of 6-1:0.0 failed with error -71 [ 592.929615][T15010] usb 6-1: USB disconnect, device number 109 07:38:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10000000140, 0xffffffff, 0xffffffff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xf0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x72, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x40, 0x0, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0x8, 0x64, {0x64, 0x1, "0d910c690296124a485ff6c8cfdcacc0b4c6790181eed322e54cec7653c706d4aa8a47c2529930bbc057cb3561b95e06a02119961eb592625d4faa05a2ced4de18e3d702345845b7a207457415986b063f362f21e70356a712fa384492e63cbe62ed"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000140)={0x0, 0x22, 0x10, {[@global=@item_4={0x3, 0x1, 0x3, "25961a82"}, @local=@item_4={0x3, 0x2, 0x5, "113db09b"}, @local=@item_012={0x2, 0x2, 0x4, "90bf"}, @local=@item_012={0x2, 0x2, 0x3, "d674"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc0, 0x4, 0x1, {0x22, 0x7a8}}}}, &(0x7f0000000400)={0x18, &(0x7f0000000200)={0x20, 0xd, 0xb5, "fefa3511e3c50f1656239a3ce9e7cb674d1f8f58862f8acc91e95911bfe59bcc14eb7d356abb088d2b88c3eeb18a1ac6ba980b6e99d13609db68127bb80850a1dcdb9563d4ac90e503e0b1c7132c90e92d408075534ef6689d953d75204946d1a3c362a7b7d0dc720d6f65e722eb76182b08ab8ae947d3dd2252b6805126399699bf783b85165530e42609e3adf1f5771c9e7f6244b2d23064f5887a29643677ec0d283c163a41ff67fa26bbd3d64c976209c6fcca"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x1, 0x5c, "da12529a91b1edcf3ed76374a2b274d0620dcc28fbad34f24369ab80f3945fce5e12017bc2403395912f3c5f2b19e3ec2372b05ab14b24a33b0a7facea82b97186e4e5d020d5f557e2cc5fb209e6e13f1c585d31152b99ef2650158f"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x92}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000440)={0xc, &(0x7f00000004c0)={0x20, 0x22, 0x57, {0x57, 0x10, "8eb3c35c1e73e9611b077e478b1455551ba1beb9eacf5dfcbece70a04d626bb389e2b3f2bf31cbcc724feeac79f977b1e3d616dcaf93de35ca6faf61f1e91bcd99d6481afa96e4954cc1c1d4ff610961f32a972af5"}}, &(0x7f0000000540)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "8bcb4749e47bac557f43f840e337a0d4a13e982815214c471232279d526c0d930dbe1de0569d73cee48b83f847c1efddbe97865d733d6fa1449653bca31df0464ba5e6cd161aafd46d70c3cc5d4aa9e2b0147b63240525fcb407d319d24f912a98018bab5434f486ca96f5e9bfbdb5c4bc9a960d971cff6768e079c4e07f106063a65607505a08f9172ffa1246c5ba549e17a0da29cbf095157387e92df69ed2"}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000600)={0x20, 0xe, 0x23, "db16ef597139edebd16671aa264e9372e4962cea4357a26a78f0578aa685521d7d8b16"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000006c0)={0x20, 0x0, 0x2a, {0x28, "49a8b9aab407250074d188a0f6754e764138088098fac484df158e506b9b73bf2baf966e65e565e9"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) 07:38:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x812, r0, 0xff6c4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) name_to_handle_at(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x200, 0x1fc, 0x6, 0x7f, 0x20, 0x9}}, &(0x7f0000000280), 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000000)="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") 07:38:19 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xe}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a740a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x176}}, 0x10) dup2(r0, r0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) 07:38:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:38:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x176}}, 0x10) dup2(r0, r0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x176}}, 0x10) (async) dup2(r0, r0) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) 07:38:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xf}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 593.377265][T15936] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 593.377637][T15935] __nla_validate_parse: 1 callbacks suppressed [ 593.377653][T15935] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 593.409271][T15936] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) 07:38:19 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a7a0a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 593.560179][T15953] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 593.569985][T15957] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 593.570011][T15957] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 593.726629][ T20] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 594.085348][ T20] usb 6-1: unable to get BOS descriptor or descriptor too short [ 594.149234][ T20] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 594.161417][ T20] usb 6-1: can't read configurations, error -71 07:38:20 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10000000140, 0xffffffff, 0xffffffff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xf0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x72, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x40, 0x0, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0x8, 0x64, {0x64, 0x1, "0d910c690296124a485ff6c8cfdcacc0b4c6790181eed322e54cec7653c706d4aa8a47c2529930bbc057cb3561b95e06a02119961eb592625d4faa05a2ced4de18e3d702345845b7a207457415986b063f362f21e70356a712fa384492e63cbe62ed"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000140)={0x0, 0x22, 0x10, {[@global=@item_4={0x3, 0x1, 0x3, "25961a82"}, @local=@item_4={0x3, 0x2, 0x5, "113db09b"}, @local=@item_012={0x2, 0x2, 0x4, "90bf"}, @local=@item_012={0x2, 0x2, 0x3, "d674"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc0, 0x4, 0x1, {0x22, 0x7a8}}}}, &(0x7f0000000400)={0x18, &(0x7f0000000200)={0x20, 0xd, 0xb5, "fefa3511e3c50f1656239a3ce9e7cb674d1f8f58862f8acc91e95911bfe59bcc14eb7d356abb088d2b88c3eeb18a1ac6ba980b6e99d13609db68127bb80850a1dcdb9563d4ac90e503e0b1c7132c90e92d408075534ef6689d953d75204946d1a3c362a7b7d0dc720d6f65e722eb76182b08ab8ae947d3dd2252b6805126399699bf783b85165530e42609e3adf1f5771c9e7f6244b2d23064f5887a29643677ec0d283c163a41ff67fa26bbd3d64c976209c6fcca"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x1, 0x5c, "da12529a91b1edcf3ed76374a2b274d0620dcc28fbad34f24369ab80f3945fce5e12017bc2403395912f3c5f2b19e3ec2372b05ab14b24a33b0a7facea82b97186e4e5d020d5f557e2cc5fb209e6e13f1c585d31152b99ef2650158f"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x92}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000440)={0xc, &(0x7f00000004c0)={0x20, 0x22, 0x57, {0x57, 0x10, "8eb3c35c1e73e9611b077e478b1455551ba1beb9eacf5dfcbece70a04d626bb389e2b3f2bf31cbcc724feeac79f977b1e3d616dcaf93de35ca6faf61f1e91bcd99d6481afa96e4954cc1c1d4ff610961f32a972af5"}}, &(0x7f0000000540)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "8bcb4749e47bac557f43f840e337a0d4a13e982815214c471232279d526c0d930dbe1de0569d73cee48b83f847c1efddbe97865d733d6fa1449653bca31df0464ba5e6cd161aafd46d70c3cc5d4aa9e2b0147b63240525fcb407d319d24f912a98018bab5434f486ca96f5e9bfbdb5c4bc9a960d971cff6768e079c4e07f106063a65607505a08f9172ffa1246c5ba549e17a0da29cbf095157387e92df69ed2"}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000600)={0x20, 0xe, 0x23, "db16ef597139edebd16671aa264e9372e4962cea4357a26a78f0578aa685521d7d8b16"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000006c0)={0x20, 0x0, 0x2a, {0x28, "49a8b9aab407250074d188a0f6754e764138088098fac484df158e506b9b73bf2baf966e65e565e9"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10000000140, 0xffffffff, 0xffffffff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xf0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x72, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x40, 0x0, 0x9}}]}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0x8, 0x64, {0x64, 0x1, "0d910c690296124a485ff6c8cfdcacc0b4c6790181eed322e54cec7653c706d4aa8a47c2529930bbc057cb3561b95e06a02119961eb592625d4faa05a2ced4de18e3d702345845b7a207457415986b063f362f21e70356a712fa384492e63cbe62ed"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000140)={0x0, 0x22, 0x10, {[@global=@item_4={0x3, 0x1, 0x3, "25961a82"}, @local=@item_4={0x3, 0x2, 0x5, "113db09b"}, @local=@item_012={0x2, 0x2, 0x4, "90bf"}, @local=@item_012={0x2, 0x2, 0x3, "d674"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc0, 0x4, 0x1, {0x22, 0x7a8}}}}, &(0x7f0000000400)={0x18, &(0x7f0000000200)={0x20, 0xd, 0xb5, "fefa3511e3c50f1656239a3ce9e7cb674d1f8f58862f8acc91e95911bfe59bcc14eb7d356abb088d2b88c3eeb18a1ac6ba980b6e99d13609db68127bb80850a1dcdb9563d4ac90e503e0b1c7132c90e92d408075534ef6689d953d75204946d1a3c362a7b7d0dc720d6f65e722eb76182b08ab8ae947d3dd2252b6805126399699bf783b85165530e42609e3adf1f5771c9e7f6244b2d23064f5887a29643677ec0d283c163a41ff67fa26bbd3d64c976209c6fcca"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x1, 0x5c, "da12529a91b1edcf3ed76374a2b274d0620dcc28fbad34f24369ab80f3945fce5e12017bc2403395912f3c5f2b19e3ec2372b05ab14b24a33b0a7facea82b97186e4e5d020d5f557e2cc5fb209e6e13f1c585d31152b99ef2650158f"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x92}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000440)={0xc, &(0x7f00000004c0)={0x20, 0x22, 0x57, {0x57, 0x10, "8eb3c35c1e73e9611b077e478b1455551ba1beb9eacf5dfcbece70a04d626bb389e2b3f2bf31cbcc724feeac79f977b1e3d616dcaf93de35ca6faf61f1e91bcd99d6481afa96e4954cc1c1d4ff610961f32a972af5"}}, &(0x7f0000000540)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "8bcb4749e47bac557f43f840e337a0d4a13e982815214c471232279d526c0d930dbe1de0569d73cee48b83f847c1efddbe97865d733d6fa1449653bca31df0464ba5e6cd161aafd46d70c3cc5d4aa9e2b0147b63240525fcb407d319d24f912a98018bab5434f486ca96f5e9bfbdb5c4bc9a960d971cff6768e079c4e07f106063a65607505a08f9172ffa1246c5ba549e17a0da29cbf095157387e92df69ed2"}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000600)={0x20, 0xe, 0x23, "db16ef597139edebd16671aa264e9372e4962cea4357a26a78f0578aa685521d7d8b16"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000006c0)={0x20, 0x0, 0x2a, {0x28, "49a8b9aab407250074d188a0f6754e764138088098fac484df158e506b9b73bf2baf966e65e565e9"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x3}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) (async) 07:38:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x176}}, 0x10) dup2(r0, r0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x176}}, 0x10) (async) dup2(r0, r0) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) 07:38:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000b00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x60}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:38:20 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f00003e3000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x7fffffff) [ 594.566732][T15965] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 594.579904][T15970] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xf0}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = syz_io_uring_complete(0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000580)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @loopback, 0x2}, {0xa, 0x4e23, 0x20, @loopback, 0x60f}, r1, 0x730}}, 0x48) r3 = openat$nvram(0xffffff9c, &(0x7f0000000100), 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x113, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0xa, 0x4e21, 0x0, @loopback, 0x80000001}, r4, 0x800}}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r5, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @mcast2, 0xfffffffc}, {0xa, 0x4e24, 0x20, @loopback, 0x6}, r4, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x76e0, 0x1, {"664df2478dae9f8961c26ce5ebba337e"}, 0x6, 0x7ff, 0xe7e4}}}, 0x90) 07:38:20 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 594.609860][T15970] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a002500053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f00003e3000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x7fffffff) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) mmap(&(0x7f00003e3000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x7fffffff) (async) [ 594.724503][T15984] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 594.803409][T15988] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 594.834535][T15988] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 595.055265][ T20] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 595.356547][T15977] UDC core: couldn't find an available UDC or it's busy: -16 [ 595.363954][T15977] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 595.415359][ T20] usb 6-1: unable to get BOS descriptor or descriptor too short [ 595.475291][ T20] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 595.482968][ T20] usb 6-1: can't read configurations, error -71 [ 595.493970][ T20] usb usb6-port1: attempt power cycle 07:38:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10000000140, 0xffffffff, 0xffffffff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xf0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x72, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x40, 0x0, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0x8, 0x64, {0x64, 0x1, "0d910c690296124a485ff6c8cfdcacc0b4c6790181eed322e54cec7653c706d4aa8a47c2529930bbc057cb3561b95e06a02119961eb592625d4faa05a2ced4de18e3d702345845b7a207457415986b063f362f21e70356a712fa384492e63cbe62ed"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000140)={0x0, 0x22, 0x10, {[@global=@item_4={0x3, 0x1, 0x3, "25961a82"}, @local=@item_4={0x3, 0x2, 0x5, "113db09b"}, @local=@item_012={0x2, 0x2, 0x4, "90bf"}, @local=@item_012={0x2, 0x2, 0x3, "d674"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc0, 0x4, 0x1, {0x22, 0x7a8}}}}, &(0x7f0000000400)={0x18, &(0x7f0000000200)={0x20, 0xd, 0xb5, "fefa3511e3c50f1656239a3ce9e7cb674d1f8f58862f8acc91e95911bfe59bcc14eb7d356abb088d2b88c3eeb18a1ac6ba980b6e99d13609db68127bb80850a1dcdb9563d4ac90e503e0b1c7132c90e92d408075534ef6689d953d75204946d1a3c362a7b7d0dc720d6f65e722eb76182b08ab8ae947d3dd2252b6805126399699bf783b85165530e42609e3adf1f5771c9e7f6244b2d23064f5887a29643677ec0d283c163a41ff67fa26bbd3d64c976209c6fcca"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x1, 0x5c, "da12529a91b1edcf3ed76374a2b274d0620dcc28fbad34f24369ab80f3945fce5e12017bc2403395912f3c5f2b19e3ec2372b05ab14b24a33b0a7facea82b97186e4e5d020d5f557e2cc5fb209e6e13f1c585d31152b99ef2650158f"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x92}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000440)={0xc, &(0x7f00000004c0)={0x20, 0x22, 0x57, {0x57, 0x10, "8eb3c35c1e73e9611b077e478b1455551ba1beb9eacf5dfcbece70a04d626bb389e2b3f2bf31cbcc724feeac79f977b1e3d616dcaf93de35ca6faf61f1e91bcd99d6481afa96e4954cc1c1d4ff610961f32a972af5"}}, &(0x7f0000000540)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "8bcb4749e47bac557f43f840e337a0d4a13e982815214c471232279d526c0d930dbe1de0569d73cee48b83f847c1efddbe97865d733d6fa1449653bca31df0464ba5e6cd161aafd46d70c3cc5d4aa9e2b0147b63240525fcb407d319d24f912a98018bab5434f486ca96f5e9bfbdb5c4bc9a960d971cff6768e079c4e07f106063a65607505a08f9172ffa1246c5ba549e17a0da29cbf095157387e92df69ed2"}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000600)={0x20, 0xe, 0x23, "db16ef597139edebd16671aa264e9372e4962cea4357a26a78f0578aa685521d7d8b16"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000006c0)={0x20, 0x0, 0x2a, {0x28, "49a8b9aab407250074d188a0f6754e764138088098fac484df158e506b9b73bf2baf966e65e565e9"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10000000140, 0xffffffff, 0xffffffff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xf0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x0, 0x72, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x40, 0x0, 0x9}}]}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0x8, 0x64, {0x64, 0x1, "0d910c690296124a485ff6c8cfdcacc0b4c6790181eed322e54cec7653c706d4aa8a47c2529930bbc057cb3561b95e06a02119961eb592625d4faa05a2ced4de18e3d702345845b7a207457415986b063f362f21e70356a712fa384492e63cbe62ed"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000140)={0x0, 0x22, 0x10, {[@global=@item_4={0x3, 0x1, 0x3, "25961a82"}, @local=@item_4={0x3, 0x2, 0x5, "113db09b"}, @local=@item_012={0x2, 0x2, 0x4, "90bf"}, @local=@item_012={0x2, 0x2, 0x3, "d674"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc0, 0x4, 0x1, {0x22, 0x7a8}}}}, &(0x7f0000000400)={0x18, &(0x7f0000000200)={0x20, 0xd, 0xb5, "fefa3511e3c50f1656239a3ce9e7cb674d1f8f58862f8acc91e95911bfe59bcc14eb7d356abb088d2b88c3eeb18a1ac6ba980b6e99d13609db68127bb80850a1dcdb9563d4ac90e503e0b1c7132c90e92d408075534ef6689d953d75204946d1a3c362a7b7d0dc720d6f65e722eb76182b08ab8ae947d3dd2252b6805126399699bf783b85165530e42609e3adf1f5771c9e7f6244b2d23064f5887a29643677ec0d283c163a41ff67fa26bbd3d64c976209c6fcca"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x56}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0x20, 0x1, 0x5c, "da12529a91b1edcf3ed76374a2b274d0620dcc28fbad34f24369ab80f3945fce5e12017bc2403395912f3c5f2b19e3ec2372b05ab14b24a33b0a7facea82b97186e4e5d020d5f557e2cc5fb209e6e13f1c585d31152b99ef2650158f"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x92}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000440)={0xc, &(0x7f00000004c0)={0x20, 0x22, 0x57, {0x57, 0x10, "8eb3c35c1e73e9611b077e478b1455551ba1beb9eacf5dfcbece70a04d626bb389e2b3f2bf31cbcc724feeac79f977b1e3d616dcaf93de35ca6faf61f1e91bcd99d6481afa96e4954cc1c1d4ff610961f32a972af5"}}, &(0x7f0000000540)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "8bcb4749e47bac557f43f840e337a0d4a13e982815214c471232279d526c0d930dbe1de0569d73cee48b83f847c1efddbe97865d733d6fa1449653bca31df0464ba5e6cd161aafd46d70c3cc5d4aa9e2b0147b63240525fcb407d319d24f912a98018bab5434f486ca96f5e9bfbdb5c4bc9a960d971cff6768e079c4e07f106063a65607505a08f9172ffa1246c5ba549e17a0da29cbf095157387e92df69ed2"}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000600)={0x20, 0xe, 0x23, "db16ef597139edebd16671aa264e9372e4962cea4357a26a78f0578aa685521d7d8b16"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000006c0)={0x20, 0x0, 0x2a, {0x28, "49a8b9aab407250074d188a0f6754e764138088098fac484df158e506b9b73bf2baf966e65e565e9"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x3}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) (async) 07:38:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x300}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:21 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = syz_io_uring_complete(0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000580)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @loopback, 0x2}, {0xa, 0x4e23, 0x20, @loopback, 0x60f}, r1, 0x730}}, 0x48) r3 = openat$nvram(0xffffff9c, &(0x7f0000000100), 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x113, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0xa, 0x4e21, 0x0, @loopback, 0x80000001}, r4, 0x800}}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r5, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @mcast2, 0xfffffffc}, {0xa, 0x4e24, 0x20, @loopback, 0x6}, r4, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x76e0, 0x1, {"664df2478dae9f8961c26ce5ebba337e"}, 0x6, 0x7ff, 0xe7e4}}}, 0x90) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280), 0x106, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) syz_io_uring_complete(0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000580)={0x7, 0x8}, 0x10) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @loopback, 0x2}, {0xa, 0x4e23, 0x20, @loopback, 0x60f}, r1, 0x730}}, 0x48) (async) openat$nvram(0xffffff9c, &(0x7f0000000100), 0x4000, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x113, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0xa, 0x4e21, 0x0, @loopback, 0x80000001}, r4, 0x800}}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r5, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @mcast2, 0xfffffffc}, {0xa, 0x4e24, 0x20, @loopback, 0x6}, r4, 0x5}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000005c0), 0x106, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x76e0, 0x1, {"664df2478dae9f8961c26ce5ebba337e"}, 0x6, 0x7ff, 0xe7e4}}}, 0x90) (async) 07:38:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f00003e3000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x7fffffff) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) mmap(&(0x7f00003e3000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x7fffffff) (async) 07:38:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a003500053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 595.908667][T16004] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 595.929998][T16004] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1) 07:38:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x500}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 595.956802][T16002] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:38:21 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a004000053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = syz_io_uring_complete(0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000580)={0x7, 0x8}, 0x10) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @loopback, 0x2}, {0xa, 0x4e23, 0x20, @loopback, 0x60f}, r1, 0x730}}, 0x48) r3 = openat$nvram(0xffffff9c, &(0x7f0000000100), 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x113, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0xa, 0x4e21, 0x0, @loopback, 0x80000001}, r4, 0x800}}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r5, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @mcast2, 0xfffffffc}, {0xa, 0x4e24, 0x20, @loopback, 0x6}, r4, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x76e0, 0x1, {"664df2478dae9f8961c26ce5ebba337e"}, 0x6, 0x7ff, 0xe7e4}}}, 0x90) 07:38:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) (async, rerun: 64) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1) (rerun: 64) [ 596.098894][T16023] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 596.425293][ T20] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 596.576625][T16011] UDC core: couldn't find an available UDC or it's busy: -16 [ 596.584358][T16011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 596.635288][ T20] usb 6-1: unable to get BOS descriptor or descriptor too short [ 596.695294][ T20] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 596.702879][ T20] usb 6-1: can't read configurations, error -71 07:38:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004038070917400000000001090224000100000000090400000000000122010009058103000000010000000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0x2b, 0x7, {0x7, 0x23, "429c528bfe"}}, &(0x7f0000000080)={0x0, 0x3, 0x9, @string={0x9, 0x3, "2afdd1a63ab96b"}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "8a536a7b"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x92, 0x1, {0x22, 0x97d}}}}, &(0x7f0000000380)={0x18, &(0x7f00000001c0)={0x20, 0x17, 0x70, "b213d876b9151d8203a64b223e7cf246ade8fee6ffed2b46b3d5480918186955caecacfb8b0ba5bc28906faaa44d7188017212e3bfd2d1a18646a07d3060d2979f13cb8373fac7aa06822495aba2320c13f803175324f0e4e5eb71f0102b558fccaaf173459a778182bdc0cabc340c79"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x1, 0x4d, "2182ba3a808ad175279418db6abad33fd03c2e62705c6c1435f9559556f688f4056b92bc195a9d111991877592c9c6f86e3eadc79c7f9c0e1aa2a9afdec9fbff6236f61835c4de7d44b537ad02"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x18}}) 07:38:22 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x525}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000200053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1) (async) 07:38:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) 07:38:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x5f2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) 07:38:22 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 597.131482][T16043] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4180, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)={0x67, 0x9, 0x2, "3c872176ad5b3c236c007a3bede8a531cc3df4317996fbf1b9a409c1bce603f56c1c4cea21f7e1372d33b3be268507d5c6ba26cae00caea8c34ee953a5da525302671784ee758af9b7ed18d955672eb5b27a2ce5d158180479f917709cd8f7053417cfb1bfaf3d"}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x3, 0x2, 0xbbe1d7745792f49d, @remote, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x7, 0x4, 0x3}}) 07:38:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000b00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x600}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 597.287015][T16062] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 597.595244][ T20] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 597.845531][ T20] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 597.855972][ T20] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 597.865192][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.876682][ T20] usb 6-1: config 0 descriptor?? [ 598.643735][ T20] usb 6-1: USB disconnect, device number 113 07:38:24 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004038070917400000000001090224000100000000090400000000000122010009058103000000010000000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0x2b, 0x7, {0x7, 0x23, "429c528bfe"}}, &(0x7f0000000080)={0x0, 0x3, 0x9, @string={0x9, 0x3, "2afdd1a63ab96b"}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "8a536a7b"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x92, 0x1, {0x22, 0x97d}}}}, &(0x7f0000000380)={0x18, &(0x7f00000001c0)={0x20, 0x17, 0x70, "b213d876b9151d8203a64b223e7cf246ade8fee6ffed2b46b3d5480918186955caecacfb8b0ba5bc28906faaa44d7188017212e3bfd2d1a18646a07d3060d2979f13cb8373fac7aa06822495aba2320c13f803175324f0e4e5eb71f0102b558fccaaf173459a778182bdc0cabc340c79"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x1, 0x4d, "2182ba3a808ad175279418db6abad33fd03c2e62705c6c1435f9559556f688f4056b92bc195a9d111991877592c9c6f86e3eadc79c7f9c0e1aa2a9afdec9fbff6236f61835c4de7d44b537ad02"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x18}}) 07:38:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x700}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a002500053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) 07:38:24 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4180, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)={0x67, 0x9, 0x2, "3c872176ad5b3c236c007a3bede8a531cc3df4317996fbf1b9a409c1bce603f56c1c4cea21f7e1372d33b3be268507d5c6ba26cae00caea8c34ee953a5da525302671784ee758af9b7ed18d955672eb5b27a2ce5d158180479f917709cd8f7053417cfb1bfaf3d"}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x3, 0x2, 0xbbe1d7745792f49d, @remote, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x7, 0x4, 0x3}}) 07:38:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async, rerun: 32) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4180, 0x0) (rerun: 32) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)={0x67, 0x9, 0x2, "3c872176ad5b3c236c007a3bede8a531cc3df4317996fbf1b9a409c1bce603f56c1c4cea21f7e1372d33b3be268507d5c6ba26cae00caea8c34ee953a5da525302671784ee758af9b7ed18d955672eb5b27a2ce5d158180479f917709cd8f7053417cfb1bfaf3d"}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x3, 0x2, 0xbbe1d7745792f49d, @remote, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x7, 0x4, 0x3}}) (rerun: 64) 07:38:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x900}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in={0x2, 0x4e24, @multicast1}}}, 0x90) [ 599.158636][T16075] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 599.165222][T16076] __nla_validate_parse: 6 callbacks suppressed [ 599.165241][T16076] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:38:24 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 599.213613][T16075] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a003500053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in={0x2, 0x4e24, @multicast1}}}, 0x90) [ 599.310314][T16087] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 599.390256][T16089] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 599.403523][T16089] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 599.465300][ T3674] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 599.845400][ T3674] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 599.855782][ T3674] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 599.865676][ T3674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.875891][ T3674] usb 6-1: config 0 descriptor?? [ 600.458969][ T3674] usb 6-1: USB disconnect, device number 114 07:38:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004038070917400000000001090224000100000000090400000000000122010009058103000000010000000000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0x2b, 0x7, {0x7, 0x23, "429c528bfe"}}, &(0x7f0000000080)={0x0, 0x3, 0x9, @string={0x9, 0x3, "2afdd1a63ab96b"}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "8a536a7b"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x92, 0x1, {0x22, 0x97d}}}}, &(0x7f0000000380)={0x18, &(0x7f00000001c0)={0x20, 0x17, 0x70, "b213d876b9151d8203a64b223e7cf246ade8fee6ffed2b46b3d5480918186955caecacfb8b0ba5bc28906faaa44d7188017212e3bfd2d1a18646a07d3060d2979f13cb8373fac7aa06822495aba2320c13f803175324f0e4e5eb71f0102b558fccaaf173459a778182bdc0cabc340c79"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x1, 0x4d, "2182ba3a808ad175279418db6abad33fd03c2e62705c6c1435f9559556f688f4056b92bc195a9d111991877592c9c6f86e3eadc79c7f9c0e1aa2a9afdec9fbff6236f61835c4de7d44b537ad02"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x18}}) 07:38:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000180)) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x50, r1, 0xd5338000) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d09dda5090300000000000000d77b7d95d11bf96c16ccdc4a160778"], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f00000001c0)={0x308a, 0xfffffffffffffbff, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0xcb, 0x80, 0x6, 0x1ff, 0xffc00000, 0xfffffff9, 0x101, 0x8, 0x7, 0x7, 0x5}) 07:38:26 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400f0", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in={0x2, 0x4e24, @multicast1}}}, 0x90) 07:38:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a02053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xe00}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) [ 600.950851][T16102] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xf00}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000180)) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x50, r1, 0xd5338000) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d09dda5090300000000000000d77b7d95d11bf96c16ccdc4a160778"], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f00000001c0)={0x308a, 0xfffffffffffffbff, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0xcb, 0x80, 0x6, 0x1ff, 0xffc00000, 0xfffffff9, 0x101, 0x8, 0x7, 0x7, 0x5}) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000180)) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x50, r1, 0xd5338000) (async) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d09dda5090300000000000000d77b7d95d11bf96c16ccdc4a160778"], 0x208e24b) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) (async) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f00000001c0)={0x308a, 0xfffffffffffffbff, 0x7}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0xcb, 0x80, 0x6, 0x1ff, 0xffc00000, 0xfffffff9, 0x101, 0x8, 0x7, 0x7, 0x5}) (async) 07:38:26 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040002", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 601.003305][T16102] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a03053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x2505}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, 0x1}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) [ 601.195111][T16124] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 601.241513][T16124] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 601.285542][ T5] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 601.675379][ T5] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 601.686224][ T5] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 601.695754][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.708008][ T5] usb 6-1: config 0 descriptor?? [ 602.480853][ T5] usb 6-1: USB disconnect, device number 115 07:38:28 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="0000e0f728a6d6896f234d12be7e09d29a33d52b02c8712758204eb3c1efaf8e8afb266c1253d58d8a3f58f9a58dd4c5f1ef736918808826d4f6c263610b051228fabba961db67aa93eecc775850c0ff2c87bf855969610236449b09207adbd1390a67c0645daf7032fb456ad3d3cd02c0c1367d36dc715c86ab2a98de401e1585fa58725a1d06ca2859db128a68a711bbcd892603bc984bfcd28d423b138601c4e3c9bf41363992bbb2ed4ec4ed332bd715b19566810f736aea30836f0cfe06a3c2400cdffeb033a90c909231ebe33e088ee0fdb7cbd24690680332"], 0x0, 0x0, 0x0}, 0x0) 07:38:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000180)) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x50, r1, 0xd5338000) (async) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d09dda5090300000000000000d77b7d95d11bf96c16ccdc4a160778"], 0x208e24b) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) (async) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f00000001c0)={0x308a, 0xfffffffffffffbff, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0xcb, 0x80, 0x6, 0x1ff, 0xffc00000, 0xfffffff9, 0x101, 0x8, 0x7, 0x7, 0x5}) 07:38:28 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040003", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) 07:38:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x3f00}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a04053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x7, 0x2, {"02890266881687a20213817d483f4598"}, 0x12, 0xb8ba}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r3, 0x2}}, 0x18) 07:38:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 602.967712][T16136] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 602.996924][T16136] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0x6000}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:28 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040004", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a05053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 603.164630][T16156] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 603.207097][T16156] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 603.335325][ T5] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 603.705453][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.716532][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.726616][ T5] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 603.736012][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.745665][ T5] usb 6-1: config 0 descriptor?? [ 604.485383][ T5] usbhid 6-1:0.0: can't add hid device: -71 [ 604.491395][ T5] usbhid: probe of 6-1:0.0 failed with error -71 [ 604.500428][ T5] usb 6-1: USB disconnect, device number 116 07:38:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x7, 0x2, {"02890266881687a20213817d483f4598"}, 0x12, 0xb8ba}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r3, 0x2}}, 0x18) 07:38:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xf000}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:30 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040005", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) 07:38:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a06053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:30 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="0000e0f728a6d6896f234d12be7e09d29a33d52b02c8712758204eb3c1efaf8e8afb266c1253d58d8a3f58f9a58dd4c5f1ef736918808826d4f6c263610b051228fabba961db67aa93eecc775850c0ff2c87bf855969610236449b09207adbd1390a67c0645daf7032fb456ad3d3cd02c0c1367d36dc715c86ab2a98de401e1585fa58725a1d06ca2859db128a68a711bbcd892603bc984bfcd28d423b138601c4e3c9bf41363992bbb2ed4ec4ed332bd715b19566810f736aea30836f0cfe06a3c2400cdffeb033a90c909231ebe33e088ee0fdb7cbd24690680332"], 0x0, 0x0, 0x0}, 0x0) 07:38:30 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x5c8, r0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x41df, 0x6d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "327fb2b05d"}, @NL80211_ATTR_FILS_ERP_RRK={0x100, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x18}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3ff}, @NL80211_ATTR_FILS_ERP_RRK={0xbf, 0xfc, "0a05261304b475a96c97f54bd222203a108444a6695bfccbfcaf941dda910876bd42d486da4d9aa22f98c1c7add5ec0360505c53b3f92bc3c719af7fdc769625ef40b6377dc15cee8bb6717f9ef1f787ba70637f935c922c0722ea3dfbe3cd108b6ad9c34f0a368d5fda8719dd6113704e0851beb1621f9c5c683ac81eeed58b6980e855d1f8f1998782988fd680143cee5ee64b10be9df8ed3a11509f2dd20d6972cac429bd6953667469ba86eba31c08c80917202129072ce971"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x83, 0xfa, "4c58e68cffd970d33959bb1644a8546b1bf31d82c40312e2425132ea286588053d32d0789125111d1950601f37cbf772ee46936a9a655537ee43df517387ba7220d00cc6e5b33abce2c4350ddd62eb8eedc42befe6d26319c123807ba99928daa4868fc9c232d91debae86d745ec1e90fa7331076bb510ada01e8a041ac0b5"}, @NL80211_ATTR_FILS_ERP_RRK={0x8f, 0xfc, "7b981f2336d2b0faa195f3bac6e4e14d1bd7efd64ff3a6b79c779894613a89bbe0dac0196fd8ad69378825235404d1a1cc37c957379d886130200f3a7e66d114adb5beb3489776a68878f5cdc37148f5d89a61212a00331a658f9eaa99441d42a2df07915ceaccf1bf0592d0e46eb842f835fc643a5a1c3a15f476db89fd0c2d60697a320ea6dc1f2cad0d"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}], @NL80211_ATTR_IE={0x79, 0x2a, [@preq={0x82, 0x51, @not_ext={{0x1, 0x1}, 0x57, 0x63, 0xffff9ec5, @broadcast, 0xdb, "", 0x7, 0x9, 0x5, [{{0x1, 0x0, 0x1}, @device_a, 0x8}, {{}, @device_a, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0xdb5}, {{0x1, 0x0, 0x1}, @device_b, 0x8}, {{0x1}, @device_b, 0x3}]}}, @chsw_timing={0x68, 0x4, {0x1000, 0x4}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @link_id={0x65, 0x12, {@random="4fd2f8410832"}}]}, @NL80211_ATTR_IE={0x214, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x0, 0x95, "ec3c75a585015dfaf794bfbaf803653b19f57ebc2c3b3c4fcd998e6754a9ac7ba3569b92782ccc461f7031f7de074a4af3adc659f778a250bd95ca5e8976ad49bf4c2b003f63a2c53ce4ff595c37377c57e6c97a0504c2ae99b5fe5e9e281fbe2ad22f3464b2b71404f0c37fefd8c84d428ff423c7e907f26876a7e77833c161e1dcf44a71d1d5d9edb0e9d37f58ec40df2e04cd14"}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x7f, 0x0, 0x0, 0x7, 0x48}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x7, 0x1a, @device_a, 0x5, 0x829, 0x400}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xb7, 0x8}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @peer_mgmt={0x75, 0x16, {0x0, 0x8, @val=0x6000, @void, @val="6a73740398ab3e13a12b4a4ebb2798b2"}}, @random_vendor={0xdd, 0xf3, "73362b6cfc07e3a1a6c7db98930055474e34d1989d81e6fd956b94605933f91ca04008275086bdfc2623b749e4e95e7bc1e80dc4b17ce9105ddddd7ecdf174b315d99d3c93f083d06a9d7ee25831d031ac1564c24cbd3b1b55b2506bb12f8c99f13e1bafb8645e809e1715e82e28d06dd0d9d8f6a7ff505935870f7ea603778bf7ef1c248a7eb611260aa3e30b67453bee6ce4bf953b40b8e5fe6410dd452aa3c0314853ec92e53fa24766960d2d1e8966e3cf605798de980a93ec6d589cdac862f24b5a292fe682251421fa1fea24460631a905995fcf8a4332bc771791a49793da7458ad43b5a7c8dafa48470a98855d1fe9"}, @prep={0x83, 0x25, @ext={{}, 0x20, 0x7, @device_a, 0x9, @device_b, 0xce34, 0x3, @device_a, 0x8}}]}, @NL80211_ATTR_IE={0xf, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @challenge={0x10, 0x1, 0x1e}, @channel_switch={0x25, 0x3, {0x1, 0xa, 0x1f}}]}]}, 0x5c8}, 0x1, 0x0, 0x0, 0x1}, 0x8021) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 07:38:30 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040006", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x7, 0x2, {"02890266881687a20213817d483f4598"}, 0x12, 0xb8ba}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r3, 0x2}}, 0x18) 07:38:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xf205}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 604.986484][T16169] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 605.025120][T16169] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a07053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000580)={0x6, 0x118, 0xfa00, {{0x401, 0x8001, "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", 0x6, 0x1, 0x7, 0x64, 0x3f, 0x0, 0x9, 0x1}}}, 0x120) r2 = openat$null(0xffffff9c, &(0x7f0000000040), 0x46200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1f, @mcast1, 0xffff}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, r3, 0x1}}, 0x48) 07:38:30 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x5c8, r0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x41df, 0x6d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "327fb2b05d"}, @NL80211_ATTR_FILS_ERP_RRK={0x100, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x18}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3ff}, @NL80211_ATTR_FILS_ERP_RRK={0xbf, 0xfc, "0a05261304b475a96c97f54bd222203a108444a6695bfccbfcaf941dda910876bd42d486da4d9aa22f98c1c7add5ec0360505c53b3f92bc3c719af7fdc769625ef40b6377dc15cee8bb6717f9ef1f787ba70637f935c922c0722ea3dfbe3cd108b6ad9c34f0a368d5fda8719dd6113704e0851beb1621f9c5c683ac81eeed58b6980e855d1f8f1998782988fd680143cee5ee64b10be9df8ed3a11509f2dd20d6972cac429bd6953667469ba86eba31c08c80917202129072ce971"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x83, 0xfa, "4c58e68cffd970d33959bb1644a8546b1bf31d82c40312e2425132ea286588053d32d0789125111d1950601f37cbf772ee46936a9a655537ee43df517387ba7220d00cc6e5b33abce2c4350ddd62eb8eedc42befe6d26319c123807ba99928daa4868fc9c232d91debae86d745ec1e90fa7331076bb510ada01e8a041ac0b5"}, @NL80211_ATTR_FILS_ERP_RRK={0x8f, 0xfc, "7b981f2336d2b0faa195f3bac6e4e14d1bd7efd64ff3a6b79c779894613a89bbe0dac0196fd8ad69378825235404d1a1cc37c957379d886130200f3a7e66d114adb5beb3489776a68878f5cdc37148f5d89a61212a00331a658f9eaa99441d42a2df07915ceaccf1bf0592d0e46eb842f835fc643a5a1c3a15f476db89fd0c2d60697a320ea6dc1f2cad0d"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}], @NL80211_ATTR_IE={0x79, 0x2a, [@preq={0x82, 0x51, @not_ext={{0x1, 0x1}, 0x57, 0x63, 0xffff9ec5, @broadcast, 0xdb, "", 0x7, 0x9, 0x5, [{{0x1, 0x0, 0x1}, @device_a, 0x8}, {{}, @device_a, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0xdb5}, {{0x1, 0x0, 0x1}, @device_b, 0x8}, {{0x1}, @device_b, 0x3}]}}, @chsw_timing={0x68, 0x4, {0x1000, 0x4}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @link_id={0x65, 0x12, {@random="4fd2f8410832"}}]}, @NL80211_ATTR_IE={0x214, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x0, 0x95, "ec3c75a585015dfaf794bfbaf803653b19f57ebc2c3b3c4fcd998e6754a9ac7ba3569b92782ccc461f7031f7de074a4af3adc659f778a250bd95ca5e8976ad49bf4c2b003f63a2c53ce4ff595c37377c57e6c97a0504c2ae99b5fe5e9e281fbe2ad22f3464b2b71404f0c37fefd8c84d428ff423c7e907f26876a7e77833c161e1dcf44a71d1d5d9edb0e9d37f58ec40df2e04cd14"}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x7f, 0x0, 0x0, 0x7, 0x48}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x7, 0x1a, @device_a, 0x5, 0x829, 0x400}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xb7, 0x8}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @peer_mgmt={0x75, 0x16, {0x0, 0x8, @val=0x6000, @void, @val="6a73740398ab3e13a12b4a4ebb2798b2"}}, @random_vendor={0xdd, 0xf3, "73362b6cfc07e3a1a6c7db98930055474e34d1989d81e6fd956b94605933f91ca04008275086bdfc2623b749e4e95e7bc1e80dc4b17ce9105ddddd7ecdf174b315d99d3c93f083d06a9d7ee25831d031ac1564c24cbd3b1b55b2506bb12f8c99f13e1bafb8645e809e1715e82e28d06dd0d9d8f6a7ff505935870f7ea603778bf7ef1c248a7eb611260aa3e30b67453bee6ce4bf953b40b8e5fe6410dd452aa3c0314853ec92e53fa24766960d2d1e8966e3cf605798de980a93ec6d589cdac862f24b5a292fe682251421fa1fea24460631a905995fcf8a4332bc771791a49793da7458ad43b5a7c8dafa48470a98855d1fe9"}, @prep={0x83, 0x25, @ext={{}, 0x20, 0x7, @device_a, 0x9, @device_b, 0xce34, 0x3, @device_a, 0x8}}]}, @NL80211_ATTR_IE={0xf, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @challenge={0x10, 0x1, 0x1e}, @channel_switch={0x25, 0x3, {0x1, 0xa, 0x1f}}]}]}, 0x5c8}, 0x1, 0x0, 0x0, 0x1}, 0x8021) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x5c8, r0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x41df, 0x6d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "327fb2b05d"}, @NL80211_ATTR_FILS_ERP_RRK={0x100, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x18}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3ff}, @NL80211_ATTR_FILS_ERP_RRK={0xbf, 0xfc, "0a05261304b475a96c97f54bd222203a108444a6695bfccbfcaf941dda910876bd42d486da4d9aa22f98c1c7add5ec0360505c53b3f92bc3c719af7fdc769625ef40b6377dc15cee8bb6717f9ef1f787ba70637f935c922c0722ea3dfbe3cd108b6ad9c34f0a368d5fda8719dd6113704e0851beb1621f9c5c683ac81eeed58b6980e855d1f8f1998782988fd680143cee5ee64b10be9df8ed3a11509f2dd20d6972cac429bd6953667469ba86eba31c08c80917202129072ce971"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x83, 0xfa, "4c58e68cffd970d33959bb1644a8546b1bf31d82c40312e2425132ea286588053d32d0789125111d1950601f37cbf772ee46936a9a655537ee43df517387ba7220d00cc6e5b33abce2c4350ddd62eb8eedc42befe6d26319c123807ba99928daa4868fc9c232d91debae86d745ec1e90fa7331076bb510ada01e8a041ac0b5"}, @NL80211_ATTR_FILS_ERP_RRK={0x8f, 0xfc, "7b981f2336d2b0faa195f3bac6e4e14d1bd7efd64ff3a6b79c779894613a89bbe0dac0196fd8ad69378825235404d1a1cc37c957379d886130200f3a7e66d114adb5beb3489776a68878f5cdc37148f5d89a61212a00331a658f9eaa99441d42a2df07915ceaccf1bf0592d0e46eb842f835fc643a5a1c3a15f476db89fd0c2d60697a320ea6dc1f2cad0d"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}], @NL80211_ATTR_IE={0x79, 0x2a, [@preq={0x82, 0x51, @not_ext={{0x1, 0x1}, 0x57, 0x63, 0xffff9ec5, @broadcast, 0xdb, "", 0x7, 0x9, 0x5, [{{0x1, 0x0, 0x1}, @device_a, 0x8}, {{}, @device_a, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0xdb5}, {{0x1, 0x0, 0x1}, @device_b, 0x8}, {{0x1}, @device_b, 0x3}]}}, @chsw_timing={0x68, 0x4, {0x1000, 0x4}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @link_id={0x65, 0x12, {@random="4fd2f8410832"}}]}, @NL80211_ATTR_IE={0x214, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x0, 0x95, "ec3c75a585015dfaf794bfbaf803653b19f57ebc2c3b3c4fcd998e6754a9ac7ba3569b92782ccc461f7031f7de074a4af3adc659f778a250bd95ca5e8976ad49bf4c2b003f63a2c53ce4ff595c37377c57e6c97a0504c2ae99b5fe5e9e281fbe2ad22f3464b2b71404f0c37fefd8c84d428ff423c7e907f26876a7e77833c161e1dcf44a71d1d5d9edb0e9d37f58ec40df2e04cd14"}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x7f, 0x0, 0x0, 0x7, 0x48}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x7, 0x1a, @device_a, 0x5, 0x829, 0x400}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xb7, 0x8}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @peer_mgmt={0x75, 0x16, {0x0, 0x8, @val=0x6000, @void, @val="6a73740398ab3e13a12b4a4ebb2798b2"}}, @random_vendor={0xdd, 0xf3, "73362b6cfc07e3a1a6c7db98930055474e34d1989d81e6fd956b94605933f91ca04008275086bdfc2623b749e4e95e7bc1e80dc4b17ce9105ddddd7ecdf174b315d99d3c93f083d06a9d7ee25831d031ac1564c24cbd3b1b55b2506bb12f8c99f13e1bafb8645e809e1715e82e28d06dd0d9d8f6a7ff505935870f7ea603778bf7ef1c248a7eb611260aa3e30b67453bee6ce4bf953b40b8e5fe6410dd452aa3c0314853ec92e53fa24766960d2d1e8966e3cf605798de980a93ec6d589cdac862f24b5a292fe682251421fa1fea24460631a905995fcf8a4332bc771791a49793da7458ad43b5a7c8dafa48470a98855d1fe9"}, @prep={0x83, 0x25, @ext={{}, 0x20, 0x7, @device_a, 0x9, @device_b, 0xce34, 0x3, @device_a, 0x8}}]}, @NL80211_ATTR_IE={0xf, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @challenge={0x10, 0x1, 0x1e}, @channel_switch={0x25, 0x3, {0x1, 0xa, 0x1f}}]}]}, 0x5c8}, 0x1, 0x0, 0x0, 0x1}, 0x8021) (async) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) (async) 07:38:30 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040007", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{0x3b, 0x0, 0xffff}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000580)={0x6, 0x118, 0xfa00, {{0x401, 0x8001, "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", 0x6, 0x1, 0x7, 0x64, 0x3f, 0x0, 0x9, 0x1}}}, 0x120) (async, rerun: 64) r2 = openat$null(0xffffff9c, &(0x7f0000000040), 0x46200, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x2, 0x4}}, 0x20) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1f, @mcast1, 0xffff}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, r3, 0x1}}, 0x48) [ 605.197889][T16185] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 605.220929][T16185] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:31 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040008", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 605.295702][ T3677] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 605.725358][ T3677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.736349][ T3677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.746248][ T3677] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 605.755463][ T3677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.764912][ T3677] usb 6-1: config 0 descriptor?? [ 606.325393][ T3677] usbhid 6-1:0.0: can't add hid device: -71 [ 606.331514][ T3677] usbhid: probe of 6-1:0.0 failed with error -71 [ 606.339917][ T3677] usb 6-1: USB disconnect, device number 117 07:38:32 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="0000e0f728a6d6896f234d12be7e09d29a33d52b02c8712758204eb3c1efaf8e8afb266c1253d58d8a3f58f9a58dd4c5f1ef736918808826d4f6c263610b051228fabba961db67aa93eecc775850c0ff2c87bf855969610236449b09207adbd1390a67c0645daf7032fb456ad3d3cd02c0c1367d36dc715c86ab2a98de401e1585fa58725a1d06ca2859db128a68a711bbcd892603bc984bfcd28d423b138601c4e3c9bf41363992bbb2ed4ec4ed332bd715b19566810f736aea30836f0cfe06a3c2400cdffeb033a90c909231ebe33e088ee0fdb7cbd24690680332"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="0000e0f728a6d6896f234d12be7e09d29a33d52b02c8712758204eb3c1efaf8e8afb266c1253d58d8a3f58f9a58dd4c5f1ef736918808826d4f6c263610b051228fabba961db67aa93eecc775850c0ff2c87bf855969610236449b09207adbd1390a67c0645daf7032fb456ad3d3cd02c0c1367d36dc715c86ab2a98de401e1585fa58725a1d06ca2859db128a68a711bbcd892603bc984bfcd28d423b138601c4e3c9bf41363992bbb2ed4ec4ed332bd715b19566810f736aea30836f0cfe06a3c2400cdffeb033a90c909231ebe33e088ee0fdb7cbd24690680332"], 0x0, 0x0, 0x0}, 0x0) (async) 07:38:32 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x5c8, r0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x41df, 0x6d}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "327fb2b05d"}, @NL80211_ATTR_FILS_ERP_RRK={0x100, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x18}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3ff}, @NL80211_ATTR_FILS_ERP_RRK={0xbf, 0xfc, "0a05261304b475a96c97f54bd222203a108444a6695bfccbfcaf941dda910876bd42d486da4d9aa22f98c1c7add5ec0360505c53b3f92bc3c719af7fdc769625ef40b6377dc15cee8bb6717f9ef1f787ba70637f935c922c0722ea3dfbe3cd108b6ad9c34f0a368d5fda8719dd6113704e0851beb1621f9c5c683ac81eeed58b6980e855d1f8f1998782988fd680143cee5ee64b10be9df8ed3a11509f2dd20d6972cac429bd6953667469ba86eba31c08c80917202129072ce971"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x83, 0xfa, "4c58e68cffd970d33959bb1644a8546b1bf31d82c40312e2425132ea286588053d32d0789125111d1950601f37cbf772ee46936a9a655537ee43df517387ba7220d00cc6e5b33abce2c4350ddd62eb8eedc42befe6d26319c123807ba99928daa4868fc9c232d91debae86d745ec1e90fa7331076bb510ada01e8a041ac0b5"}, @NL80211_ATTR_FILS_ERP_RRK={0x8f, 0xfc, "7b981f2336d2b0faa195f3bac6e4e14d1bd7efd64ff3a6b79c779894613a89bbe0dac0196fd8ad69378825235404d1a1cc37c957379d886130200f3a7e66d114adb5beb3489776a68878f5cdc37148f5d89a61212a00331a658f9eaa99441d42a2df07915ceaccf1bf0592d0e46eb842f835fc643a5a1c3a15f476db89fd0c2d60697a320ea6dc1f2cad0d"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}], @NL80211_ATTR_IE={0x79, 0x2a, [@preq={0x82, 0x51, @not_ext={{0x1, 0x1}, 0x57, 0x63, 0xffff9ec5, @broadcast, 0xdb, "", 0x7, 0x9, 0x5, [{{0x1, 0x0, 0x1}, @device_a, 0x8}, {{}, @device_a, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0xdb5}, {{0x1, 0x0, 0x1}, @device_b, 0x8}, {{0x1}, @device_b, 0x3}]}}, @chsw_timing={0x68, 0x4, {0x1000, 0x4}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @link_id={0x65, 0x12, {@random="4fd2f8410832"}}]}, @NL80211_ATTR_IE={0x214, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x0, 0x95, "ec3c75a585015dfaf794bfbaf803653b19f57ebc2c3b3c4fcd998e6754a9ac7ba3569b92782ccc461f7031f7de074a4af3adc659f778a250bd95ca5e8976ad49bf4c2b003f63a2c53ce4ff595c37377c57e6c97a0504c2ae99b5fe5e9e281fbe2ad22f3464b2b71404f0c37fefd8c84d428ff423c7e907f26876a7e77833c161e1dcf44a71d1d5d9edb0e9d37f58ec40df2e04cd14"}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x7f, 0x0, 0x0, 0x7, 0x48}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x7, 0x1a, @device_a, 0x5, 0x829, 0x400}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xb7, 0x8}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @peer_mgmt={0x75, 0x16, {0x0, 0x8, @val=0x6000, @void, @val="6a73740398ab3e13a12b4a4ebb2798b2"}}, @random_vendor={0xdd, 0xf3, "73362b6cfc07e3a1a6c7db98930055474e34d1989d81e6fd956b94605933f91ca04008275086bdfc2623b749e4e95e7bc1e80dc4b17ce9105ddddd7ecdf174b315d99d3c93f083d06a9d7ee25831d031ac1564c24cbd3b1b55b2506bb12f8c99f13e1bafb8645e809e1715e82e28d06dd0d9d8f6a7ff505935870f7ea603778bf7ef1c248a7eb611260aa3e30b67453bee6ce4bf953b40b8e5fe6410dd452aa3c0314853ec92e53fa24766960d2d1e8966e3cf605798de980a93ec6d589cdac862f24b5a292fe682251421fa1fea24460631a905995fcf8a4332bc771791a49793da7458ad43b5a7c8dafa48470a98855d1fe9"}, @prep={0x83, 0x25, @ext={{}, 0x20, 0x7, @device_a, 0x9, @device_b, 0xce34, 0x3, @device_a, 0x8}}]}, @NL80211_ATTR_IE={0xf, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @challenge={0x10, 0x1, 0x1e}, @channel_switch={0x25, 0x3, {0x1, 0xa, 0x1f}}]}]}, 0x5c8}, 0x1, 0x0, 0x0, 0x1}, 0x8021) (async) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 07:38:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a08053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x3, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:32 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040009", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000580)={0x6, 0x118, 0xfa00, {{0x401, 0x8001, "b2509ea7fc9af56052666cdd0bb2aaf0f8bb3cd5588855c7c876ad831f1745d499169c598fc6373e1b54736a9bb5075b6022a5c21de036862a1de6c0c465f9941305d05517248a64c025bcd29b0c066060076a7a5591b186c59f7685a87936971fff228029ce975117cc1f6d9a0aeab9dc916dca0b7d40c4976cc0c0330ea73065cdb2690b9952e0c41a757c164b132e2edb505278fd387c68c5e5793f73c57e9c05f2e31c8675b429463896ef6f00980a6b05182f0fa79856c63d3014b0908525175b1ed9e37dff91cf9e5fabaab49a3ef0d1b0c6e14d48d15ac462e3729c4fb2c25705d392e18f34f9ebc83f27282bf2e4de3e9ed7f4c2116a356a57abe4f8", 0x6, 0x1, 0x7, 0x64, 0x3f, 0x0, 0x9, 0x1}}}, 0x120) r2 = openat$null(0xffffff9c, &(0x7f0000000040), 0x46200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1f, @mcast1, 0xffff}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, r3, 0x1}}, 0x48) [ 606.799648][T16207] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 606.811257][T16204] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x4d2041, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) 07:38:32 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804000e", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:32 executing program 2: socket$inet_dccp(0x2, 0x6, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001700)=0x9, 0x87) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) r2 = epoll_create(0x3ff) r3 = signalfd(r0, &(0x7f0000000000)={[0x7fff]}, 0x8) ioctl$SG_IO(r3, 0x2285, &(0x7f00000016c0)={0x0, 0xfffffffffffffff9, 0x75, 0x4, @scatter={0x8, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/228, 0xe4}, {&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000001240)=""/216, 0xd8}, {&(0x7f0000001340)=""/99, 0x63}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f00000013c0)=""/214, 0xd6}]}, &(0x7f0000001500)="06e9220bf33e54126f49096ffd08ed2c1d73dd2c77e797948e806b9597db420db39cadd0e8631a3366840352a590dd8f8dffa1f4d8bf59855ff13ec2f73910cfada4847abb03ddd03b850dd90b776e91506e33ab1c107b5b5e1403467bcfc3bc955c785047074a659cebcbbdf5d796b0816d581c48", &(0x7f0000001580)=""/228, 0x4, 0x0, 0x2, &(0x7f0000001680)}) mmap(&(0x7f00006d1000/0x3000)=nil, 0x3000, 0x2000005, 0x50, r2, 0xc921a000) 07:38:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x3b, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 606.859077][T16204] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:32 executing program 2: socket$inet_dccp(0x2, 0x6, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001700)=0x9, 0x87) (async, rerun: 64) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) (async) r2 = epoll_create(0x3ff) (async) r3 = signalfd(r0, &(0x7f0000000000)={[0x7fff]}, 0x8) ioctl$SG_IO(r3, 0x2285, &(0x7f00000016c0)={0x0, 0xfffffffffffffff9, 0x75, 0x4, @scatter={0x8, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/228, 0xe4}, {&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000001240)=""/216, 0xd8}, {&(0x7f0000001340)=""/99, 0x63}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f00000013c0)=""/214, 0xd6}]}, &(0x7f0000001500)="06e9220bf33e54126f49096ffd08ed2c1d73dd2c77e797948e806b9597db420db39cadd0e8631a3366840352a590dd8f8dffa1f4d8bf59855ff13ec2f73910cfada4847abb03ddd03b850dd90b776e91506e33ab1c107b5b5e1403467bcfc3bc955c785047074a659cebcbbdf5d796b0816d581c48", &(0x7f0000001580)=""/228, 0x4, 0x0, 0x2, &(0x7f0000001680)}) (async) mmap(&(0x7f00006d1000/0x3000)=nil, 0x3000, 0x2000005, 0x50, r2, 0xc921a000) 07:38:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a09053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 607.036798][T16223] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 607.050537][T16225] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 607.062723][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 607.066163][T16225] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 607.115361][ T3677] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 607.486249][ T3677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.497192][ T3677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.507037][ T3677] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 607.516097][ T3677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.527883][ T3677] usb 6-1: config 0 descriptor?? [ 608.197232][T16214] UDC core: couldn't find an available UDC or it's busy: -16 [ 608.204705][T16214] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 608.415390][ T3677] usbhid 6-1:0.0: can't add hid device: -71 [ 608.421375][ T3677] usbhid: probe of 6-1:0.0 failed with error -71 [ 608.432387][ T3677] usb 6-1: USB disconnect, device number 118 07:38:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x44, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x4d2041, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) 07:38:34 executing program 2: socket$inet_dccp(0x2, 0x6, 0x0) (async) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001700)=0x9, 0x87) (async) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) (async) r2 = epoll_create(0x3ff) (async, rerun: 32) r3 = signalfd(r0, &(0x7f0000000000)={[0x7fff]}, 0x8) (rerun: 32) ioctl$SG_IO(r3, 0x2285, &(0x7f00000016c0)={0x0, 0xfffffffffffffff9, 0x75, 0x4, @scatter={0x8, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/228, 0xe4}, {&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000001240)=""/216, 0xd8}, {&(0x7f0000001340)=""/99, 0x63}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f00000013c0)=""/214, 0xd6}]}, &(0x7f0000001500)="06e9220bf33e54126f49096ffd08ed2c1d73dd2c77e797948e806b9597db420db39cadd0e8631a3366840352a590dd8f8dffa1f4d8bf59855ff13ec2f73910cfada4847abb03ddd03b850dd90b776e91506e33ab1c107b5b5e1403467bcfc3bc955c785047074a659cebcbbdf5d796b0816d581c48", &(0x7f0000001580)=""/228, 0x4, 0x0, 0x2, &(0x7f0000001680)}) (async) mmap(&(0x7f00006d1000/0x3000)=nil, 0x3000, 0x2000005, 0x50, r2, 0xc921a000) 07:38:34 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804000f", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a0e053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:34 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x1, 0x0, 0x8}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) syz_usb_disconnect(r3) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x14, &(0x7f0000000140)={0x0, 0x23, 0x8f, {0x8f, 0x24, "3ebecbb972e45836909bbaed0d2aa35ac0143b63bd62041fbdde28fc0bb7eea482f1b26fea221dcc8a99af6c847debe0dd23afee9b9392eb6647d853dcb1d5ca88735bdf99d3c9aca052566c8974651e430a32307938e8c527c74d95cf77f1cccf3e64769616204cb2412b814da1869467e29b8406bffc6c6f3833961f0d2582840adde30b32b7fe4ad1d476c7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000280)={0x0, 0x22, 0x8, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x1, 0x0, 0xc, "8c"}, @global=@item_4={0x3, 0x1, 0x9, "fe5f610d"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x6af}}}}, &(0x7f0000001640)={0x18, &(0x7f0000000340)={0x20, 0x9, 0xe, "4b87eaee5f4a219484c787b40378"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x1, 0x34, "0436cf8ffae7f2c0ee4c56261a6a542428af5465af83b8d41bfd5cb776c21961ee16d0ff9a5d414dcc618770236c86a64e3cb32f"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x81}}) write$tun(r2, &(0x7f00000004c0)={@val, @void, @ipv4=@gre={{0x2a, 0x4, 0x0, 0x5, 0x1141, 0x65, 0x0, 0x1, 0x2f, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0xf3, 0x3, 0x8, [{@multicast2, 0x7}, {@multicast2, 0x2}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x3}, {@private=0xa010102, 0x5}, {@broadcast, 0x8}, {@local}]}, @generic={0x83, 0x3, "e5"}, @timestamp_addr={0x44, 0x14, 0xaa, 0x1, 0x2, [{@local, 0x5}, {@rand_addr=0x64010100, 0x8}]}, @cipso={0x86, 0x29, 0x3, [{0x6, 0x2}, {0x0, 0xb, "51c295361689b3d15c"}, {0x6, 0xd, "715568253883b7b4bf36a0"}, {0x7, 0x9, "ab1bb0e8a72032"}]}, @timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x3, [{@loopback, 0x800}, {@private=0xa010101, 0xfff}]}, @noop]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x1, [0x5], "d0a54585bd77373c23288b5e6fb6b8a9243a6e11ec54eb52f77f31db09575302269d6d9ee52860433a88cc647cc320b4c074950c97bc4f8fe980bc342d7fd8d335d2efca497ccf3aef86663396e409b4092fc576e11f0e13cf1ad9f6638e81d7c55db182b80c62e62f51e7c661d829bed2b67274d5d94ddd9b4479ce42fe5bdb8f6e9785080741f2c4bf9856d3fb3af2ba02d027097f92f4bb137ab2a118c0b8490c23799fc8d59da819eaa9750792476d5347ada142cf236a2158b393609b2cd003b924cd60ac43399526bffbd538f80b041479ada5791f4e71821db5cb119154a5aa4fd5f07827e7e6a6bcd7c63c27f78b9d7a42ca922545b2aa53614479c40e80a38538c2a1de97ab252e281a72e746fee6114d183665c2a237807748a3f2d17b5f0eec8731e64fcbb0b16e2f5aec31f6938a5e278346d0c1d2bc9ec3c61e9207ea35b14d084d75e4b2f861c857c7367a93878e18c1a737faabd0d784c033d28614ca2d38d086055ddc950946cdf7060c0904e7301d78b3727450055d731d1f5bd6f0a91d49d67f1e2059a564dabf2505044ecd1775e204f034e9863ddd96c60ddd260eb98b1c529c69c96a91eff0e1a2daa427e30ef69a39d884a4a7484848f598280e8965b310640647b29bdb43882c1b1a8f522fdd4a7e0d6ce95afd9e20eef3f163daee1ab948ae7d1b36bd437ac0d5934cb4c10ee8b1ad9f0e9a5c733d803e6fd670c0070d25273fc5b6ad9ffd913757446e63787f128857c899c58d982ea607444a84eac012a204cc2f13b2593bc722eeb9d3dd1e742e8c3523b7647ed68f51a05c0112aacb783062400b3d6089a518795869fcac1ecc2d40d614276c7cff50ffc654e5cfc2591a87902ee46d4098011e188ac8053638e5ed5d48f39573abee2d487357017fd7f01425113391b5676dacf8ad33573b524dd97d38109215cf4dca9c5264686b24cace90f2e6c68c84be451dcc5a372c93cd57eb69b44e922493b089c93e4782003a5dce651bffba696e025c6601f7893249460e766bb220b12422d044f39de2d5e068244db8a1f015fc71f5ceaa2e33fa5096dcee074f9d3a745b22526927d25b22a6a0e1c9c6852edfb1a6942b2965d9ba9f61e27da2b7b604b8f0b29c0da5d1842d0092d192aca854adbe69d35c422f57d0dec16858048a9d1266e0bbc4c4300553724aaeef1c51d21b328147c5551eda74db051abd040eddda1b3601a7d24cf547b2bd5a26538d4d69352b17880742d0632b82ff60cd4e858850ffda94b5e8a715484979e929fd0916b18f4419d43b75b4da43a33a7ceb19bbb44523170934b41631456e8a259c5e658c448a5f143cfb4f8ec3c46ddb56b1f616a3d1b813c19c1324e36fc157970cc3ce017db0bbd20697d0eb8576d5aa128c4b32e61f18e3d7ae21ce9b70b66e7e3c97b349e3d1cb5b1e45bb14c67e1724b6fc12204798fd64e185cdcfa92a4161576a18eda30057ffc9eee82abe5fad3d69175aa48f2fad8c557ba46baabed14556e7cefc1b1a12bade2b9fb2c0869e0c2f9cd8221b0ac04b8e8e213b292d97d651d474c86d71643e9fafe6882f2d8b2842db3a8f6dec94e390227a02acf55c534c3e93b513302a158e0c405689cd5ad297ed20eb292a0c0f0076dedc3b27ef3c3e5c2d1e4ec2421ecbccacc850797a9d6618c4390f91049db5bf18a42ce094657125b0f241e337748a2a59b1ea89759b24ba71144cb82fc38b7d73310405dd75ca81dea808f0f9aff95c1878e36d46c454372602fc88ace62ca8047d3ade43560b3a7e89217265bd55e63160b14003381b8ffc1bb4079c9aeb102c82a04a3d5c418257494cda65554f4a3a1b62cebdf2ea21a8606fa43ab4ce2f0ae8e427cdaf99d018522dc179f49acbe7578b5ce3f3169bdb6cdef0fb7adf2ce340a2d5830f01fd460756155a56277d9671d963a2f3f8a43d9c9bc9930ade8179ac0d5d0d3ccfd60663f446a73445739f1db962f91443fedba15be4b4571621ded3023121079000c07c2e5982dceec1de36e0c5c402a31e18f2e37fc79690167a9ce4a24b96d0e760898e2e6c7979bad9d6a83bbd6e80a72658c48ed97e2648857f0478d7dfd14fd1f91b8f8992ef0e7dd4fe538a66c6ca5b735ef0980ef743d601a2e0765d76e37b3fd638fd60c1704c3ef925f7fe0b505d969355277cee9a55bb854d9e69c460195b30f003eb29afd49a5df7fc3473e4530f5d0e76787932bafc73f9da81c1ec9e591b42abd185b9b480bd8f3a59fbccb6386a119827156867580ef9da1f8ac9e4be3eaa4c1ac09a40aabfb9fa390c131e8d9f54793cdcf54c3f9c1bc5fa5d1192e19cf2c85df9c7ab370cbb9a7654297b9693a2d2fcb0eade4adb8aa850fc12faf6bb6d9f9382b6d39e59a13e50a46923dc87eea4106a0ffd0863789c16d618e7866347bd6745769ea9ca6fcb8e720a76cd762312fc9bf4bd85cb048e0aad145d3a88eea3688b679e0e4d5f4b6eccf23bfb24279f8908cdebb8fcee90c9c3f4e8aa35a10e63daa40b277b1c7edc763a1d8bd1dad6b21fd914791f8d8a6923bb439e7acbcab1a7474b4045fbe9c323367466145fb48e689ce0d9a03b6cc6b6518d5cff56be70d491ab9d69b9be2eb8e7ee9be1c829d77a8937ef5f01e545937a56d8aad0ceed0e46c918981132f6af86e599c6da44372aed1ce0f4fc163cbb635d6b6804a9c9871710ae0e590db01b06710186d6a7968d04af8f5fd96b34476c7ba8570c976dc897416aa6be7ebeecd77ed9e6b7e87ebf66f67674ddb13f4eea707af1e144cc8d0081d66b066b94bb14b4834ff7529ce8bf23ac07d7ac9b65796d6b141d5757703a1276e8c519d20888b5b81e3d46ba896a3aa1406e67db6f8d6e6954a7048d4ae703cb7ec0f034e8dce6cc29fd379f795540efc9c7b34fc4d6c4acb93d53506df9afbdb4dcfc0b104a14082c534af1fa2cc750b91cdabb13f4308ff69df1a39de671df2d2ba1339112c4eb4c9865b5b3ab934d7ee01734123427c5d4df28ea47c7c8301557fff096f011e92ed24cbd8864024e66377af656c9e21589c9c56de7ff877ad8f03089200f72bb7adf7d22fc411383a8e8dace9cba5f8d4431a82c5041846d1e9a336700fda5e6baf034acd630ef4f6480de0888d096bc8332d1a819ff10b5306e16be536c780fce6b1e21c1da401df13100c8a64df5517618554c6393f73068a24e01c4e00f000ee71a08414f85ee01901515e4037e7026bed0c9705c0894437ebf0b449369f558f9b76e9d48ef67441ad7c74ccf624a13e7647d1518ff0b5f955525593ba43ad0cc3aef442a7e7ac243e7a91f6e849cf7d0bbd558983b14af048ba7ad4eef54b79526fa71889f6dcebdf465277abcfa8c5afb405abfd20f6afdbc8d6f30c0f99faa9148c45c40e7bea0c023acd98f8bb5f883f405d4a4484950fa9e2dcb30f6753e582e0ac8d927b545b7e6dbae6b7212384f51b4a8df7c3d661793b68a5541556d0923b58831e46f04dfc7e256d550b689de43f39f49876196778e8f6d6a5c97c86afc9535e005b246aad121b1d8e1147735a538d2894e77ffe11cce174e7b281dafe25013235609d3d6956e4089670da554e29f83b92bad7f4e02ed63dd65280e3d903067d27c71f4be0df6b50e5bd79cc5456f1e1e5b6eafaf92db0153b24165834d3c39c507e20c30ba9fc6a6b8582823aa2a56a0663fdb15f032d427a3d93d8a453f933a7b8317dffb341cb844fbbb2371e274531e2ebef2dc410d46e6f7c4fa75969baf9cd61e4c816434dd7a37f3faff417319f5c4bbabd16dc0e1bbdeffe97d20cd245d65240c0e925d5b269367e1f5147ca70753577848f8a099b70b77ee03fc48f55d5c549b2ac7dd5029207e5850ea7eb9463b6ef576b7f3400322034766a7f6eeafbfdc8dce577283f3265c3651fc1db0b9f5e2d0cbe1946d52c0919a31e74b55323652ce7dd62ea592add04a0024d58142f13d3bd6921326435741522b128ed21dab8b88d7d383206197f9b75690411d02eb88b2127a6ec5dcc6f6be8720af3c108c6e7856dfd152c9cb96b2e7e033692da9310df59baec7b59f723064f9af44a1f755f1f9f4b1454e62aa07fba148287df94222248e9e12103db32ac0b9d2dc983905863eaca35759cd5c41108e95a60e312b44a5bc086ead4671e33f29c0eedc38ab64ca40f15dd88b9ad541165be2d462f1cbb95d82b212bcba62527db4e975c547bd9fc2b49a261206b848c2cf57605a19e20a5a88d7efd4b2c61cad2b6577e6fc91a24f477ef5fba6f74c3a4b3f3800ba7abb998768f8317e8a4119d64566feacc8ab794c077f8b0fe34fd9c7c892984ee584082c70fa00b6f3008855b9f047d0041d2c6863dccd358446cb5b1634b4231917443de0b72a02f64c8c7146cf49965ad4c3524fd954fc9cf659aafeb30f6e8b476d2e4d7be77a7802fb048a73017fc67c352415d45af455cfe8b3daf1214657de5dd1166d5c9f3a376274c59a72b84f18da9cfaeaad02f999dfd82e4a47e8986140ff5699bf50a97e49539d881b62e6e36c63c1c7d5691c0d96ca272eb84d9b979e6795371616df14d451d765eb42ec00d615c6aecedf2b44c7d1d21734b723feac099b92ea0c7c4ee4716b2d7ea69a473e37020ee3cfb10890c7202a3291cdff6331025df4e42318195ea9a45c0dc80d18f4adfc5f13739fbdc1dd98be76f5c14c130412f77913e098cf2425e73378ad62585591785807de7e419bf55f3d47bc116c6b86df149b2c3cb90bd61142f1718ac83006146053f36a3c2a3cb219613b6930a50f6bef2d8341afdc3505ddeb617512c1fa4c317b9dd77d477bb03c55598f5c686d16ac20685ebad1867da91d2a627d32ae6713f5cb797f77b02225caca879f79c1e06b8a1a491be8bbb9c03f783393c9212f713889b2b38046ba295781923318613a05ce16bcdb6c1e84a9479048e4b5f7e11e11815dfdced1a70e677b9ee8260362f99fe517a4690b1dbbf5d0a2046368ee2c1c0ae48a809c59c34c564fade5487fc60edbc97fa358d5975c0ef1c00a8ef7c9263a74fb330c9627c62690ca076ab6c166f154a637a2df7b15b876e63a1619afc2d5afef307f3ec93ed23539482a433f75b409e3b982f1f1df96038f62672cd761d5787cf10c908cfd8bf8f2c062859ea16dc9afa228e87bc5db8770b0311f4e3e074b0a417483eb62f38de60dc1b1403103f2906e8e4cb55a82c1f33935a29bf3ebc475ef86a997c1626842355db05e60823cbf4fc0467cf98e1dd678cebd7c62e3c447cff8294407aca6800eb09ca874338e3c2782c680a58da5a708725590d5b6ca96cd8d64dc88a5615e5112961c5573f522974189f727411798d2d4065b937fbd45efb1f4b61c35cff89d22b997ab665e81139bff3fa6b8b91175bbb29cd4a4a5f0ae5ba6712efb7586f721a4d7defb8c4b611f4e82279d3c5679d649e1062ec226be6c590379c1c11179242396fea7461a1daf26d8107d0a37482cf9f447057c290dec14bff042c806ed564c50ef7b3422204d19599a157fa6ee2076f93e5e2fa648609ede3c11ee8b83a7ab322ed6d66f2f28a8fb98c54ce377861ab81eaf458e85cdcc93716bef2d79194a3dc72fa4d04b01c89b084b2a984949bd0451cbbe66fb01daa8b763bec3e6e3bdea00a393a07dd5d614a67dbf687b5ae217454bb1d6b8d7bf1bda35ea0e141e1f75f833719b1c4a368207ea22940cb8268ce7cef36cd2b96653c2aee0915ab2409076dc9ba600a871332e50c8991acc94f1215d1adfc8cd"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x567, 0x7], "092eb5fdc685625adbcfe9c61ed22c32dc274fd31cc62479675140a1"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "851f82e38370cde102d294e520738b63"}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x6c, 0x1, 0x1, 0x0, 0x7, 0x7f}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x80, 0x1, 0x1, 0x0, 0x4}, 0x2, {0x6, 0x0, 0x1, 0x1d, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "8e422d193660e1df85595f172fa2743a246a9f2aed79e0d4d0d749b6750925b0994161"}}}}, 0x1145) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) 07:38:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x4d2041, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000040)={0xf, 0x8}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) 07:38:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:38:34 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040048", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 608.967611][T16241] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 608.969274][T16244] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 609.002724][T16241] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x6b, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x6, {0x4, 0x2000ff, 0x90, 0x5, 0x8000}}) r1 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) 07:38:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a10053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:34 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804004c", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) 07:38:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x6, {0x4, 0x2000ff, 0x90, 0x5, 0x8000}}) r1 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x6, {0x4, 0x2000ff, 0x90, 0x5, 0x8000}}) (async) fcntl$dupfd(r0, 0x0, r0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) (async) 07:38:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x2, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 609.180219][T16257] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 609.194383][T16259] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 609.218055][T16259] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:34 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040060", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 609.315388][ T3676] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 609.685460][ T3676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.697128][ T3676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.707064][ T3676] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 609.716195][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.730347][ T3676] usb 6-1: config 0 descriptor?? [ 610.051107][T16247] UDC core: couldn't find an available UDC or it's busy: -16 [ 610.058813][T16247] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 610.575341][ T3676] usbhid 6-1:0.0: can't add hid device: -71 [ 610.581308][ T3676] usbhid: probe of 6-1:0.0 failed with error -71 [ 610.589908][ T3676] usb 6-1: USB disconnect, device number 119 07:38:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:38:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a35053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x6, {0x4, 0x2000ff, 0x90, 0x5, 0x8000}}) r1 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x6, {0x4, 0x2000ff, 0x90, 0x5, 0x8000}}) (async) fcntl$dupfd(r0, 0x0, r0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x13f, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) (async) 07:38:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x5, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:36 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x1, 0x0, 0x8}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) syz_usb_disconnect(r3) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x14, &(0x7f0000000140)={0x0, 0x23, 0x8f, {0x8f, 0x24, "3ebecbb972e45836909bbaed0d2aa35ac0143b63bd62041fbdde28fc0bb7eea482f1b26fea221dcc8a99af6c847debe0dd23afee9b9392eb6647d853dcb1d5ca88735bdf99d3c9aca052566c8974651e430a32307938e8c527c74d95cf77f1cccf3e64769616204cb2412b814da1869467e29b8406bffc6c6f3833961f0d2582840adde30b32b7fe4ad1d476c7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000280)={0x0, 0x22, 0x8, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x1, 0x0, 0xc, "8c"}, @global=@item_4={0x3, 0x1, 0x9, "fe5f610d"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x6af}}}}, &(0x7f0000001640)={0x18, &(0x7f0000000340)={0x20, 0x9, 0xe, "4b87eaee5f4a219484c787b40378"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x1, 0x34, "0436cf8ffae7f2c0ee4c56261a6a542428af5465af83b8d41bfd5cb776c21961ee16d0ff9a5d414dcc618770236c86a64e3cb32f"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x81}}) write$tun(r2, &(0x7f00000004c0)={@val, @void, @ipv4=@gre={{0x2a, 0x4, 0x0, 0x5, 0x1141, 0x65, 0x0, 0x1, 0x2f, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0xf3, 0x3, 0x8, [{@multicast2, 0x7}, {@multicast2, 0x2}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x3}, {@private=0xa010102, 0x5}, {@broadcast, 0x8}, {@local}]}, @generic={0x83, 0x3, "e5"}, @timestamp_addr={0x44, 0x14, 0xaa, 0x1, 0x2, [{@local, 0x5}, {@rand_addr=0x64010100, 0x8}]}, @cipso={0x86, 0x29, 0x3, [{0x6, 0x2}, {0x0, 0xb, "51c295361689b3d15c"}, {0x6, 0xd, "715568253883b7b4bf36a0"}, {0x7, 0x9, "ab1bb0e8a72032"}]}, @timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x3, [{@loopback, 0x800}, {@private=0xa010101, 0xfff}]}, @noop]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x1, [0x5], "d0a54585bd77373c23288b5e6fb6b8a9243a6e11ec54eb52f77f31db09575302269d6d9ee52860433a88cc647cc320b4c074950c97bc4f8fe980bc342d7fd8d335d2efca497ccf3aef86663396e409b4092fc576e11f0e13cf1ad9f6638e81d7c55db182b80c62e62f51e7c661d829bed2b67274d5d94ddd9b4479ce42fe5bdb8f6e9785080741f2c4bf9856d3fb3af2ba02d027097f92f4bb137ab2a118c0b8490c23799fc8d59da819eaa9750792476d5347ada142cf236a2158b393609b2cd003b924cd60ac43399526bffbd538f80b041479ada5791f4e71821db5cb119154a5aa4fd5f07827e7e6a6bcd7c63c27f78b9d7a42ca922545b2aa53614479c40e80a38538c2a1de97ab252e281a72e746fee6114d183665c2a237807748a3f2d17b5f0eec8731e64fcbb0b16e2f5aec31f6938a5e278346d0c1d2bc9ec3c61e9207ea35b14d084d75e4b2f861c857c7367a93878e18c1a737faabd0d784c033d28614ca2d38d086055ddc950946cdf7060c0904e7301d78b3727450055d731d1f5bd6f0a91d49d67f1e2059a564dabf2505044ecd1775e204f034e9863ddd96c60ddd260eb98b1c529c69c96a91eff0e1a2daa427e30ef69a39d884a4a7484848f598280e8965b310640647b29bdb43882c1b1a8f522fdd4a7e0d6ce95afd9e20eef3f163daee1ab948ae7d1b36bd437ac0d5934cb4c10ee8b1ad9f0e9a5c733d803e6fd670c0070d25273fc5b6ad9ffd913757446e63787f128857c899c58d982ea607444a84eac012a204cc2f13b2593bc722eeb9d3dd1e742e8c3523b7647ed68f51a05c0112aacb783062400b3d6089a518795869fcac1ecc2d40d614276c7cff50ffc654e5cfc2591a87902ee46d4098011e188ac8053638e5ed5d48f39573abee2d487357017fd7f01425113391b5676dacf8ad33573b524dd97d38109215cf4dca9c5264686b24cace90f2e6c68c84be451dcc5a372c93cd57eb69b44e922493b089c93e4782003a5dce651bffba696e025c6601f7893249460e766bb220b12422d044f39de2d5e068244db8a1f015fc71f5ceaa2e33fa5096dcee074f9d3a745b22526927d25b22a6a0e1c9c6852edfb1a6942b2965d9ba9f61e27da2b7b604b8f0b29c0da5d1842d0092d192aca854adbe69d35c422f57d0dec16858048a9d1266e0bbc4c4300553724aaeef1c51d21b328147c5551eda74db051abd040eddda1b3601a7d24cf547b2bd5a26538d4d69352b17880742d0632b82ff60cd4e858850ffda94b5e8a715484979e929fd0916b18f4419d43b75b4da43a33a7ceb19bbb44523170934b41631456e8a259c5e658c448a5f143cfb4f8ec3c46ddb56b1f616a3d1b813c19c1324e36fc157970cc3ce017db0bbd20697d0eb8576d5aa128c4b32e61f18e3d7ae21ce9b70b66e7e3c97b349e3d1cb5b1e45bb14c67e1724b6fc12204798fd64e185cdcfa92a4161576a18eda30057ffc9eee82abe5fad3d69175aa48f2fad8c557ba46baabed14556e7cefc1b1a12bade2b9fb2c0869e0c2f9cd8221b0ac04b8e8e213b292d97d651d474c86d71643e9fafe6882f2d8b2842db3a8f6dec94e390227a02acf55c534c3e93b513302a158e0c405689cd5ad297ed20eb292a0c0f0076dedc3b27ef3c3e5c2d1e4ec2421ecbccacc850797a9d6618c4390f91049db5bf18a42ce094657125b0f241e337748a2a59b1ea89759b24ba71144cb82fc38b7d73310405dd75ca81dea808f0f9aff95c1878e36d46c454372602fc88ace62ca8047d3ade43560b3a7e89217265bd55e63160b14003381b8ffc1bb4079c9aeb102c82a04a3d5c418257494cda65554f4a3a1b62cebdf2ea21a8606fa43ab4ce2f0ae8e427cdaf99d018522dc179f49acbe7578b5ce3f3169bdb6cdef0fb7adf2ce340a2d5830f01fd460756155a56277d9671d963a2f3f8a43d9c9bc9930ade8179ac0d5d0d3ccfd60663f446a73445739f1db962f91443fedba15be4b4571621ded3023121079000c07c2e5982dceec1de36e0c5c402a31e18f2e37fc79690167a9ce4a24b96d0e760898e2e6c7979bad9d6a83bbd6e80a72658c48ed97e2648857f0478d7dfd14fd1f91b8f8992ef0e7dd4fe538a66c6ca5b735ef0980ef743d601a2e0765d76e37b3fd638fd60c1704c3ef925f7fe0b505d969355277cee9a55bb854d9e69c460195b30f003eb29afd49a5df7fc3473e4530f5d0e76787932bafc73f9da81c1ec9e591b42abd185b9b480bd8f3a59fbccb6386a119827156867580ef9da1f8ac9e4be3eaa4c1ac09a40aabfb9fa390c131e8d9f54793cdcf54c3f9c1bc5fa5d1192e19cf2c85df9c7ab370cbb9a7654297b9693a2d2fcb0eade4adb8aa850fc12faf6bb6d9f9382b6d39e59a13e50a46923dc87eea4106a0ffd0863789c16d618e7866347bd6745769ea9ca6fcb8e720a76cd762312fc9bf4bd85cb048e0aad145d3a88eea3688b679e0e4d5f4b6eccf23bfb24279f8908cdebb8fcee90c9c3f4e8aa35a10e63daa40b277b1c7edc763a1d8bd1dad6b21fd914791f8d8a6923bb439e7acbcab1a7474b4045fbe9c323367466145fb48e689ce0d9a03b6cc6b6518d5cff56be70d491ab9d69b9be2eb8e7ee9be1c829d77a8937ef5f01e545937a56d8aad0ceed0e46c918981132f6af86e599c6da44372aed1ce0f4fc163cbb635d6b6804a9c9871710ae0e590db01b06710186d6a7968d04af8f5fd96b34476c7ba8570c976dc897416aa6be7ebeecd77ed9e6b7e87ebf66f67674ddb13f4eea707af1e144cc8d0081d66b066b94bb14b4834ff7529ce8bf23ac07d7ac9b65796d6b141d5757703a1276e8c519d20888b5b81e3d46ba896a3aa1406e67db6f8d6e6954a7048d4ae703cb7ec0f034e8dce6cc29fd379f795540efc9c7b34fc4d6c4acb93d53506df9afbdb4dcfc0b104a14082c534af1fa2cc750b91cdabb13f4308ff69df1a39de671df2d2ba1339112c4eb4c9865b5b3ab934d7ee01734123427c5d4df28ea47c7c8301557fff096f011e92ed24cbd8864024e66377af656c9e21589c9c56de7ff877ad8f03089200f72bb7adf7d22fc411383a8e8dace9cba5f8d4431a82c5041846d1e9a336700fda5e6baf034acd630ef4f6480de0888d096bc8332d1a819ff10b5306e16be536c780fce6b1e21c1da401df13100c8a64df5517618554c6393f73068a24e01c4e00f000ee71a08414f85ee01901515e4037e7026bed0c9705c0894437ebf0b449369f558f9b76e9d48ef67441ad7c74ccf624a13e7647d1518ff0b5f955525593ba43ad0cc3aef442a7e7ac243e7a91f6e849cf7d0bbd558983b14af048ba7ad4eef54b79526fa71889f6dcebdf465277abcfa8c5afb405abfd20f6afdbc8d6f30c0f99faa9148c45c40e7bea0c023acd98f8bb5f883f405d4a4484950fa9e2dcb30f6753e582e0ac8d927b545b7e6dbae6b7212384f51b4a8df7c3d661793b68a5541556d0923b58831e46f04dfc7e256d550b689de43f39f49876196778e8f6d6a5c97c86afc9535e005b246aad121b1d8e1147735a538d2894e77ffe11cce174e7b281dafe25013235609d3d6956e4089670da554e29f83b92bad7f4e02ed63dd65280e3d903067d27c71f4be0df6b50e5bd79cc5456f1e1e5b6eafaf92db0153b24165834d3c39c507e20c30ba9fc6a6b8582823aa2a56a0663fdb15f032d427a3d93d8a453f933a7b8317dffb341cb844fbbb2371e274531e2ebef2dc410d46e6f7c4fa75969baf9cd61e4c816434dd7a37f3faff417319f5c4bbabd16dc0e1bbdeffe97d20cd245d65240c0e925d5b269367e1f5147ca70753577848f8a099b70b77ee03fc48f55d5c549b2ac7dd5029207e5850ea7eb9463b6ef576b7f3400322034766a7f6eeafbfdc8dce577283f3265c3651fc1db0b9f5e2d0cbe1946d52c0919a31e74b55323652ce7dd62ea592add04a0024d58142f13d3bd6921326435741522b128ed21dab8b88d7d383206197f9b75690411d02eb88b2127a6ec5dcc6f6be8720af3c108c6e7856dfd152c9cb96b2e7e033692da9310df59baec7b59f723064f9af44a1f755f1f9f4b1454e62aa07fba148287df94222248e9e12103db32ac0b9d2dc983905863eaca35759cd5c41108e95a60e312b44a5bc086ead4671e33f29c0eedc38ab64ca40f15dd88b9ad541165be2d462f1cbb95d82b212bcba62527db4e975c547bd9fc2b49a261206b848c2cf57605a19e20a5a88d7efd4b2c61cad2b6577e6fc91a24f477ef5fba6f74c3a4b3f3800ba7abb998768f8317e8a4119d64566feacc8ab794c077f8b0fe34fd9c7c892984ee584082c70fa00b6f3008855b9f047d0041d2c6863dccd358446cb5b1634b4231917443de0b72a02f64c8c7146cf49965ad4c3524fd954fc9cf659aafeb30f6e8b476d2e4d7be77a7802fb048a73017fc67c352415d45af455cfe8b3daf1214657de5dd1166d5c9f3a376274c59a72b84f18da9cfaeaad02f999dfd82e4a47e8986140ff5699bf50a97e49539d881b62e6e36c63c1c7d5691c0d96ca272eb84d9b979e6795371616df14d451d765eb42ec00d615c6aecedf2b44c7d1d21734b723feac099b92ea0c7c4ee4716b2d7ea69a473e37020ee3cfb10890c7202a3291cdff6331025df4e42318195ea9a45c0dc80d18f4adfc5f13739fbdc1dd98be76f5c14c130412f77913e098cf2425e73378ad62585591785807de7e419bf55f3d47bc116c6b86df149b2c3cb90bd61142f1718ac83006146053f36a3c2a3cb219613b6930a50f6bef2d8341afdc3505ddeb617512c1fa4c317b9dd77d477bb03c55598f5c686d16ac20685ebad1867da91d2a627d32ae6713f5cb797f77b02225caca879f79c1e06b8a1a491be8bbb9c03f783393c9212f713889b2b38046ba295781923318613a05ce16bcdb6c1e84a9479048e4b5f7e11e11815dfdced1a70e677b9ee8260362f99fe517a4690b1dbbf5d0a2046368ee2c1c0ae48a809c59c34c564fade5487fc60edbc97fa358d5975c0ef1c00a8ef7c9263a74fb330c9627c62690ca076ab6c166f154a637a2df7b15b876e63a1619afc2d5afef307f3ec93ed23539482a433f75b409e3b982f1f1df96038f62672cd761d5787cf10c908cfd8bf8f2c062859ea16dc9afa228e87bc5db8770b0311f4e3e074b0a417483eb62f38de60dc1b1403103f2906e8e4cb55a82c1f33935a29bf3ebc475ef86a997c1626842355db05e60823cbf4fc0467cf98e1dd678cebd7c62e3c447cff8294407aca6800eb09ca874338e3c2782c680a58da5a708725590d5b6ca96cd8d64dc88a5615e5112961c5573f522974189f727411798d2d4065b937fbd45efb1f4b61c35cff89d22b997ab665e81139bff3fa6b8b91175bbb29cd4a4a5f0ae5ba6712efb7586f721a4d7defb8c4b611f4e82279d3c5679d649e1062ec226be6c590379c1c11179242396fea7461a1daf26d8107d0a37482cf9f447057c290dec14bff042c806ed564c50ef7b3422204d19599a157fa6ee2076f93e5e2fa648609ede3c11ee8b83a7ab322ed6d66f2f28a8fb98c54ce377861ab81eaf458e85cdcc93716bef2d79194a3dc72fa4d04b01c89b084b2a984949bd0451cbbe66fb01daa8b763bec3e6e3bdea00a393a07dd5d614a67dbf687b5ae217454bb1d6b8d7bf1bda35ea0e141e1f75f833719b1c4a368207ea22940cb8268ce7cef36cd2b96653c2aee0915ab2409076dc9ba600a871332e50c8991acc94f1215d1adfc8cd"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x567, 0x7], "092eb5fdc685625adbcfe9c61ed22c32dc274fd31cc62479675140a1"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "851f82e38370cde102d294e520738b63"}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x6c, 0x1, 0x1, 0x0, 0x7, 0x7f}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x80, 0x1, 0x1, 0x0, 0x4}, 0x2, {0x6, 0x0, 0x1, 0x1d, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "8e422d193660e1df85595f172fa2743a246a9f2aed79e0d4d0d749b6750925b0994161"}}}}, 0x1145) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x0) (async) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x1, 0x0, 0x8}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) (async) syz_usb_disconnect(r3) (async) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x14, &(0x7f0000000140)={0x0, 0x23, 0x8f, {0x8f, 0x24, "3ebecbb972e45836909bbaed0d2aa35ac0143b63bd62041fbdde28fc0bb7eea482f1b26fea221dcc8a99af6c847debe0dd23afee9b9392eb6647d853dcb1d5ca88735bdf99d3c9aca052566c8974651e430a32307938e8c527c74d95cf77f1cccf3e64769616204cb2412b814da1869467e29b8406bffc6c6f3833961f0d2582840adde30b32b7fe4ad1d476c7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000280)={0x0, 0x22, 0x8, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x1, 0x0, 0xc, "8c"}, @global=@item_4={0x3, 0x1, 0x9, "fe5f610d"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x6af}}}}, &(0x7f0000001640)={0x18, &(0x7f0000000340)={0x20, 0x9, 0xe, "4b87eaee5f4a219484c787b40378"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x1, 0x34, "0436cf8ffae7f2c0ee4c56261a6a542428af5465af83b8d41bfd5cb776c21961ee16d0ff9a5d414dcc618770236c86a64e3cb32f"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x81}}) (async) write$tun(r2, &(0x7f00000004c0)={@val, @void, @ipv4=@gre={{0x2a, 0x4, 0x0, 0x5, 0x1141, 0x65, 0x0, 0x1, 0x2f, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0xf3, 0x3, 0x8, [{@multicast2, 0x7}, {@multicast2, 0x2}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x3}, {@private=0xa010102, 0x5}, {@broadcast, 0x8}, {@local}]}, @generic={0x83, 0x3, "e5"}, @timestamp_addr={0x44, 0x14, 0xaa, 0x1, 0x2, [{@local, 0x5}, {@rand_addr=0x64010100, 0x8}]}, @cipso={0x86, 0x29, 0x3, [{0x6, 0x2}, {0x0, 0xb, "51c295361689b3d15c"}, {0x6, 0xd, "715568253883b7b4bf36a0"}, {0x7, 0x9, "ab1bb0e8a72032"}]}, @timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x3, [{@loopback, 0x800}, {@private=0xa010101, 0xfff}]}, @noop]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x1, [0x5], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x567, 0x7], "092eb5fdc685625adbcfe9c61ed22c32dc274fd31cc62479675140a1"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "851f82e38370cde102d294e520738b63"}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x6c, 0x1, 0x1, 0x0, 0x7, 0x7f}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x80, 0x1, 0x1, 0x0, 0x4}, 0x2, {0x6, 0x0, 0x1, 0x1d, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "8e422d193660e1df85595f172fa2743a246a9f2aed79e0d4d0d749b6750925b0994161"}}}}, 0x1145) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) (async) 07:38:36 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040068", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 611.046560][T16283] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 611.054757][T16283] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:38:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000813444b88bf9ec104708004000"}, 0x0, 0xffffffffffffffff}}}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="917468514b9a726ef482959a76041c9cf5acd41d8bdcd200000000ef82828dced133891d9778844700006d700b9d53"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x3ff}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) 07:38:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a48053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:36 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804006c", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 611.219946][T16301] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 611.269678][T16301] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x8, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:37 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040074", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a4c053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 611.391872][T16312] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 611.409200][T16316] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 611.429156][T16316] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 611.510519][ T4258] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 611.905386][ T4258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.916444][ T4258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.926701][ T4258] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 611.935952][ T4258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.957038][ T4258] usb 6-1: config 0 descriptor?? [ 612.266032][T16300] UDC core: couldn't find an available UDC or it's busy: -16 [ 612.273428][T16300] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:38:38 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x1, 0x0, 0x8}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) syz_usb_disconnect(r3) (async) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x14, &(0x7f0000000140)={0x0, 0x23, 0x8f, {0x8f, 0x24, "3ebecbb972e45836909bbaed0d2aa35ac0143b63bd62041fbdde28fc0bb7eea482f1b26fea221dcc8a99af6c847debe0dd23afee9b9392eb6647d853dcb1d5ca88735bdf99d3c9aca052566c8974651e430a32307938e8c527c74d95cf77f1cccf3e64769616204cb2412b814da1869467e29b8406bffc6c6f3833961f0d2582840adde30b32b7fe4ad1d476c7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000280)={0x0, 0x22, 0x8, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x1, 0x0, 0xc, "8c"}, @global=@item_4={0x3, 0x1, 0x9, "fe5f610d"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x6af}}}}, &(0x7f0000001640)={0x18, &(0x7f0000000340)={0x20, 0x9, 0xe, "4b87eaee5f4a219484c787b40378"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x1, 0x34, "0436cf8ffae7f2c0ee4c56261a6a542428af5465af83b8d41bfd5cb776c21961ee16d0ff9a5d414dcc618770236c86a64e3cb32f"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x81}}) (async) write$tun(r2, &(0x7f00000004c0)={@val, @void, @ipv4=@gre={{0x2a, 0x4, 0x0, 0x5, 0x1141, 0x65, 0x0, 0x1, 0x2f, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0xf3, 0x3, 0x8, [{@multicast2, 0x7}, {@multicast2, 0x2}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x3}, {@private=0xa010102, 0x5}, {@broadcast, 0x8}, {@local}]}, @generic={0x83, 0x3, "e5"}, @timestamp_addr={0x44, 0x14, 0xaa, 0x1, 0x2, [{@local, 0x5}, {@rand_addr=0x64010100, 0x8}]}, @cipso={0x86, 0x29, 0x3, [{0x6, 0x2}, {0x0, 0xb, "51c295361689b3d15c"}, {0x6, 0xd, "715568253883b7b4bf36a0"}, {0x7, 0x9, "ab1bb0e8a72032"}]}, @timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x3, [{@loopback, 0x800}, {@private=0xa010101, 0xfff}]}, @noop]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x1, [0x5], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x567, 0x7], "092eb5fdc685625adbcfe9c61ed22c32dc274fd31cc62479675140a1"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "851f82e38370cde102d294e520738b63"}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x6c, 0x1, 0x1, 0x0, 0x7, 0x7f}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x80, 0x1, 0x1, 0x0, 0x4}, 0x2, {0x6, 0x0, 0x1, 0x1d, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "8e422d193660e1df85595f172fa2743a246a9f2aed79e0d4d0d749b6750925b0994161"}}}}, 0x1145) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) 07:38:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000813444b88bf9ec104708004000"}, 0x0, 0xffffffffffffffff}}}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="917468514b9a726ef482959a76041c9cf5acd41d8bdcd200000000ef82828dced133891d9778844700006d700b9d53"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x3ff}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000813444b88bf9ec104708004000"}, 0x0, 0xffffffffffffffff}}}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="917468514b9a726ef482959a76041c9cf5acd41d8bdcd200000000ef82828dced133891d9778844700006d700b9d53"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x3ff}}, 0x10) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) 07:38:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x9, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0xe5, ""/229}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:38:38 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804007a", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a60053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 612.709263][T16319] UDC core: couldn't find an available UDC or it's busy: -16 [ 612.727011][T16319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:38:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xa, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0xe5, ""/229}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 612.790811][T16334] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 612.814243][T16334] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 612.825932][ T4258] usbhid 6-1:0.0: can't add hid device: -71 [ 612.831946][ T4258] usbhid: probe of 6-1:0.0 failed with error -71 07:38:38 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400f0", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 612.878042][ T4258] usb 6-1: USB disconnect, device number 120 07:38:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a68053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0xe5, ""/229}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 613.007628][T16352] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 613.014720][T16349] UDC core: couldn't find an available UDC or it's busy: -16 [ 613.045435][T16349] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 613.051223][T16352] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 613.365390][ T4258] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 613.565312][ T4258] usb 6-1: device descriptor read/64, error 18 [ 613.845254][ T4258] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 614.035247][ T4258] usb 6-1: device descriptor read/64, error 18 [ 614.155987][ T4258] usb usb6-port1: attempt power cycle [ 614.565351][ T4258] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 614.755416][ T4258] usb 6-1: device descriptor read/8, error -61 [ 615.035363][ T4258] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 615.205396][ T4258] usb 6-1: device descriptor read/8, error -61 [ 615.325371][ T4258] usb usb6-port1: unable to enumerate USB device 07:38:41 executing program 5: ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'hsr0\x00', {0x2, 0x0, @empty}}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000f4887687000040380709170000010902240001000000000904ffef0103010000092100000001220100090581030000200010000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="0000402863a36624ae21ffecdd98859c605a15eb2d680000005202b95d5bad0508429614f027fe0aa5155e7c15cd34e43d403a365ac9f91f2435"], 0x0, 0x0, 0x0}, 0x0) 07:38:41 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x10, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x9d, 0x33, 0x800, "83ab3e1c79f56476f4e8135c6fc3c00be375a40406e552a89df14cee063c17f817a67e6b0a3efbbe75643c08137715599634b09d4618bf04fa48d4e4364cd2ac949e3d19e589adcd7599dacd45160aac17afdb7420244cabe39658f6d39fada1538485e83d3fbb96747e617322a9bfb724b896ba2bb29720d7a8c032902b2bd11fe74449f23287003abcbe799bc1ddbb6975916a6767243a02ca2c748a"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:38:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a6c053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"000000813444b88bf9ec104708004000"}, 0x0, 0xffffffffffffffff}}}, 0x90) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="917468514b9a726ef482959a76041c9cf5acd41d8bdcd200000000ef82828dced133891d9778844700006d700b9d53"], 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x3ff}}, 0x10) (async, rerun: 32) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (rerun: 32) [ 616.010880][T16364] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 616.024658][T16363] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.033544][T16364] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a74053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x9d, 0x33, 0x800, "83ab3e1c79f56476f4e8135c6fc3c00be375a40406e552a89df14cee063c17f817a67e6b0a3efbbe75643c08137715599634b09d4618bf04fa48d4e4364cd2ac949e3d19e589adcd7599dacd45160aac17afdb7420244cabe39658f6d39fada1538485e83d3fbb96747e617322a9bfb724b896ba2bb29720d7a8c032902b2bd11fe74449f23287003abcbe799bc1ddbb6975916a6767243a02ca2c748a"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 616.056889][T16360] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 616.066276][T16358] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:38:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x11, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:41 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x9d, 0x33, 0x800, "83ab3e1c79f56476f4e8135c6fc3c00be375a40406e552a89df14cee063c17f817a67e6b0a3efbbe75643c08137715599634b09d4618bf04fa48d4e4364cd2ac949e3d19e589adcd7599dacd45160aac17afdb7420244cabe39658f6d39fada1538485e83d3fbb96747e617322a9bfb724b896ba2bb29720d7a8c032902b2bd11fe74449f23287003abcbe799bc1ddbb6975916a6767243a02ca2c748a"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x9d, 0x33, 0x800, "83ab3e1c79f56476f4e8135c6fc3c00be375a40406e552a89df14cee063c17f817a67e6b0a3efbbe75643c08137715599634b09d4618bf04fa48d4e4364cd2ac949e3d19e589adcd7599dacd45160aac17afdb7420244cabe39658f6d39fada1538485e83d3fbb96747e617322a9bfb724b896ba2bb29720d7a8c032902b2bd11fe74449f23287003abcbe799bc1ddbb6975916a6767243a02ca2c748a"}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) [ 616.148998][T16373] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 616.167622][T16375] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.186872][T16373] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6b, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 616.240466][T16379] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.262902][T16379] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.265431][T16381] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 616.475303][ T4258] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 616.665260][ T4258] usb 6-1: device descriptor read/64, error 18 [ 616.935348][ T4258] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 617.125245][ T4258] usb 6-1: device descriptor read/64, error 18 [ 617.245974][ T4258] usb usb6-port1: attempt power cycle [ 617.655261][ T4258] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 617.755627][ T4258] usb 6-1: Invalid ep0 maxpacket: 118 [ 617.915693][ T4258] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 618.015550][ T4258] usb 6-1: Invalid ep0 maxpacket: 118 [ 618.021198][ T4258] usb usb6-port1: unable to enumerate USB device 07:38:44 executing program 5: ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'hsr0\x00', {0x2, 0x0, @empty}}) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000f4887687000040380709170000010902240001000000000904ffef0103010000092100000001220100090581030000200010000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="0000402863a36624ae21ffecdd98859c605a15eb2d680000005202b95d5bad0508429614f027fe0aa5155e7c15cd34e43d403a365ac9f91f2435"], 0x0, 0x0, 0x0}, 0x0) (rerun: 64) 07:38:44 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a7a053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x10, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:38:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x117, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000240), 0x381400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r5, 0x4}}, 0x10) 07:38:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x135, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 619.091931][T16394] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000240), 0x381400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r5, 0x4}}, 0x10) [ 619.135351][T16394] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 619.147618][T16393] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:38:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000240), 0x381400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r5, 0x4}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) openat$dlm_monitor(0xffffff9c, &(0x7f0000000240), 0x381400, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r5, 0x4}}, 0x10) (async) 07:38:44 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040008", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xa800, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00353582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 619.357393][T16418] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 619.389938][T16418] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 619.575332][T15010] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 619.775268][T15010] usb 6-1: device descriptor read/64, error 18 [ 620.065473][T15010] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 620.255250][T15010] usb 6-1: device descriptor read/64, error 18 [ 620.376140][T15010] usb usb6-port1: attempt power cycle [ 620.795467][T15010] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 620.905460][T15010] usb 6-1: Invalid ep0 maxpacket: 118 [ 621.056147][T15010] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 621.145388][T15010] usb 6-1: Invalid ep0 maxpacket: 118 [ 621.151111][T15010] usb usb6-port1: unable to enumerate USB device 07:38:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xd000, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:47 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x10, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:38:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7, @mcast2, 0x80000000}, {0xa, 0x4e21, 0xd22c, @private2, 0x4}, r1, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) 07:38:47 executing program 5: ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'hsr0\x00', {0x2, 0x0, @empty}}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000f4887687000040380709170000010902240001000000000904ffef0103010000092100000001220100090581030000200010000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="0000402863a36624ae21ffecdd98859c605a15eb2d680000005202b95d5bad0508429614f027fe0aa5155e7c15cd34e43d403a365ac9f91f2435"], 0x0, 0x0, 0x0}, 0x0) 07:38:47 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00403582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7, @mcast2, 0x80000000}, {0xa, 0x4e21, 0xd22c, @private2, 0x4}, r1, 0x400}}, 0x48) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) [ 622.190358][T16425] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 622.214963][T16425] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x10, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x10, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) 07:38:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x3}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 622.252657][T16431] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:38:48 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040006", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:48 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00353582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7, @mcast2, 0x80000000}, {0xa, 0x4e21, 0xd22c, @private2, 0x4}, r1, 0x400}}, 0x48) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) [ 622.364167][T16441] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 07:38:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x3c}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 622.411521][T16444] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 622.441886][T16444] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 622.665242][T15010] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 622.875478][T15010] usb 6-1: device descriptor read/64, error 18 [ 623.145313][T15010] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 623.345424][T15010] usb 6-1: device descriptor read/64, error 18 [ 623.465903][T15010] usb usb6-port1: attempt power cycle [ 623.905480][T15010] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 623.998167][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.004492][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.012788][T15010] usb 6-1: Invalid ep0 maxpacket: 118 [ 624.165314][T15010] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 624.265431][T15010] usb 6-1: Invalid ep0 maxpacket: 118 [ 624.271249][T15010] usb usb6-port1: unable to enumerate USB device 07:38:50 executing program 5: r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x44f, 0xb65d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) 07:38:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64=r1], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000005c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000100), 0x800, 0x0) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000140)={0x3, 0x400, 0x6, 0x400}, 0x10) r6 = openat2(r5, &(0x7f0000000240)='./file0\x00', &(0x7f0000000500)={0x8a40, 0x10}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000540)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xfffffff7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f}, {0xa, 0x4e24, 0x10000, @mcast2, 0xb16}, r4, 0x3f}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) 07:38:50 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050282c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x6b}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x4803) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:38:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x4803) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x4803) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) [ 625.290155][T16463] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 625.298542][T16466] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 625.323945][T16466] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64=r1], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000005c0)) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000100), 0x800, 0x0) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000140)={0x3, 0x400, 0x6, 0x400}, 0x10) (async) r6 = openat2(r5, &(0x7f0000000240)='./file0\x00', &(0x7f0000000500)={0x8a40, 0x10}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000540)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xfffffff7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f}, {0xa, 0x4e24, 0x10000, @mcast2, 0xb16}, r4, 0x3f}}, 0x48) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) 07:38:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050382c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4, 0xc0}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 625.346832][T16458] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:38:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x4803) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 07:38:51 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 625.477639][T16480] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 625.511650][T16480] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 625.526966][T16484] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:38:51 executing program 5: r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x44f, 0xb65d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x44f, 0xb65d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) (async) 07:38:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64=r1], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000005c0)) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000100), 0x800, 0x0) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000140)={0x3, 0x400, 0x6, 0x400}, 0x10) r6 = openat2(r5, &(0x7f0000000240)='./file0\x00', &(0x7f0000000500)={0x8a40, 0x10}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000540)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xfffffff7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f}, {0xa, 0x4e24, 0x10000, @mcast2, 0xb16}, r4, 0x3f}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64=r1], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000005c0)) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) openat$pfkey(0xffffff9c, &(0x7f0000000100), 0x800, 0x0) (async) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000140)={0x3, 0x400, 0x6, 0x400}, 0x10) (async) openat2(r5, &(0x7f0000000240)='./file0\x00', &(0x7f0000000500)={0x8a40, 0x10}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000540)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xfffffff7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f}, {0xa, 0x4e24, 0x10000, @mcast2, 0xb16}, r4, 0x3f}}, 0x48) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) (async) 07:38:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4, 0x117}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050482c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:51 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4, 0x135}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 625.888023][T16489] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:51 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040094", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 625.932953][T16489] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 625.989411][T16502] netlink: 'syz-executor.4': attribute type 309 has an invalid length. 07:38:51 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x3, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 626.105638][T16506] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050682c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:51 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 626.217662][T16511] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:52 executing program 5: r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x44f, 0xb65d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) 07:38:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000005c0)={0x8, 0x120, 0xfa00, {0x2, {0x7fffffff, 0x3, "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", 0x28, 0x95, 0x1, 0x7f, 0x8, 0x4, 0x3, 0x1}, r5}}, 0x128) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) vmsplice(r0, &(0x7f0000000800)=[{&(0x7f0000000700)="aa1e0ec211ae647c3ece0405df2731ecf663fd2ac2ac2ef9cab66328a8247d6e9305afbcfc48f01dfeaac315952aa44e1c314aa55672c88262a536", 0x3b}, {&(0x7f0000000740)="ba41af8f86730f346b7d4a20601249e88487f8592af9f06498c271a5bf3839d04d290f77d08ad52b99385618508814e655c5fa447f524b", 0x37}, {&(0x7f0000000780)="0d129aeb4495b37e1a5185abac049d8d3cae246a4e7cfd84c8371a131fcae74c49a67b367c841f25031cf3a47c0399f704a33cc076958d41a75a7192b4ae46199b849a64a5716e55dc", 0x49}], 0x3, 0x8) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r7}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000840)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x752}}, 0x10) write$binfmt_script(r2, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd2889fc7468514b9a00000000959a76041c9cf5acd41d8bdcd213a01d0400000000000000891d9778844700006d700b9d3420967bec4f0839d82ec6d87078755096f1ec901b67786391cdae908f6b72c4684955ebdd33a0309c42c9097c30e0aca66675f7fe"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1, @mcast1, 0x3}, {0xa, 0x4e24, 0x10001, @mcast2, 0x36c3}, r8, 0xfffff801}}, 0x48) 07:38:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x3b, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050782c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:52 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000005c0)={0x8, 0x120, 0xfa00, {0x2, {0x7fffffff, 0x3, "f3d213821a62e66f472b570752f823139435a3858f0b73d15881757102e194f12a559c0d4a41929a8894705cfe30ab002ccf13ed1f4d103da0c1aee6a130001120cd3fbbd36770f0cc616f811dbbdc76ccf5ec7f41862c6d7dfd67969f603237fb90043186728bf8fc13853ec78741bb8012ed680d25eb8978c8db55ce60b2bd4b602729cec80f2ee86e16d430696c6e4bfcaf34c18fcc19fc7732e4364d798b0c6ca1962143bc669c6d4951c5c32b4e1425b3be4c53322b8b74bfa8164b0e9af2ecf20cba18f5e2f7685312536908fa04ef034a1314712bc676d8d0484623af7e3b9ca4e08ed7924c2bb44b6941e4cc1560782606e62f75a75b20e4e5a76f65", 0x28, 0x95, 0x1, 0x7f, 0x8, 0x4, 0x3, 0x1}, r5}}, 0x128) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) vmsplice(r0, &(0x7f0000000800)=[{&(0x7f0000000700)="aa1e0ec211ae647c3ece0405df2731ecf663fd2ac2ac2ef9cab66328a8247d6e9305afbcfc48f01dfeaac315952aa44e1c314aa55672c88262a536", 0x3b}, {&(0x7f0000000740)="ba41af8f86730f346b7d4a20601249e88487f8592af9f06498c271a5bf3839d04d290f77d08ad52b99385618508814e655c5fa447f524b", 0x37}, {&(0x7f0000000780)="0d129aeb4495b37e1a5185abac049d8d3cae246a4e7cfd84c8371a131fcae74c49a67b367c841f25031cf3a47c0399f704a33cc076958d41a75a7192b4ae46199b849a64a5716e55dc", 0x49}], 0x3, 0x8) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r7}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000840)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x752}}, 0x10) write$binfmt_script(r2, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd2889fc7468514b9a00000000959a76041c9cf5acd41d8bdcd213a01d0400000000000000891d9778844700006d700b9d3420967bec4f0839d82ec6d87078755096f1ec901b67786391cdae908f6b72c4684955ebdd33a0309c42c9097c30e0aca66675f7fe"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1, @mcast1, 0x3}, {0xa, 0x4e24, 0x10001, @mcast2, 0x36c3}, r8, 0xfffff801}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000005c0)={0x8, 0x120, 0xfa00, {0x2, {0x7fffffff, 0x3, "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", 0x28, 0x95, 0x1, 0x7f, 0x8, 0x4, 0x3, 0x1}, r5}}, 0x128) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) (async) vmsplice(r0, &(0x7f0000000800)=[{&(0x7f0000000700)="aa1e0ec211ae647c3ece0405df2731ecf663fd2ac2ac2ef9cab66328a8247d6e9305afbcfc48f01dfeaac315952aa44e1c314aa55672c88262a536", 0x3b}, {&(0x7f0000000740)="ba41af8f86730f346b7d4a20601249e88487f8592af9f06498c271a5bf3839d04d290f77d08ad52b99385618508814e655c5fa447f524b", 0x37}, {&(0x7f0000000780)="0d129aeb4495b37e1a5185abac049d8d3cae246a4e7cfd84c8371a131fcae74c49a67b367c841f25031cf3a47c0399f704a33cc076958d41a75a7192b4ae46199b849a64a5716e55dc", 0x49}], 0x3, 0x8) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000840)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x752}}, 0x10) (async) write$binfmt_script(r2, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd2889fc7468514b9a00000000959a76041c9cf5acd41d8bdcd213a01d0400000000000000891d9778844700006d700b9d3420967bec4f0839d82ec6d87078755096f1ec901b67786391cdae908f6b72c4684955ebdd33a0309c42c9097c30e0aca66675f7fe"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x106, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1, @mcast1, 0x3}, {0xa, 0x4e24, 0x10001, @mcast2, 0x36c3}, r8, 0xfffff801}}, 0x48) (async) [ 626.527730][T16520] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x6b, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050882c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:52 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 626.648696][T16526] netlink: 'syz-executor.4': attribute type 107 has an invalid length. 07:38:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x117, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 626.730774][T16535] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050982c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) (async, rerun: 32) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000005c0)={0x8, 0x120, 0xfa00, {0x2, {0x7fffffff, 0x3, "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", 0x28, 0x95, 0x1, 0x7f, 0x8, 0x4, 0x3, 0x1}, r5}}, 0x128) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) vmsplice(r0, &(0x7f0000000800)=[{&(0x7f0000000700)="aa1e0ec211ae647c3ece0405df2731ecf663fd2ac2ac2ef9cab66328a8247d6e9305afbcfc48f01dfeaac315952aa44e1c314aa55672c88262a536", 0x3b}, {&(0x7f0000000740)="ba41af8f86730f346b7d4a20601249e88487f8592af9f06498c271a5bf3839d04d290f77d08ad52b99385618508814e655c5fa447f524b", 0x37}, {&(0x7f0000000780)="0d129aeb4495b37e1a5185abac049d8d3cae246a4e7cfd84c8371a131fcae74c49a67b367c841f25031cf3a47c0399f704a33cc076958d41a75a7192b4ae46199b849a64a5716e55dc", 0x49}], 0x3, 0x8) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r7}}, 0x18) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000840)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x752}}, 0x10) (rerun: 64) write$binfmt_script(r2, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd2889fc7468514b9a00000000959a76041c9cf5acd41d8bdcd213a01d0400000000000000891d9778844700006d700b9d3420967bec4f0839d82ec6d87078755096f1ec901b67786391cdae908f6b72c4684955ebdd33a0309c42c9097c30e0aca66675f7fe"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1, @mcast1, 0x3}, {0xa, 0x4e24, 0x10001, @mcast2, 0x36c3}, r8, 0xfffff801}}, 0x48) [ 626.877845][T16541] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:52 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x14, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0xa2, {0xa2, 0xe, "7bf2d6f802aa1c082ee2c5ab9a188d554f85f04d3d7cae4be77f093f19702073aebdcb46e2ff3a6f5bbec22a9b52ec7bd371b0f1932eb7facd9eaaf9db2e183c8893551749ba2fac9d56282c8bbc11bb06dbd804f24982a943478f5f59a0b98f61de95e8806bae953bf3f41f23829d3701c5c3ee211195120ac2aab5a892f3eee22030e9929584fbc6a92180eb86d3902323bf90fcb892c026aaeab0581e447a"}}, &(0x7f0000000180)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "07b8e99181943abc5186ff0063c1aa1ef827dbe8318caa57f71f80a394bd957245634b4a4a51b3df6a8134d8760d3e215a8d5dba4854b5d9c5bd16d5f6"}}, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "a7812145"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0xb5c}}}}, &(0x7f0000000400)={0x18, &(0x7f0000000280)={0x0, 0xc, 0x79, "fcf969120f769d80b7ae940768a83390d52973c72ce6cb40f481e51a7779f032d95e6dcad5d8369a0728eac3c06e46e3706eead88be7730af41dcecacc39073a28fa7ac4f8b6c19ef0096c60cd91c2f27ef690a4eae009ddac5df47514436b8cffb6549c9db182f8080fadaee01b57c268a64c5800b2a186a7"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2e}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x1, 0x4, "d81a0fb6"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x7}}) 07:38:52 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x135, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050a82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in6={0xa, 0x4e24, 0x8, @empty, 0xffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) 07:38:52 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 627.116461][T16549] netlink: 'syz-executor.4': attribute type 309 has an invalid length. 07:38:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050b82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in6={0xa, 0x4e24, 0x8, @empty, 0xffffffff}}}, 0x90) (async, rerun: 64) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (rerun: 64) 07:38:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 627.263589][T16557] __nla_validate_parse: 14 callbacks suppressed [ 627.263611][T16557] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:38:53 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in6={0xa, 0x4e24, 0x8, @empty, 0xffffffff}}}, 0x90) (async, rerun: 64) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (rerun: 64) [ 627.304125][T16562] nla_validate_range_unsigned: 1 callbacks suppressed [ 627.304153][T16562] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:53 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 627.365377][T16562] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 627.385368][T15010] usb 6-1: new high-speed USB device number 11 using dummy_hcd 07:38:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{0x2}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 627.493067][T16570] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 627.825389][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.845196][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.855097][T15010] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 627.864499][T15010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.882575][T15010] usb 6-1: config 0 descriptor?? [ 628.635285][T15010] usbhid 6-1:0.0: can't add hid device: -71 [ 628.641301][T15010] usbhid: probe of 6-1:0.0 failed with error -71 [ 628.666707][T15010] usb 6-1: USB disconnect, device number 11 07:38:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x14, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0xa2, {0xa2, 0xe, "7bf2d6f802aa1c082ee2c5ab9a188d554f85f04d3d7cae4be77f093f19702073aebdcb46e2ff3a6f5bbec22a9b52ec7bd371b0f1932eb7facd9eaaf9db2e183c8893551749ba2fac9d56282c8bbc11bb06dbd804f24982a943478f5f59a0b98f61de95e8806bae953bf3f41f23829d3701c5c3ee211195120ac2aab5a892f3eee22030e9929584fbc6a92180eb86d3902323bf90fcb892c026aaeab0581e447a"}}, &(0x7f0000000180)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "07b8e99181943abc5186ff0063c1aa1ef827dbe8318caa57f71f80a394bd957245634b4a4a51b3df6a8134d8760d3e215a8d5dba4854b5d9c5bd16d5f6"}}, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "a7812145"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0xb5c}}}}, &(0x7f0000000400)={0x18, &(0x7f0000000280)={0x0, 0xc, 0x79, "fcf969120f769d80b7ae940768a83390d52973c72ce6cb40f481e51a7779f032d95e6dcad5d8369a0728eac3c06e46e3706eead88be7730af41dcecacc39073a28fa7ac4f8b6c19ef0096c60cd91c2f27ef690a4eae009ddac5df47514436b8cffb6549c9db182f8080fadaee01b57c268a64c5800b2a186a7"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2e}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x1, 0x4, "d81a0fb6"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x7}}) (rerun: 32) 07:38:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) 07:38:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050c82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:54 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{0x3}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) [ 629.156377][T16576] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 629.191456][T16576] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050d82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:54 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{0x0, 0x2}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r1, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) [ 629.347389][T16594] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 629.382180][T16594] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 629.404904][T16596] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:38:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{0x0, 0x3}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 629.445571][ T20] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 629.835449][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.852273][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.871147][ T20] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 629.881581][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.913653][ T20] usb 6-1: config 0 descriptor?? [ 630.877810][ T20] saitek 0003:0738:1709.0040: unknown main item tag 0x0 [ 630.911486][ T20] saitek 0003:0738:1709.0040: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 07:38:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x14, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0xa2, {0xa2, 0xe, "7bf2d6f802aa1c082ee2c5ab9a188d554f85f04d3d7cae4be77f093f19702073aebdcb46e2ff3a6f5bbec22a9b52ec7bd371b0f1932eb7facd9eaaf9db2e183c8893551749ba2fac9d56282c8bbc11bb06dbd804f24982a943478f5f59a0b98f61de95e8806bae953bf3f41f23829d3701c5c3ee211195120ac2aab5a892f3eee22030e9929584fbc6a92180eb86d3902323bf90fcb892c026aaeab0581e447a"}}, &(0x7f0000000180)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "07b8e99181943abc5186ff0063c1aa1ef827dbe8318caa57f71f80a394bd957245634b4a4a51b3df6a8134d8760d3e215a8d5dba4854b5d9c5bd16d5f6"}}, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "a7812145"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0xb5c}}}}, &(0x7f0000000400)={0x18, &(0x7f0000000280)={0x0, 0xc, 0x79, "fcf969120f769d80b7ae940768a83390d52973c72ce6cb40f481e51a7779f032d95e6dcad5d8369a0728eac3c06e46e3706eead88be7730af41dcecacc39073a28fa7ac4f8b6c19ef0096c60cd91c2f27ef690a4eae009ddac5df47514436b8cffb6549c9db182f8080fadaee01b57c268a64c5800b2a186a7"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2e}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x1, 0x4, "d81a0fb6"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x7}}) 07:38:57 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050e82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b92726ef482859a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700ef0600009d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) [ 632.191469][ T4258] usb 6-1: USB disconnect, device number 12 07:38:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 632.277230][T16608] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 632.281978][T16612] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 632.305691][T16612] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:58 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040012", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:38:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00050f82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:38:58 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 632.488652][T16622] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:38:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:38:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b92726ef482859a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700ef0600009d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) (async, rerun: 64) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) (rerun: 64) [ 632.533056][T16622] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:38:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051082c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 632.598227][T16625] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 632.692809][T16628] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 632.705219][ T4258] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 632.725505][T16628] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 633.125367][ T4258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.136338][ T4258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.147977][ T4258] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 633.157397][ T4258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.171290][ T4258] usb 6-1: config 0 descriptor?? [ 633.915413][ T4258] usbhid 6-1:0.0: can't add hid device: -71 [ 633.921608][ T4258] usbhid: probe of 6-1:0.0 failed with error -71 [ 633.965791][ T4258] usb 6-1: USB disconnect, device number 13 07:39:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x14, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64=r1], 0x0, 0x0, 0x0}, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x121000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", ""]}, 0x14}}, 0x40000) 07:39:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:00 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051182c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:00 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b92726ef482859a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700ef0600009d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) 07:39:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 634.388326][T16640] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 634.405996][T16637] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 634.424078][T16640] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:00 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:00 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r4, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in={0x2, 0x4e21, @remote}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7d50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, {0xa, 0x4e22, 0x100, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7}, r5, 0x7f}}, 0x48) 07:39:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051282c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:00 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 634.597612][T16650] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 634.627052][T16653] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 634.667335][T16653] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 634.722587][T15010] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 634.738571][T16659] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 635.165445][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.176483][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.187234][T15010] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 635.196463][T15010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.206624][T15010] usb 6-1: config 0 descriptor?? [ 635.925463][T15010] usbhid 6-1:0.0: can't add hid device: -71 [ 635.931607][T15010] usbhid: probe of 6-1:0.0 failed with error -71 [ 635.948792][T15010] usb 6-1: USB disconnect, device number 14 07:39:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x14, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64=r1], 0x0, 0x0, 0x0}, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x121000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", ""]}, 0x14}}, 0x40000) 07:39:02 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r4, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in={0x2, 0x4e21, @remote}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7d50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, {0xa, 0x4e22, 0x100, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7}, r5, 0x7f}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r4, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in={0x2, 0x4e21, @remote}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7d50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, {0xa, 0x4e22, 0x100, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7}, r5, 0x7f}}, 0x48) (async) 07:39:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051382c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:02 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400ff", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 636.458528][T16668] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:39:02 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400ff", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051482c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:02 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 636.654671][T16678] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:39:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x2}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 636.715336][ T3676] usb 6-1: new high-speed USB device number 15 using dummy_hcd 07:39:02 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 636.805070][T16687] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 637.105497][ T3676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.125826][ T3676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.145802][ T3676] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 637.155053][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.182277][ T3676] usb 6-1: config 0 descriptor?? [ 637.755298][ T3676] usbhid 6-1:0.0: can't add hid device: -32 [ 637.761384][ T3676] usbhid: probe of 6-1:0.0 failed with error -32 07:39:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x14, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES64=r1], 0x0, 0x0, 0x0}, 0x0) (async) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x121000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", ""]}, 0x14}}, 0x40000) 07:39:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x3}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051682c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:05 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r4, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in={0x2, 0x4e21, @remote}}}, 0x90) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7d50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, {0xa, 0x4e22, 0x100, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x7}, r5, 0x7f}}, 0x48) [ 639.471257][T15010] usb 6-1: USB disconnect, device number 15 [ 639.527646][T16698] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 639.565295][T16698] __nla_validate_parse: 5 callbacks suppressed 07:39:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x4}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) [ 639.565313][T16698] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:05 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051782c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x5}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 639.733008][T16717] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 639.737145][T16715] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:39:05 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 639.773509][T16715] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3}}, 0x10) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) (async) [ 639.926193][T16725] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 639.975266][T15010] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 640.396358][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.415332][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.436595][T15010] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 640.455364][T15010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.483165][T15010] usb 6-1: config 0 descriptor?? [ 641.045339][T15010] usbhid 6-1:0.0: can't add hid device: -71 [ 641.052691][T15010] usbhid: probe of 6-1:0.0 failed with error -71 [ 641.067940][T15010] usb 6-1: USB disconnect, device number 16 07:39:07 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x3, 0x6d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x20, 0x30, 0x81, [{{0x9, 0x4, 0x0, 0xbf, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, 'L4'}, {0x5, 0x24, 0x0, 0xfc01}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xd6, 0xfe4, 0xf7}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0xf2, 0x9, 0x81}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x1, 0x1631}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x52, 0x7f, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x20, 0x1f, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x9, 0x4, 0x5, 0x8, 0xf9}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8, 0x7f, 0x6}]}, 0x2, [{0x28, &(0x7f0000000180)=@string={0x28, 0x3, "400f1796a6c39b0be3ead6985a1d85afaad01eccd63be3458355c3d19d1e4349f5e4847876d7"}}, {0xb5, &(0x7f00000001c0)=@string={0xb5, 0x3, "3501befb62d2fa1a44dc4adf8ca6b76a22d802a8f564449c205cb6c4e762db1653c53ea1407c561f28d45bb0eb82eab6b93a5c4bcb792045b2be19b53508f36f471f208768cf274b81e96ffef9ee394c76137f920bb1025a8d1562a2fbc22f95bf6979c7b0b161c04d7c1aa0c2d583741b459f7a42fd0ce10aec743a1e6e5980585a90c02756d8b3ddaba6dba94b43a03f475288d376a33f0618a8a3cd7d695c157634ed6d8292f4311ca762fd5464b3b1f6f8"}}]}) syz_usb_control_io(r1, &(0x7f0000000600)={0x18, &(0x7f00000002c0)={0x40, 0x9, 0xed, {0xed, 0x27, "2e22d6523ca4719383716b9dd7a2cdb5851a49d2a625c1e5af8bb3407402ae768f5bc5e438e43a56bace8a3a3392f2ce71e47d7e9a430166dda4607ae20006beda43ed7a29d146afe350957ed384c4d9b11d1cda0453da11601efa5191fd654aa66c831b60a844bce6ecf9c195e63b907e42510d699d07a569c714ee7591e5d877afbeb50505c3396d6720f68c67af45230ebca98113ff61498854e2f865bc5289cd2606812f86fa33b0f9a1c6a67ff1e0dd81551b7d92c94fe9e81c2b7e03bf5066998b8e23147a9094956f7ccd3eace5e5b0028d3d3c9dc29c05528fd0ce437f9d3481bd7b8581a6307b"}}, &(0x7f00000004c0)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "d74dd1e0f527ace38b398977ad360637319847d572d274d8ce3bcc97b78636cf0bfcafb1d5877afa33f8d7d36993ec80d6a0cc24a4d71508db2525ad2369cfa82723745836074e6867b63e5ba22eb9ecc677f0e3293fbbb918392ee764752c0ca771896d2ead49c7c880cec08766261fd15e0cec081d5e1a2077b4a0152d0948357d04dd38e658ef8c04b8d0fc792cbee64113ef2bace7fd89ed408ac6aacfa49eacb07cb067d7bd53b1446bd5180d67b045e7bf51767844fe6ae40ba7dfc897"}}, &(0x7f00000003c0)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x80, 0xbb, 0x22bc}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x99, 0x7, 0x80}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0x5, 0xf00f, 0xad, [0xc000, 0x3f00, 0x0, 0xc000, 0xf, 0xc0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x8, 0x1, 0x8}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0xe5, 0x4f, "fa613cc2", "bd173fec"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x4, 0x55, 0x9, 0x1, 0x3ff}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000640)={0x40, 0x12, 0x4, "f8f40dec"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xc9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x160, 0x20}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000800)={0x40, 0xb, 0x2, 'K3'}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000880)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000008c0)={0x40, 0x17, 0x6}, &(0x7f0000000900)={0x40, 0x19, 0x2, "e2bd"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x95}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x1}}) 07:39:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051882c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x6}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:07 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:07 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3}}, 0x10) (async, rerun: 32) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) (rerun: 32) [ 641.557266][T16734] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 641.595019][T16734] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:07 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x7}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051982c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x8}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:07 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0x92200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x880, 0x10a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r4, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2e, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x3, @loopback, 0x10001}}}, 0x90) [ 641.753691][T16750] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:07 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 641.855360][ T20] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 641.877554][T16754] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:39:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x9}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 641.902269][T16754] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 641.940081][T16760] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 642.255356][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.272271][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.284796][ T20] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 642.299233][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.333365][ T20] usb 6-1: config 0 descriptor?? [ 642.827106][ T20] saitek 0003:0738:1709.0041: unknown main item tag 0x0 [ 642.851958][ T20] saitek 0003:0738:1709.0041: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 [ 643.044524][T16743] UDC core: couldn't find an available UDC or it's busy: -16 [ 643.052038][T16743] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 643.064191][ T20] usb 6-1: USB disconnect, device number 17 07:39:09 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x3, 0x6d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x20, 0x30, 0x81, [{{0x9, 0x4, 0x0, 0xbf, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, 'L4'}, {0x5, 0x24, 0x0, 0xfc01}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xd6, 0xfe4, 0xf7}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0xf2, 0x9, 0x81}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x1, 0x1631}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x52, 0x7f, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x20, 0x1f, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x9, 0x4, 0x5, 0x8, 0xf9}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8, 0x7f, 0x6}]}, 0x2, [{0x28, &(0x7f0000000180)=@string={0x28, 0x3, "400f1796a6c39b0be3ead6985a1d85afaad01eccd63be3458355c3d19d1e4349f5e4847876d7"}}, {0xb5, &(0x7f00000001c0)=@string={0xb5, 0x3, "3501befb62d2fa1a44dc4adf8ca6b76a22d802a8f564449c205cb6c4e762db1653c53ea1407c561f28d45bb0eb82eab6b93a5c4bcb792045b2be19b53508f36f471f208768cf274b81e96ffef9ee394c76137f920bb1025a8d1562a2fbc22f95bf6979c7b0b161c04d7c1aa0c2d583741b459f7a42fd0ce10aec743a1e6e5980585a90c02756d8b3ddaba6dba94b43a03f475288d376a33f0618a8a3cd7d695c157634ed6d8292f4311ca762fd5464b3b1f6f8"}}]}) syz_usb_control_io(r1, &(0x7f0000000600)={0x18, &(0x7f00000002c0)={0x40, 0x9, 0xed, {0xed, 0x27, "2e22d6523ca4719383716b9dd7a2cdb5851a49d2a625c1e5af8bb3407402ae768f5bc5e438e43a56bace8a3a3392f2ce71e47d7e9a430166dda4607ae20006beda43ed7a29d146afe350957ed384c4d9b11d1cda0453da11601efa5191fd654aa66c831b60a844bce6ecf9c195e63b907e42510d699d07a569c714ee7591e5d877afbeb50505c3396d6720f68c67af45230ebca98113ff61498854e2f865bc5289cd2606812f86fa33b0f9a1c6a67ff1e0dd81551b7d92c94fe9e81c2b7e03bf5066998b8e23147a9094956f7ccd3eace5e5b0028d3d3c9dc29c05528fd0ce437f9d3481bd7b8581a6307b"}}, &(0x7f00000004c0)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "d74dd1e0f527ace38b398977ad360637319847d572d274d8ce3bcc97b78636cf0bfcafb1d5877afa33f8d7d36993ec80d6a0cc24a4d71508db2525ad2369cfa82723745836074e6867b63e5ba22eb9ecc677f0e3293fbbb918392ee764752c0ca771896d2ead49c7c880cec08766261fd15e0cec081d5e1a2077b4a0152d0948357d04dd38e658ef8c04b8d0fc792cbee64113ef2bace7fd89ed408ac6aacfa49eacb07cb067d7bd53b1446bd5180d67b045e7bf51767844fe6ae40ba7dfc897"}}, &(0x7f00000003c0)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x80, 0xbb, 0x22bc}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x99, 0x7, 0x80}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0x5, 0xf00f, 0xad, [0xc000, 0x3f00, 0x0, 0xc000, 0xf, 0xc0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x8, 0x1, 0x8}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0xe5, 0x4f, "fa613cc2", "bd173fec"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x4, 0x55, 0x9, 0x1, 0x3ff}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000640)={0x40, 0x12, 0x4, "f8f40dec"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xc9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x160, 0x20}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000800)={0x40, 0xb, 0x2, 'K3'}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000880)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000008c0)={0x40, 0x17, 0x6}, &(0x7f0000000900)={0x40, 0x19, 0x2, "e2bd"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x95}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x1}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect$cdc_ecm(0x3, 0x6d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x20, 0x30, 0x81, [{{0x9, 0x4, 0x0, 0xbf, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, 'L4'}, {0x5, 0x24, 0x0, 0xfc01}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xd6, 0xfe4, 0xf7}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0xf2, 0x9, 0x81}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x1, 0x1631}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x52, 0x7f, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x20, 0x1f, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x9, 0x4, 0x5, 0x8, 0xf9}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8, 0x7f, 0x6}]}, 0x2, [{0x28, &(0x7f0000000180)=@string={0x28, 0x3, "400f1796a6c39b0be3ead6985a1d85afaad01eccd63be3458355c3d19d1e4349f5e4847876d7"}}, {0xb5, &(0x7f00000001c0)=@string={0xb5, 0x3, "3501befb62d2fa1a44dc4adf8ca6b76a22d802a8f564449c205cb6c4e762db1653c53ea1407c561f28d45bb0eb82eab6b93a5c4bcb792045b2be19b53508f36f471f208768cf274b81e96ffef9ee394c76137f920bb1025a8d1562a2fbc22f95bf6979c7b0b161c04d7c1aa0c2d583741b459f7a42fd0ce10aec743a1e6e5980585a90c02756d8b3ddaba6dba94b43a03f475288d376a33f0618a8a3cd7d695c157634ed6d8292f4311ca762fd5464b3b1f6f8"}}]}) (async) syz_usb_control_io(r1, &(0x7f0000000600)={0x18, &(0x7f00000002c0)={0x40, 0x9, 0xed, {0xed, 0x27, "2e22d6523ca4719383716b9dd7a2cdb5851a49d2a625c1e5af8bb3407402ae768f5bc5e438e43a56bace8a3a3392f2ce71e47d7e9a430166dda4607ae20006beda43ed7a29d146afe350957ed384c4d9b11d1cda0453da11601efa5191fd654aa66c831b60a844bce6ecf9c195e63b907e42510d699d07a569c714ee7591e5d877afbeb50505c3396d6720f68c67af45230ebca98113ff61498854e2f865bc5289cd2606812f86fa33b0f9a1c6a67ff1e0dd81551b7d92c94fe9e81c2b7e03bf5066998b8e23147a9094956f7ccd3eace5e5b0028d3d3c9dc29c05528fd0ce437f9d3481bd7b8581a6307b"}}, &(0x7f00000004c0)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "d74dd1e0f527ace38b398977ad360637319847d572d274d8ce3bcc97b78636cf0bfcafb1d5877afa33f8d7d36993ec80d6a0cc24a4d71508db2525ad2369cfa82723745836074e6867b63e5ba22eb9ecc677f0e3293fbbb918392ee764752c0ca771896d2ead49c7c880cec08766261fd15e0cec081d5e1a2077b4a0152d0948357d04dd38e658ef8c04b8d0fc792cbee64113ef2bace7fd89ed408ac6aacfa49eacb07cb067d7bd53b1446bd5180d67b045e7bf51767844fe6ae40ba7dfc897"}}, &(0x7f00000003c0)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x80, 0xbb, 0x22bc}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x99, 0x7, 0x80}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0x5, 0xf00f, 0xad, [0xc000, 0x3f00, 0x0, 0xc000, 0xf, 0xc0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x8, 0x1, 0x8}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0xe5, 0x4f, "fa613cc2", "bd173fec"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x4, 0x55, 0x9, 0x1, 0x3ff}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000640)={0x40, 0x12, 0x4, "f8f40dec"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xc9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x160, 0x20}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000800)={0x40, 0xb, 0x2, 'K3'}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000880)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000008c0)={0x40, 0x17, 0x6}, &(0x7f0000000900)={0x40, 0x19, 0x2, "e2bd"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x95}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x1}}) (async) 07:39:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051a82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:09 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0x92200) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x880, 0x10a) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r4, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2e, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x3, @loopback, 0x10001}}}, 0x90) 07:39:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0xe}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0xf}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051b82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0x92200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x880, 0x10a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r4, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2e, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x3, @loopback, 0x10001}}}, 0x90) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0x92200) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000600)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x880, 0x10a) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r4, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2e, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x3, @loopback, 0x10001}}}, 0x90) (async) [ 643.620373][T16770] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 643.640294][T16770] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 643.657287][T16769] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:09 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x60}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 643.749738][T16778] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:39:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051c82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:09 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 643.889702][T16788] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 643.945310][ T20] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 644.335590][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.352253][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.372284][ T20] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 644.391606][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.423100][ T20] usb 6-1: config 0 descriptor?? [ 644.907124][ T20] saitek 0003:0738:1709.0042: unknown main item tag 0x0 [ 644.924913][ T20] saitek 0003:0738:1709.0042: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 [ 645.116877][T16775] UDC core: couldn't find an available UDC or it's busy: -16 [ 645.134921][T16775] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 645.148077][T16775] UDC core: couldn't find an available UDC or it's busy: -16 [ 645.176617][T16800] UDC core: couldn't find an available UDC or it's busy: -16 [ 645.184010][T16800] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 645.211911][T16775] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:39:12 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_usb_connect$cdc_ecm(0x3, 0x6d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x20, 0x30, 0x81, [{{0x9, 0x4, 0x0, 0xbf, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, 'L4'}, {0x5, 0x24, 0x0, 0xfc01}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xd6, 0xfe4, 0xf7}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0xf2, 0x9, 0x81}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x1, 0x1631}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x52, 0x7f, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x20, 0x1f, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x9, 0x4, 0x5, 0x8, 0xf9}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8, 0x7f, 0x6}]}, 0x2, [{0x28, &(0x7f0000000180)=@string={0x28, 0x3, "400f1796a6c39b0be3ead6985a1d85afaad01eccd63be3458355c3d19d1e4349f5e4847876d7"}}, {0xb5, &(0x7f00000001c0)=@string={0xb5, 0x3, "3501befb62d2fa1a44dc4adf8ca6b76a22d802a8f564449c205cb6c4e762db1653c53ea1407c561f28d45bb0eb82eab6b93a5c4bcb792045b2be19b53508f36f471f208768cf274b81e96ffef9ee394c76137f920bb1025a8d1562a2fbc22f95bf6979c7b0b161c04d7c1aa0c2d583741b459f7a42fd0ce10aec743a1e6e5980585a90c02756d8b3ddaba6dba94b43a03f475288d376a33f0618a8a3cd7d695c157634ed6d8292f4311ca762fd5464b3b1f6f8"}}]}) syz_usb_control_io(r1, &(0x7f0000000600)={0x18, &(0x7f00000002c0)={0x40, 0x9, 0xed, {0xed, 0x27, "2e22d6523ca4719383716b9dd7a2cdb5851a49d2a625c1e5af8bb3407402ae768f5bc5e438e43a56bace8a3a3392f2ce71e47d7e9a430166dda4607ae20006beda43ed7a29d146afe350957ed384c4d9b11d1cda0453da11601efa5191fd654aa66c831b60a844bce6ecf9c195e63b907e42510d699d07a569c714ee7591e5d877afbeb50505c3396d6720f68c67af45230ebca98113ff61498854e2f865bc5289cd2606812f86fa33b0f9a1c6a67ff1e0dd81551b7d92c94fe9e81c2b7e03bf5066998b8e23147a9094956f7ccd3eace5e5b0028d3d3c9dc29c05528fd0ce437f9d3481bd7b8581a6307b"}}, &(0x7f00000004c0)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "d74dd1e0f527ace38b398977ad360637319847d572d274d8ce3bcc97b78636cf0bfcafb1d5877afa33f8d7d36993ec80d6a0cc24a4d71508db2525ad2369cfa82723745836074e6867b63e5ba22eb9ecc677f0e3293fbbb918392ee764752c0ca771896d2ead49c7c880cec08766261fd15e0cec081d5e1a2077b4a0152d0948357d04dd38e658ef8c04b8d0fc792cbee64113ef2bace7fd89ed408ac6aacfa49eacb07cb067d7bd53b1446bd5180d67b045e7bf51767844fe6ae40ba7dfc897"}}, &(0x7f00000003c0)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x80, 0xbb, 0x22bc}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x99, 0x7, 0x80}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0x5, 0xf00f, 0xad, [0xc000, 0x3f00, 0x0, 0xc000, 0xf, 0xc0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x8, 0x1, 0x8}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0xe5, 0x4f, "fa613cc2", "bd173fec"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x4, 0x55, 0x9, 0x1, 0x3ff}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000640)={0x40, 0x12, 0x4, "f8f40dec"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xc9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x160, 0x20}}, &(0x7f0000000780)={0x40, 0x7, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000800)={0x40, 0xb, 0x2, 'K3'}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000880)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000008c0)={0x40, 0x17, 0x6}, &(0x7f0000000900)={0x40, 0x19, 0x2, "e2bd"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x95}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x1}}) 07:39:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0xf0}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051d82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 646.662717][ T3676] usb 6-1: USB disconnect, device number 18 07:39:12 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:12 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x282201, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x1, 0x5, "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", 0x40, 0x1, 0xf1, 0xc9, 0x0, 0xff, 0x40, 0x1}}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) write$UHID_DESTROY(r3, &(0x7f0000000140), 0x4) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) [ 646.742174][T16809] __nla_validate_parse: 4 callbacks suppressed [ 646.742193][T16809] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 646.746966][T16807] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:39:12 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x300}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 646.855534][T16807] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:12 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x282201, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x1, 0x5, "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", 0x40, 0x1, 0xf1, 0xc9, 0x0, 0xff, 0x40, 0x1}}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) write$UHID_DESTROY(r3, &(0x7f0000000140), 0x4) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x282201, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x1, 0x5, "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", 0x40, 0x1, 0xf1, 0xc9, 0x0, 0xff, 0x40, 0x1}}}, 0x120) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) (async) write$UHID_DESTROY(r3, &(0x7f0000000140), 0x4) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) (async) [ 646.903711][T16815] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x500}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00051e82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:12 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 647.036807][T16820] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 647.065757][T16820] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x525}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 647.083273][T16824] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 647.145295][ T3676] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 647.515482][ T3676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.540136][ T3676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.571608][ T3676] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 647.600386][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.639332][ T3676] usb 6-1: config 0 descriptor?? [ 647.890526][T16833] UDC core: couldn't find an available UDC or it's busy: -16 [ 647.900939][T16833] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 647.947217][ T3676] saitek 0003:0738:1709.0043: unknown main item tag 0x0 [ 647.960441][ T3676] saitek 0003:0738:1709.0043: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 [ 648.147726][T15010] usb 6-1: USB disconnect, device number 19 07:39:14 executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1901000000000040385db817400000ba3f8ba05044790000010902240001000000000904000001030100000921000000012201000905d47c979301d778ce4ba54f3095812db91094306084221f4f1798d1a311555fa3e2eb8b2a7ca6752eeb7e07a091cf71cffa548797bedf3adcaab77e1672cedc57de2e994d8c9a74c5100787394fd5f24c0540d58927d3de33cb82db92726ccbbc1953974410daa3cafc72e11a1cdb0d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 07:39:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052182c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:14 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x5f2}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x282201, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x1, 0x5, "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", 0x40, 0x1, 0xf1, 0xc9, 0x0, 0xff, 0x40, 0x1}}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib}}, 0x90) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) write$UHID_DESTROY(r3, &(0x7f0000000140), 0x4) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) [ 648.694420][T16835] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 648.750956][T16835] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) 07:39:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x600}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:14 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052282c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 648.950562][T16854] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 648.956588][T16855] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:39:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x700}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) 07:39:14 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 648.995380][ T3674] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 649.013619][T16855] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 649.152803][T16863] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 649.286391][ T3674] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 649.412497][ T3674] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 649.420567][ T3674] usb 6-1: can't read configurations, error -61 [ 649.587040][ T3674] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 649.865368][ T3674] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 649.985434][ T3674] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 649.993029][ T3674] usb 6-1: can't read configurations, error -61 [ 650.032559][ T3674] usb usb6-port1: attempt power cycle [ 650.447010][ T3674] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 650.576639][ T3674] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 650.708381][ T3674] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 650.718466][ T3674] usb 6-1: can't read configurations, error -61 [ 650.875287][ T3674] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 651.005372][ T3674] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 651.125365][ T3674] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 651.132997][ T3674] usb 6-1: can't read configurations, error -61 [ 651.139948][ T3674] usb usb6-port1: unable to enumerate USB device 07:39:17 executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1901000000000040385db817400000ba3f8ba05044790000010902240001000000000904000001030100000921000000012201000905d47c979301d778ce4ba54f3095812db91094306084221f4f1798d1a311555fa3e2eb8b2a7ca6752eeb7e07a091cf71cffa548797bedf3adcaab77e1672cedc57de2e994d8c9a74c5100787394fd5f24c0540d58927d3de33cb82db92726ccbbc1953974410daa3cafc72e11a1cdb0d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1901000000000040385db817400000ba3f8ba05044790000010902240001000000000904000001030100000921000000012201000905d47c979301d778ce4ba54f3095812db91094306084221f4f1798d1a311555fa3e2eb8b2a7ca6752eeb7e07a091cf71cffa548797bedf3adcaab77e1672cedc57de2e994d8c9a74c5100787394fd5f24c0540d58927d3de33cb82db92726ccbbc1953974410daa3cafc72e11a1cdb0d"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) (async) 07:39:17 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) 07:39:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x900}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052382c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:17 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0xe00}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 651.739704][T16869] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 651.756165][T16870] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:17 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}, {0xa, 0x4e20, 0x5, @loopback}, r3, 0x9a}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r5, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x5}, 0x9}, r3, 0x200}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) 07:39:17 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 651.786290][T16869] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052482c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0xf00}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 651.946855][T16880] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 651.959459][T16882] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 651.978583][T16882] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:17 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 652.068417][T16887] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 652.124417][T16887] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 652.164096][T16889] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 652.165600][ T3674] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 652.495533][ T3674] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 652.625567][ T3674] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 652.633144][ T3674] usb 6-1: can't read configurations, error -61 [ 652.785503][ T3674] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 653.065428][ T3674] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 653.205434][ T3674] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 653.213358][ T3674] usb 6-1: can't read configurations, error -61 [ 653.220503][ T3674] usb usb6-port1: attempt power cycle [ 653.645284][ T3674] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 653.785452][ T3674] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 653.935355][ T3674] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 653.942957][ T3674] usb 6-1: can't read configurations, error -61 [ 654.105362][ T3674] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 654.246198][ T3674] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 654.375362][ T3674] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 654.383021][ T3674] usb 6-1: can't read configurations, error -61 [ 654.390359][ T3674] usb usb6-port1: unable to enumerate USB device 07:39:20 executing program 5: r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1901000000000040385db817400000ba3f8ba05044790000010902240001000000000904000001030100000921000000012201000905d47c979301d778ce4ba54f3095812db91094306084221f4f1798d1a311555fa3e2eb8b2a7ca6752eeb7e07a091cf71cffa548797bedf3adcaab77e1672cedc57de2e994d8c9a74c5100787394fd5f24c0540d58927d3de33cb82db92726ccbbc1953974410daa3cafc72e11a1cdb0d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 07:39:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x2505}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}, {0xa, 0x4e20, 0x5, @loopback}, r3, 0x9a}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r5, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x5}, 0x9}, r3, 0x200}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) 07:39:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052682c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:20 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d300)={0xe6, [{}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x7c, "7cc5afd9695763"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003640)={0x0}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r8, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r9}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000052780)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0}) r15 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000080) ioctl$USBDEVFS_IOCTL(r15, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r15, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r15, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053780)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {0x0, r2}, {r9, r13}, {r14}], 0x7, "ff065e4289c49b"}) 07:39:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x3f00}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:20 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 654.814782][T16895] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 654.826411][T16899] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 654.834598][T16899] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052782c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async, rerun: 32) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}, {0xa, 0x4e20, 0x5, @loopback}, r3, 0x9a}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r5, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x5}, 0x9}, r3, 0x200}}, 0x48) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) 07:39:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x6000}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:20 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 654.988565][T16907] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 655.014786][T16912] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 655.071947][T16912] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 655.245267][ T3674] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 655.535570][ T3674] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 655.655389][ T3674] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 655.662970][ T3674] usb 6-1: can't read configurations, error -61 [ 655.815253][ T3674] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 656.095400][ T3674] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 656.217852][ T3674] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 656.225687][ T3674] usb 6-1: can't read configurations, error -61 [ 656.232115][ T3674] usb usb6-port1: attempt power cycle [ 656.645304][ T3674] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 656.775515][ T3674] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 656.895321][ T3674] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 656.903350][ T3674] usb 6-1: can't read configurations, error -61 [ 657.055323][ T3674] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 657.207660][ T3674] usb 6-1: too many configurations: 139, using maximum allowed: 8 [ 657.335496][ T3674] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 657.343101][ T3674] usb 6-1: can't read configurations, error -61 [ 657.349732][ T3674] usb usb6-port1: unable to enumerate USB device 07:39:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x22, 0xfc, {0xfc, 0x9, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x31, @string={0x31, 0x3, "41004277143809374559898377953bf05e225fe7b4044c32f25270d9c71b7496d937cd75660df75ece385e9222451c"}}, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x33e}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000580)={0x40, 0x11, 0x97, "b0331b1a486f9a61364d5a1825f367dd4b5f756e1ede890c63143876e0c237da9ac34c3883e97be4a749b9c13ee22ce527f55ee71a0773c21d9073e29c8300e1d17e957abfe1524151fd333cf17f994669e6bc788597913c2a071ae0bb5ce18d10f71f24ccf3c6eab2b9ffe3d2ad01136513ade48a9d7eba439594b88863e4ea1b84d3935a09e66b2817d18076f05c4227b65c26b94fb3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0x83, "faca1fe4528930c6703d13f055fd232dd6b5d2b2f67af3cc36c28ff7b647a165c1383892d8e12033a597c2a9a911d6ca61912e5f7414b08c092afd011b336ec0514f5c0728e01fa20a7a4efa6cb400cc25302ec633a2741ab15f3a086999bb5970a559a5d981514b9ab5f510fc3e43933656742b9673e3f0221b6ef0a3b057d94b93c7"}, &(0x7f0000000400)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x18, &(0x7f0000000640)={0x20, 0x31, 0xc1, {0xc1, 0xa, "926c73fd710cb0c397d5285292df2253cab73c9984f8c898ef8a43468c8dee8ded51aac4ac450a8c73cf6ab5de4bdf0164d106ef671c81b4abfce5012504191c21b7a4debd61707ab89cec92c5c50d1a386e3d9a8ac743504ef48964c0fca83cb21ba12362a0a5ea7f3847b61aa465b1dc257adbc8cbd4b2339ca1745627a04134354674bcf238e68b4d664a3f07570ec781edbf25da9441a5c5a06a6fe981bf5798d7a2f74e7cb6c28c0e43c38c3699079ce9d309413d84e236fe00038a82"}}, &(0x7f00000002c0)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "45ce3db00f5063e731eaaac313dbbd171e8627377e616622a2fead72a79740ff1e7877017e6baaff45d2ccb01e16038514ca99c86ccddb1f0868fef6b7"}}, &(0x7f0000000740)={0x0, 0xf, 0x4d, {0x5, 0xf, 0x4d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0xff}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x5, 0xf, 0x3, [0xff3f, 0x0]}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x9, 0xf00, 0x0, [0xffc00f, 0x0, 0x0, 0x30, 0x3fc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x3a, 0xc6}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0xfe, 0x4, 0x81, "35961e9a", "838a3b64"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x7, 0x1, 0x81, 0x80, 0x7f}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000840)={0x20, 0xf, 0x86, "e83a4d30970bfc7437db193c5f5f8a32d7b927aec3d86f96387ac2216aec75b6528a53877c05681a2dc7b60f7e70b7ca374123ecc318cce653783dbfc9bb947011b339453f14a8e04bae62c2857812a01649d55c75bf3155c42eb086c791d8bde6a01aedc03689d72916cfdab1cfe302fb9b7b88f8fae07c4ce8120b0c6579df82eabd16cd2a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000940)={0x0, 0x8, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "e9b6"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "7aac"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x79}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x1}}) 07:39:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x7000}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:23 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400ff", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052882c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d300)={0xe6, [{}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x7c, "7cc5afd9695763"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003640)={0x0}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r8, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r9}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000052780)={0x0, 0x0, "fafd3d9d304df43aa0d599dd688b109235ef528e18566d9aa900fc60ea31cf29e47001a429941112b4cb77d141f71fee78ca9a5598230f10162ae2cea748de3b14f6922f08748695a8e1618e7959d46de48d8982b760d3100489a707dd622a0101a92d6c195cc7b82ea47a6a91a5282fd851b8eda22b2d92ea5e7b93c163ea333c615a54351584d16a2f3548931f5f9e4adca6d615aa1ecd77cbdb580675f11a9be8c860f849428639421352b1d152fe4c9b50c2daf98c7107ff101391253c44589cad0adcf79a0489dd5bdc3400fb2e278c5da545b8e231c63e4d6a44b5099af6cedf09eadb798def16b5200b19c789c6dde842d0a6dba9fed514a4926565fb", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0}) r15 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000080) ioctl$USBDEVFS_IOCTL(r15, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r15, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r15, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053780)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {0x0, r2}, {r9, r13}, {r14}], 0x7, "ff065e4289c49b"}) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "a59f7995f969f9"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d300)={0xe6, [{}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x7c, "7cc5afd9695763"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003640)) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) (async) ioctl$USBDEVFS_IOCTL(r8, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005a700)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x0, "a59f7995f969f9"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000052780)={0x0, 0x0, "fafd3d9d304df43aa0d599dd688b109235ef528e18566d9aa900fc60ea31cf29e47001a429941112b4cb77d141f71fee78ca9a5598230f10162ae2cea748de3b14f6922f08748695a8e1618e7959d46de48d8982b760d3100489a707dd622a0101a92d6c195cc7b82ea47a6a91a5282fd851b8eda22b2d92ea5e7b93c163ea333c615a54351584d16a2f3548931f5f9e4adca6d615aa1ecd77cbdb580675f11a9be8c860f849428639421352b1d152fe4c9b50c2daf98c7107ff101391253c44589cad0adcf79a0489dd5bdc3400fb2e278c5da545b8e231c63e4d6a44b5099af6cedf09eadb798def16b5200b19c789c6dde842d0a6dba9fed514a4926565fb", "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"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000080) (async) ioctl$USBDEVFS_IOCTL(r15, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) ioctl$USBDEVFS_IOCTL(r15, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r15, 0x81f8943c, &(0x7f000005a700)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}], 0x0, "a59f7995f969f9"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053780)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {0x0, r2}, {r9, r13}, {r14}], 0x7, "ff065e4289c49b"}) (async) 07:39:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x40, @remote, 0x1}, {0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x6}, r3, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x7, {"00000000000008000000dc0000001300"}, 0x0, 0x9}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) r5 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r4, r5}}, 0x18) [ 657.889317][T16927] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 657.925609][T16927] __nla_validate_parse: 1 callbacks suppressed [ 657.925627][T16927] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:23 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400ff", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x7205}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052982c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:23 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {0x7fff}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x40, @remote, 0x1}, {0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x6}, r3, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x7, {"00000000000008000000dc0000001300"}, 0x0, 0x9}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) r5 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r4, r5}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x40, @remote, 0x1}, {0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x6}, r3, 0x2}}, 0x48) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x7, {"00000000000008000000dc0000001300"}, 0x0, 0x9}}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) (async) openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r4, r5}}, 0x18) (async) [ 658.121690][T16942] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 658.156145][T16942] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 658.195680][T16944] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 658.395244][ T3676] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 658.815398][ T3676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.826506][ T3676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.836435][ T3676] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 658.845912][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.856475][ T3676] usb 6-1: config 0 descriptor?? [ 659.377297][ T3676] saitek 0003:0738:1709.0044: unknown main item tag 0x0 [ 659.385366][ T3676] saitek 0003:0738:1709.0044: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 07:39:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x22, 0xfc, {0xfc, 0x9, "56da8a954846fa5e63ec4989ab83bc1c91e824664b6527b7e2e996e5a110774caf84b101abba8c4b0b2778eee7daca5f2589d7fc2806135751e26a2db43d116ca7802be34252cefabfb542a97ed5f5840e31175312b388149d1547b9e9251a481c54af8feae206994dc485a8542c3eb5e4425a26ec3e279cdf68424ba9d4add6907dbd4aa6b1de630651e7e3cfd0ea759893fc4fa5c8a4d786d6133efa71d0ffb1f7d5652a09668e40d9b2b0828c63429d0dca6911078ede380bf6c865f71358820d0b9ac3f1df4e43ccf30c7fed7d07403b9547a9fa5a4d458ca316799822d66d4609dc06f08ca96d1bff3f2847ffb4dd3883320c4463d031b7"}}, &(0x7f0000000000)={0x0, 0x3, 0x31, @string={0x31, 0x3, "41004277143809374559898377953bf05e225fe7b4044c32f25270d9c71b7496d937cd75660df75ece385e9222451c"}}, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x33e}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000580)={0x40, 0x11, 0x97, "b0331b1a486f9a61364d5a1825f367dd4b5f756e1ede890c63143876e0c237da9ac34c3883e97be4a749b9c13ee22ce527f55ee71a0773c21d9073e29c8300e1d17e957abfe1524151fd333cf17f994669e6bc788597913c2a071ae0bb5ce18d10f71f24ccf3c6eab2b9ffe3d2ad01136513ade48a9d7eba439594b88863e4ea1b84d3935a09e66b2817d18076f05c4227b65c26b94fb3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0x83, "faca1fe4528930c6703d13f055fd232dd6b5d2b2f67af3cc36c28ff7b647a165c1383892d8e12033a597c2a9a911d6ca61912e5f7414b08c092afd011b336ec0514f5c0728e01fa20a7a4efa6cb400cc25302ec633a2741ab15f3a086999bb5970a559a5d981514b9ab5f510fc3e43933656742b9673e3f0221b6ef0a3b057d94b93c7"}, &(0x7f0000000400)={0x20, 0x3, 0x1}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x18, &(0x7f0000000640)={0x20, 0x31, 0xc1, {0xc1, 0xa, "926c73fd710cb0c397d5285292df2253cab73c9984f8c898ef8a43468c8dee8ded51aac4ac450a8c73cf6ab5de4bdf0164d106ef671c81b4abfce5012504191c21b7a4debd61707ab89cec92c5c50d1a386e3d9a8ac743504ef48964c0fca83cb21ba12362a0a5ea7f3847b61aa465b1dc257adbc8cbd4b2339ca1745627a04134354674bcf238e68b4d664a3f07570ec781edbf25da9441a5c5a06a6fe981bf5798d7a2f74e7cb6c28c0e43c38c3699079ce9d309413d84e236fe00038a82"}}, &(0x7f00000002c0)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "45ce3db00f5063e731eaaac313dbbd171e8627377e616622a2fead72a79740ff1e7877017e6baaff45d2ccb01e16038514ca99c86ccddb1f0868fef6b7"}}, &(0x7f0000000740)={0x0, 0xf, 0x4d, {0x5, 0xf, 0x4d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0xff}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x5, 0xf, 0x3, [0xff3f, 0x0]}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x9, 0xf00, 0x0, [0xffc00f, 0x0, 0x0, 0x30, 0x3fc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x3a, 0xc6}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0xfe, 0x4, 0x81, "35961e9a", "838a3b64"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x7, 0x1, 0x81, 0x80, 0x7f}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000840)={0x20, 0xf, 0x86, "e83a4d30970bfc7437db193c5f5f8a32d7b927aec3d86f96387ac2216aec75b6528a53877c05681a2dc7b60f7e70b7ca374123ecc318cce653783dbfc9bb947011b339453f14a8e04bae62c2857812a01649d55c75bf3155c42eb086c791d8bde6a01aedc03689d72916cfdab1cfe302fb9b7b88f8fae07c4ce8120b0c6579df82eabd16cd2a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000940)={0x0, 0x8, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "e9b6"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "7aac"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x79}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x1}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x22, 0xfc, {0xfc, 0x9, "56da8a954846fa5e63ec4989ab83bc1c91e824664b6527b7e2e996e5a110774caf84b101abba8c4b0b2778eee7daca5f2589d7fc2806135751e26a2db43d116ca7802be34252cefabfb542a97ed5f5840e31175312b388149d1547b9e9251a481c54af8feae206994dc485a8542c3eb5e4425a26ec3e279cdf68424ba9d4add6907dbd4aa6b1de630651e7e3cfd0ea759893fc4fa5c8a4d786d6133efa71d0ffb1f7d5652a09668e40d9b2b0828c63429d0dca6911078ede380bf6c865f71358820d0b9ac3f1df4e43ccf30c7fed7d07403b9547a9fa5a4d458ca316799822d66d4609dc06f08ca96d1bff3f2847ffb4dd3883320c4463d031b7"}}, &(0x7f0000000000)={0x0, 0x3, 0x31, @string={0x31, 0x3, "41004277143809374559898377953bf05e225fe7b4044c32f25270d9c71b7496d937cd75660df75ece385e9222451c"}}, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x33e}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000580)={0x40, 0x11, 0x97, "b0331b1a486f9a61364d5a1825f367dd4b5f756e1ede890c63143876e0c237da9ac34c3883e97be4a749b9c13ee22ce527f55ee71a0773c21d9073e29c8300e1d17e957abfe1524151fd333cf17f994669e6bc788597913c2a071ae0bb5ce18d10f71f24ccf3c6eab2b9ffe3d2ad01136513ade48a9d7eba439594b88863e4ea1b84d3935a09e66b2817d18076f05c4227b65c26b94fb3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0x83, "faca1fe4528930c6703d13f055fd232dd6b5d2b2f67af3cc36c28ff7b647a165c1383892d8e12033a597c2a9a911d6ca61912e5f7414b08c092afd011b336ec0514f5c0728e01fa20a7a4efa6cb400cc25302ec633a2741ab15f3a086999bb5970a559a5d981514b9ab5f510fc3e43933656742b9673e3f0221b6ef0a3b057d94b93c7"}, &(0x7f0000000400)={0x20, 0x3, 0x1}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000800)={0x18, &(0x7f0000000640)={0x20, 0x31, 0xc1, {0xc1, 0xa, "926c73fd710cb0c397d5285292df2253cab73c9984f8c898ef8a43468c8dee8ded51aac4ac450a8c73cf6ab5de4bdf0164d106ef671c81b4abfce5012504191c21b7a4debd61707ab89cec92c5c50d1a386e3d9a8ac743504ef48964c0fca83cb21ba12362a0a5ea7f3847b61aa465b1dc257adbc8cbd4b2339ca1745627a04134354674bcf238e68b4d664a3f07570ec781edbf25da9441a5c5a06a6fe981bf5798d7a2f74e7cb6c28c0e43c38c3699079ce9d309413d84e236fe00038a82"}}, &(0x7f00000002c0)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "45ce3db00f5063e731eaaac313dbbd171e8627377e616622a2fead72a79740ff1e7877017e6baaff45d2ccb01e16038514ca99c86ccddb1f0868fef6b7"}}, &(0x7f0000000740)={0x0, 0xf, 0x4d, {0x5, 0xf, 0x4d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0xff}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x5, 0xf, 0x3, [0xff3f, 0x0]}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x9, 0xf00, 0x0, [0xffc00f, 0x0, 0x0, 0x30, 0x3fc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x3a, 0xc6}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0xfe, 0x4, 0x81, "35961e9a", "838a3b64"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x7, 0x1, 0x81, 0x80, 0x7f}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000840)={0x20, 0xf, 0x86, "e83a4d30970bfc7437db193c5f5f8a32d7b927aec3d86f96387ac2216aec75b6528a53877c05681a2dc7b60f7e70b7ca374123ecc318cce653783dbfc9bb947011b339453f14a8e04bae62c2857812a01649d55c75bf3155c42eb086c791d8bde6a01aedc03689d72916cfdab1cfe302fb9b7b88f8fae07c4ce8120b0c6579df82eabd16cd2a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000940)={0x0, 0x8, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "e9b6"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "7aac"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x79}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x1}}) (async) 07:39:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x40, @remote, 0x1}, {0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x6}, r3, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x7, {"00000000000008000000dc0000001300"}, 0x0, 0x9}}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) r5 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r4, r5}}, 0x18) 07:39:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052a82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:26 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d300)={0xe6, [{}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x7c, "7cc5afd9695763"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003640)={0x0}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r8, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r9}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000052780)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0}) (async) r15 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000080) ioctl$USBDEVFS_IOCTL(r15, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) ioctl$USBDEVFS_IOCTL(r15, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r15, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053780)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {0x0, r2}, {r9, r13}, {r14}], 0x7, "ff065e4289c49b"}) [ 660.925086][ T3677] usb 6-1: USB disconnect, device number 32 07:39:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x3}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 660.978684][T16960] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 660.985984][T16967] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:39:26 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804007f", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x53) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYRESHEX=r1], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x10, r2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000500)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0xc405, "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", 0x0, 0x36, 0x1, 0xad, 0xdf, 0x98, 0x9, 0x1}, r1}}, 0x128) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40449426, &(0x7f0000000100)={{r0}, 0x3, &(0x7f0000000040)=[0x3, 0x5, 0x100000000], 0x8000, 0x2}) openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) [ 661.046696][T16967] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x3b}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052b82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:26 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804009e", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 661.249013][T16984] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 661.265902][T16984] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 661.455329][ T3677] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 661.846215][ T3677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.857155][ T3677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.868030][ T3677] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 661.877371][ T3677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.891005][ T3677] usb 6-1: config 0 descriptor?? [ 662.407132][ T3677] saitek 0003:0738:1709.0045: unknown main item tag 0x0 [ 662.415973][ T3677] saitek 0003:0738:1709.0045: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 [ 662.958617][T16987] UDC core: couldn't find an available UDC or it's busy: -16 [ 662.966208][T16987] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:39:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x22, 0xfc, {0xfc, 0x9, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x31, @string={0x31, 0x3, "41004277143809374559898377953bf05e225fe7b4044c32f25270d9c71b7496d937cd75660df75ece385e9222451c"}}, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x33e}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000580)={0x40, 0x11, 0x97, "b0331b1a486f9a61364d5a1825f367dd4b5f756e1ede890c63143876e0c237da9ac34c3883e97be4a749b9c13ee22ce527f55ee71a0773c21d9073e29c8300e1d17e957abfe1524151fd333cf17f994669e6bc788597913c2a071ae0bb5ce18d10f71f24ccf3c6eab2b9ffe3d2ad01136513ade48a9d7eba439594b88863e4ea1b84d3935a09e66b2817d18076f05c4227b65c26b94fb3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0x83, "faca1fe4528930c6703d13f055fd232dd6b5d2b2f67af3cc36c28ff7b647a165c1383892d8e12033a597c2a9a911d6ca61912e5f7414b08c092afd011b336ec0514f5c0728e01fa20a7a4efa6cb400cc25302ec633a2741ab15f3a086999bb5970a559a5d981514b9ab5f510fc3e43933656742b9673e3f0221b6ef0a3b057d94b93c7"}, &(0x7f0000000400)={0x20, 0x3, 0x1}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000800)={0x18, &(0x7f0000000640)={0x20, 0x31, 0xc1, {0xc1, 0xa, "926c73fd710cb0c397d5285292df2253cab73c9984f8c898ef8a43468c8dee8ded51aac4ac450a8c73cf6ab5de4bdf0164d106ef671c81b4abfce5012504191c21b7a4debd61707ab89cec92c5c50d1a386e3d9a8ac743504ef48964c0fca83cb21ba12362a0a5ea7f3847b61aa465b1dc257adbc8cbd4b2339ca1745627a04134354674bcf238e68b4d664a3f07570ec781edbf25da9441a5c5a06a6fe981bf5798d7a2f74e7cb6c28c0e43c38c3699079ce9d309413d84e236fe00038a82"}}, &(0x7f00000002c0)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "45ce3db00f5063e731eaaac313dbbd171e8627377e616622a2fead72a79740ff1e7877017e6baaff45d2ccb01e16038514ca99c86ccddb1f0868fef6b7"}}, &(0x7f0000000740)={0x0, 0xf, 0x4d, {0x5, 0xf, 0x4d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0xff}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x5, 0xf, 0x3, [0xff3f, 0x0]}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x9, 0xf00, 0x0, [0xffc00f, 0x0, 0x0, 0x30, 0x3fc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x3a, 0xc6}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0xfe, 0x4, 0x81, "35961e9a", "838a3b64"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x7, 0x1, 0x81, 0x80, 0x7f}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000840)={0x20, 0xf, 0x86, "e83a4d30970bfc7437db193c5f5f8a32d7b927aec3d86f96387ac2216aec75b6528a53877c05681a2dc7b60f7e70b7ca374123ecc318cce653783dbfc9bb947011b339453f14a8e04bae62c2857812a01649d55c75bf3155c42eb086c791d8bde6a01aedc03689d72916cfdab1cfe302fb9b7b88f8fae07c4ce8120b0c6579df82eabd16cd2a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000940)={0x0, 0x8, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "e9b6"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "7aac"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x79}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x1}}) 07:39:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x44}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:29 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400f0", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:29 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052c82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) mmap(&(0x7f000001c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 07:39:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x53) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYRESHEX=r1], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x10, r2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000500)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0xc405, "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", 0x0, 0x36, 0x1, 0xad, 0xdf, 0x98, 0x9, 0x1}, r1}}, 0x128) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40449426, &(0x7f0000000100)={{r0}, 0x3, &(0x7f0000000040)=[0x3, 0x5, 0x100000000], 0x8000, 0x2}) openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) (async) creat(&(0x7f0000000080)='./file0\x00', 0x53) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, 0x0, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYRESHEX=r1], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x10, r2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000500)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0xc405, "9cefa116d132655ce1a11ec5a77e4989c1b5873a40ecdc16a2458c94c067872922a3ab1fd1284103a7c4756f0709ad9b6cec838d4c0f830524e18c8b15d9dbd0aa8bf636d0e394c0e50967c64f35771acbea3b30be14cd5c5a45cec296034ea29f596f9de02218553ab1c0da4da4e209e652ee744062dc1d6c4cf94902eafb9388c6ee518b955f65bc074d8144aeb9922f7366a43f469827eaac9abbb5657a6f943710d58f4dcf33eccfe1ba940bcd5c87a4c8ce8c00f1483b434b9d3cc54bdd4124be3ba3b31e55c0cc49d8ab2a20ea54d023b9816906c4ab287f31455a16f7873f6417555d3e1cb68ed9a9b40e97b1c9987e6e4dd29d555fae135d77346296", 0x0, 0x36, 0x1, 0xad, 0xdf, 0x98, 0x9, 0x1}, r1}}, 0x128) (async) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40449426, &(0x7f0000000100)={{r0}, 0x3, &(0x7f0000000040)=[0x3, 0x5, 0x100000000], 0x8000, 0x2}) (async) openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) [ 664.036915][ T3677] usb 6-1: USB disconnect, device number 33 07:39:29 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 664.081893][T16993] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 664.117743][T16993] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) mmap(&(0x7f000001c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 07:39:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x6b}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:29 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052d82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:29 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 664.192280][T17019] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x53) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, 0x0, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000640)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r3, @ANYRESHEX=r1], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x10, r2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000500)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0xc405, "9cefa116d132655ce1a11ec5a77e4989c1b5873a40ecdc16a2458c94c067872922a3ab1fd1284103a7c4756f0709ad9b6cec838d4c0f830524e18c8b15d9dbd0aa8bf636d0e394c0e50967c64f35771acbea3b30be14cd5c5a45cec296034ea29f596f9de02218553ab1c0da4da4e209e652ee744062dc1d6c4cf94902eafb9388c6ee518b955f65bc074d8144aeb9922f7366a43f469827eaac9abbb5657a6f943710d58f4dcf33eccfe1ba940bcd5c87a4c8ce8c00f1483b434b9d3cc54bdd4124be3ba3b31e55c0cc49d8ab2a20ea54d023b9816906c4ab287f31455a16f7873f6417555d3e1cb68ed9a9b40e97b1c9987e6e4dd29d555fae135d77346296", 0x0, 0x36, 0x1, 0xad, 0xdf, 0x98, 0x9, 0x1}, r1}}, 0x128) (async) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40449426, &(0x7f0000000100)={{r0}, 0x3, &(0x7f0000000040)=[0x3, 0x5, 0x100000000], 0x8000, 0x2}) openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) [ 664.299550][T17025] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 664.316799][T17025] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 664.362592][T17027] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 664.565281][ T3677] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 664.936176][ T3677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.949198][ T3677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.959046][ T3677] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 664.968145][ T3677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.978570][ T3677] usb 6-1: config 0 descriptor?? [ 665.316631][ T3677] saitek 0003:0738:1709.0046: unknown main item tag 0x0 [ 665.324953][ T3677] saitek 0003:0738:1709.0046: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 07:39:32 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x8, 0x101, {0x101, 0xf, "35a6b4a4975f4f02384fd94cfdeec0931e443edabcbaeb5458576efd7768d3490a0537fb73f44c03539e15e04857db5507048e43f5b093151d1baca1baa618fe6e3436fcace5aebfe8e86ddc587c382db32c7c17edea110c8b8f17cb18ada587964ecf216fa2c0329988ea1cae1b0b940bcfccf569ab8cd6600946ebe4b3c238c44ee86922547eca1ecff124cefccac4470bdfd1c819920c6496dbca1907ba6b6a247a4eceb0281a321a835e49d6fc02138db799b40e761754a4ba1a178fbe822d3eeb702cda036cc3859f814b6fff318f53f40eb4af4f581eff38420123edf20d0ae61b41e6db31b0b69a07eff76834681143288e1c5afbe97fc78202aeda"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f0000000080)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x8, "2fd1dc65"}, @global=@item_4={0x3, 0x1, 0xb, "21e8a5ee"}, @main=@item_4={0x3, 0x0, 0xb, "4efb48b7"}, @global=@item_012={0x1, 0x1, 0x5, "15"}, @global=@item_4={0x3, 0x1, 0x5, '(H-c'}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x1, 0x1, {0x22, 0xb3f}}}}, &(0x7f0000000540)={0x18, &(0x7f00000002c0)={0xc0, 0x0, 0xfb, "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"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xfc}, &(0x7f00000004c0), &(0x7f0000000500)={0x20, 0x3, 0x1, 0x92}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$cdc_ecm(0x1510f51054c511d9, 0x6c, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x0, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x20, {{0xa, 0x24, 0x6, 0x0, 0x0, "b8b04630a5"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x0, 0x1}, [@call_mgmt={0x5}, @country_functional={0xc, 0x24, 0x7, 0x5, 0xffff, [0x401, 0x3, 0xb6]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfb, 0x14}}], {{0x9, 0x5, 0x82, 0x2, 0x18f, 0xe0, 0xbe, 0x6f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x6, 0x9c}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0xfb, 0x9f, 0x1, 0x58, 0x2a}, 0x27, &(0x7f0000000640)={0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x8, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x3, 0x4c}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "4938cf97861989fcaf9a9caaedcc02cd"}]}, 0x9, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x446}}, {0x62, &(0x7f0000000740)=@string={0x62, 0x3, "91a28138ae471ac2628bc085d9e7f628fca57b98202c9930adcadc6730fd5ad8548707a95f78646714e5c728e0a6ba8b5ceb75a661e3c22d4ac0caebca44346c404a61e7c203d1502be588cd2d3ec5984bc2c8d723e4c842f5a5dacc0598d827"}}, {0x94, &(0x7f00000007c0)=@string={0x94, 0x3, "cb4db72abac2606f3702b96d5fe884ef484245e72634fa9f7f1fc452403fbafab7f49835daa71683b1a8b609c28d22fbce8b0b9959058bb59bc58770f6069643203af295b65760ad7909a6fd7421ebb4d51893ec74f010ea50bc627b571bc8602bf6782956117d7fbdaa288989318a67c32fc695c094f8d5344c468250dc2fe2cb8e3b44f3540fc415db05e51ce3833122e3"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x4001}}]}) syz_usb_control_io(r2, &(0x7f0000000b40)={0x18, &(0x7f0000000a00)={0x40, 0x4, 0xa, {0xa, 0x2, "d627fce06c9b1dbd"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x4, 0xe1, "201bdfa2", "736bcda1"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x1, 0x9, 0x40, 0x52, 0x4d9}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000b80)={0x0, 0xb, 0x33, "48645e1454eba8b3ea43f12a4b72bdf80d78b300746790a23ea67e43058b3cc9f78d9dc770fc8c0c43eb0b5c1b320ddd6ed840"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000c80)={0x20, 0x0, 0x8, {0x8, 0x10, [0x0]}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0xe4}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "4cb6"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000e00)={0x40, 0x17, 0x6}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "14a7"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x8f}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x9}}) 07:39:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) (async) mmap(&(0x7f000001c000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 07:39:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052e82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x3b}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:32 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x40, 0x180) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r5, 0x3f}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x2c, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) [ 667.124993][ T3677] usb 6-1: USB disconnect, device number 34 07:39:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x6b}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 667.167268][T17040] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 667.195315][T17040] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) [ 667.229872][T17048] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052f82c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) (async) 07:39:33 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400ff", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x3b}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 667.339953][T17058] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 667.378544][T17058] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 667.655317][ T3677] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 668.025392][ T3677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.040579][ T3677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.050405][ T3677] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 668.059986][ T3677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.071504][ T3677] usb 6-1: config 0 descriptor?? [ 668.320273][T17050] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.327746][T17050] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.766551][ T3677] saitek 0003:0738:1709.0047: unknown main item tag 0x0 [ 668.776341][ T3677] saitek 0003:0738:1709.0047: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 [ 668.975116][ T3674] usb 6-1: USB disconnect, device number 35 07:39:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x8, 0x101, {0x101, 0xf, "35a6b4a4975f4f02384fd94cfdeec0931e443edabcbaeb5458576efd7768d3490a0537fb73f44c03539e15e04857db5507048e43f5b093151d1baca1baa618fe6e3436fcace5aebfe8e86ddc587c382db32c7c17edea110c8b8f17cb18ada587964ecf216fa2c0329988ea1cae1b0b940bcfccf569ab8cd6600946ebe4b3c238c44ee86922547eca1ecff124cefccac4470bdfd1c819920c6496dbca1907ba6b6a247a4eceb0281a321a835e49d6fc02138db799b40e761754a4ba1a178fbe822d3eeb702cda036cc3859f814b6fff318f53f40eb4af4f581eff38420123edf20d0ae61b41e6db31b0b69a07eff76834681143288e1c5afbe97fc78202aeda"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f0000000080)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x8, "2fd1dc65"}, @global=@item_4={0x3, 0x1, 0xb, "21e8a5ee"}, @main=@item_4={0x3, 0x0, 0xb, "4efb48b7"}, @global=@item_012={0x1, 0x1, 0x5, "15"}, @global=@item_4={0x3, 0x1, 0x5, '(H-c'}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x1, 0x1, {0x22, 0xb3f}}}}, &(0x7f0000000540)={0x18, &(0x7f00000002c0)={0xc0, 0x0, 0xfb, "d7ff85bd5dd7b352b1c6b468dfd6d359561303e31262a287826c2e59f7e8d35a6d1f438407488321da313776d92c6a21c82f4c15c82ce529602846ed79da3136fe54cf02fe8f1eed8aed963e753932733e49bb7a522f665840af8f243140541cbde50a9d21a15efd27bb4da9a0ec51bb1a890aca93b8ed1b692dd60445683c09a2236afca0842467e3201931a77807b203f9a39894b78061fb522c9ff0b313c7e0e3194571c72577c3485049cbd3ec5f02881d1ee94937d84fbf3e565f2bd0a8ef3ca411d79583afcc41aa6484d2e36f75728ca47d451c08ca81631ece5a4f701a57552fddc6c06eda68b0cdb25449ad301e2da2d0eabdb583a5b3"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xfc}, &(0x7f00000004c0), &(0x7f0000000500)={0x20, 0x3, 0x1, 0x92}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_usb_connect$cdc_ecm(0x1510f51054c511d9, 0x6c, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x0, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x20, {{0xa, 0x24, 0x6, 0x0, 0x0, "b8b04630a5"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x0, 0x1}, [@call_mgmt={0x5}, @country_functional={0xc, 0x24, 0x7, 0x5, 0xffff, [0x401, 0x3, 0xb6]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfb, 0x14}}], {{0x9, 0x5, 0x82, 0x2, 0x18f, 0xe0, 0xbe, 0x6f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x6, 0x9c}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0xfb, 0x9f, 0x1, 0x58, 0x2a}, 0x27, &(0x7f0000000640)={0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x8, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x3, 0x4c}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "4938cf97861989fcaf9a9caaedcc02cd"}]}, 0x9, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x446}}, {0x62, &(0x7f0000000740)=@string={0x62, 0x3, "91a28138ae471ac2628bc085d9e7f628fca57b98202c9930adcadc6730fd5ad8548707a95f78646714e5c728e0a6ba8b5ceb75a661e3c22d4ac0caebca44346c404a61e7c203d1502be588cd2d3ec5984bc2c8d723e4c842f5a5dacc0598d827"}}, {0x94, &(0x7f00000007c0)=@string={0x94, 0x3, "cb4db72abac2606f3702b96d5fe884ef484245e72634fa9f7f1fc452403fbafab7f49835daa71683b1a8b609c28d22fbce8b0b9959058bb59bc58770f6069643203af295b65760ad7909a6fd7421ebb4d51893ec74f010ea50bc627b571bc8602bf6782956117d7fbdaa288989318a67c32fc695c094f8d5344c468250dc2fe2cb8e3b44f3540fc415db05e51ce3833122e3"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x4001}}]}) syz_usb_control_io(r2, &(0x7f0000000b40)={0x18, &(0x7f0000000a00)={0x40, 0x4, 0xa, {0xa, 0x2, "d627fce06c9b1dbd"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x4, 0xe1, "201bdfa2", "736bcda1"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x1, 0x9, 0x40, 0x52, 0x4d9}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000b80)={0x0, 0xb, 0x33, "48645e1454eba8b3ea43f12a4b72bdf80d78b300746790a23ea67e43058b3cc9f78d9dc770fc8c0c43eb0b5c1b320ddd6ed840"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000c80)={0x20, 0x0, 0x8, {0x8, 0x10, [0x0]}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0xe4}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "4cb6"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000e00)={0x40, 0x17, 0x6}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "14a7"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x8f}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x9}}) 07:39:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x40, 0x180) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r5, 0x3f}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x2c, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x40, 0x180) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r5, 0x3f}}, 0x10) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x2c, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) 07:39:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) 07:39:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x6b}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053082c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:35 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) fstat(r0, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000080)=""/68, &(0x7f0000000100)=0x44) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0xf9, 0x0, @buffer={0x0, 0x2, &(0x7f0000000140)=""/2}, &(0x7f0000000240)="241572935d3c5de1a8f59f910d922ec16372345b76beb386975f81827a0632adb49d366f95e5c34ecbd3c0686d50cd5d477a6d0f38964fa1c73ddf7170caf43c55a0e2332c48885ff33df37b6795bb43dec90aae37f9ac8246cc8f8076bbe446b94a5d70598a767af6fa82a98fabc5eda0564fbc4b356431eb826bfd61b291cdf5bef77b1516a6eb419c93639bc0cb4c60ffeb78396f3603a365b2b61d4406b9496c5a5393e53730c182570c03b52b770114123e9e6d5715cb19bc0456287184d8eb1def3b0185f19a66eb56791127bbfb4c0af12fc61f21f724e928f5032d57e3458b6a1ed4b162dcf4cd0899f46eb56ffadcd8b6cef8a3a9", &(0x7f0000000340)=""/180, 0x8001, 0x10024, 0xffffffffffffffff, &(0x7f0000000180)}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 07:39:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 669.524006][T17074] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 669.562732][T17073] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:39:35 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 669.605287][T17073] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 669.611402][T17080] IPVS: length: 68 != 24 07:39:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) fstat(r0, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000080)=""/68, &(0x7f0000000100)=0x44) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0xf9, 0x0, @buffer={0x0, 0x2, &(0x7f0000000140)=""/2}, &(0x7f0000000240)="241572935d3c5de1a8f59f910d922ec16372345b76beb386975f81827a0632adb49d366f95e5c34ecbd3c0686d50cd5d477a6d0f38964fa1c73ddf7170caf43c55a0e2332c48885ff33df37b6795bb43dec90aae37f9ac8246cc8f8076bbe446b94a5d70598a767af6fa82a98fabc5eda0564fbc4b356431eb826bfd61b291cdf5bef77b1516a6eb419c93639bc0cb4c60ffeb78396f3603a365b2b61d4406b9496c5a5393e53730c182570c03b52b770114123e9e6d5715cb19bc0456287184d8eb1def3b0185f19a66eb56791127bbfb4c0af12fc61f21f724e928f5032d57e3458b6a1ed4b162dcf4cd0899f46eb56ffadcd8b6cef8a3a9", &(0x7f0000000340)=""/180, 0x8001, 0x10024, 0xffffffffffffffff, &(0x7f0000000180)}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) (async) fstat(r0, &(0x7f0000000000)) (async) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000080)=""/68, &(0x7f0000000100)=0x44) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0xf9, 0x0, @buffer={0x0, 0x2, &(0x7f0000000140)=""/2}, &(0x7f0000000240)="241572935d3c5de1a8f59f910d922ec16372345b76beb386975f81827a0632adb49d366f95e5c34ecbd3c0686d50cd5d477a6d0f38964fa1c73ddf7170caf43c55a0e2332c48885ff33df37b6795bb43dec90aae37f9ac8246cc8f8076bbe446b94a5d70598a767af6fa82a98fabc5eda0564fbc4b356431eb826bfd61b291cdf5bef77b1516a6eb419c93639bc0cb4c60ffeb78396f3603a365b2b61d4406b9496c5a5393e53730c182570c03b52b770114123e9e6d5715cb19bc0456287184d8eb1def3b0185f19a66eb56791127bbfb4c0af12fc61f21f724e928f5032d57e3458b6a1ed4b162dcf4cd0899f46eb56ffadcd8b6cef8a3a9", &(0x7f0000000340)=""/180, 0x8001, 0x10024, 0xffffffffffffffff, &(0x7f0000000180)}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) (async) 07:39:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x2}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) (async) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x40, 0x180) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r5, 0x3f}}, 0x10) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x2c, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) [ 669.716397][T17091] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 669.746630][T17094] IPVS: length: 68 != 24 [ 669.835230][ T3674] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 670.195527][ T3674] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.206699][ T3674] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.217166][ T3674] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 670.226463][ T3674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.235942][ T3674] usb 6-1: config 0 descriptor?? [ 670.476040][T17077] UDC core: couldn't find an available UDC or it's busy: -16 [ 670.483497][T17077] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 670.916744][ T3674] saitek 0003:0738:1709.0048: unknown main item tag 0x0 [ 670.926852][ T3674] saitek 0003:0738:1709.0048: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 [ 671.117671][ T4258] usb 6-1: USB disconnect, device number 36 07:39:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x8, 0x101, {0x101, 0xf, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f0000000080)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x8, "2fd1dc65"}, @global=@item_4={0x3, 0x1, 0xb, "21e8a5ee"}, @main=@item_4={0x3, 0x0, 0xb, "4efb48b7"}, @global=@item_012={0x1, 0x1, 0x5, "15"}, @global=@item_4={0x3, 0x1, 0x5, '(H-c'}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x1, 0x1, {0x22, 0xb3f}}}}, &(0x7f0000000540)={0x18, &(0x7f00000002c0)={0xc0, 0x0, 0xfb, "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"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xfc}, &(0x7f00000004c0), &(0x7f0000000500)={0x20, 0x3, 0x1, 0x92}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$cdc_ecm(0x1510f51054c511d9, 0x6c, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x0, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x20, {{0xa, 0x24, 0x6, 0x0, 0x0, "b8b04630a5"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x0, 0x1}, [@call_mgmt={0x5}, @country_functional={0xc, 0x24, 0x7, 0x5, 0xffff, [0x401, 0x3, 0xb6]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfb, 0x14}}], {{0x9, 0x5, 0x82, 0x2, 0x18f, 0xe0, 0xbe, 0x6f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x6, 0x9c}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0xfb, 0x9f, 0x1, 0x58, 0x2a}, 0x27, &(0x7f0000000640)={0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x8, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x3, 0x4c}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "4938cf97861989fcaf9a9caaedcc02cd"}]}, 0x9, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x446}}, {0x62, &(0x7f0000000740)=@string={0x62, 0x3, "91a28138ae471ac2628bc085d9e7f628fca57b98202c9930adcadc6730fd5ad8548707a95f78646714e5c728e0a6ba8b5ceb75a661e3c22d4ac0caebca44346c404a61e7c203d1502be588cd2d3ec5984bc2c8d723e4c842f5a5dacc0598d827"}}, {0x94, &(0x7f00000007c0)=@string={0x94, 0x3, "cb4db72abac2606f3702b96d5fe884ef484245e72634fa9f7f1fc452403fbafab7f49835daa71683b1a8b609c28d22fbce8b0b9959058bb59bc58770f6069643203af295b65760ad7909a6fd7421ebb4d51893ec74f010ea50bc627b571bc8602bf6782956117d7fbdaa288989318a67c32fc695c094f8d5344c468250dc2fe2cb8e3b44f3540fc415db05e51ce3833122e3"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x4001}}]}) syz_usb_control_io(r2, &(0x7f0000000b40)={0x18, &(0x7f0000000a00)={0x40, 0x4, 0xa, {0xa, 0x2, "d627fce06c9b1dbd"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x4, 0xe1, "201bdfa2", "736bcda1"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x1, 0x9, 0x40, 0x52, 0x4d9}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000b80)={0x0, 0xb, 0x33, "48645e1454eba8b3ea43f12a4b72bdf80d78b300746790a23ea67e43058b3cc9f78d9dc770fc8c0c43eb0b5c1b320ddd6ed840"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000c80)={0x20, 0x0, 0x8, {0x8, 0x10, [0x0]}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0xe4}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "4cb6"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000e00)={0x40, 0x17, 0x6}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "14a7"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x8f}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x9}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000054db2a0899041f1086700102030109022d0001000000000904000002285f5b00092402020000000000090503030000000000090584", @ANYRES64], 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x8, 0x101, {0x101, 0xf, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, &(0x7f0000000080)={0x0, 0x22, 0x16, {[@local=@item_4={0x3, 0x2, 0x8, "2fd1dc65"}, @global=@item_4={0x3, 0x1, 0xb, "21e8a5ee"}, @main=@item_4={0x3, 0x0, 0xb, "4efb48b7"}, @global=@item_012={0x1, 0x1, 0x5, "15"}, @global=@item_4={0x3, 0x1, 0x5, '(H-c'}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x1, 0x1, {0x22, 0xb3f}}}}, &(0x7f0000000540)={0x18, &(0x7f00000002c0)={0xc0, 0x0, 0xfb, "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"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xfc}, &(0x7f00000004c0), &(0x7f0000000500)={0x20, 0x3, 0x1, 0x92}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect$cdc_ecm(0x1510f51054c511d9, 0x6c, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x0, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x20, {{0xa, 0x24, 0x6, 0x0, 0x0, "b8b04630a5"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x0, 0x1}, [@call_mgmt={0x5}, @country_functional={0xc, 0x24, 0x7, 0x5, 0xffff, [0x401, 0x3, 0xb6]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfb, 0x14}}], {{0x9, 0x5, 0x82, 0x2, 0x18f, 0xe0, 0xbe, 0x6f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x6, 0x9c}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0xfb, 0x9f, 0x1, 0x58, 0x2a}, 0x27, &(0x7f0000000640)={0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x8, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x3, 0x4c}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "4938cf97861989fcaf9a9caaedcc02cd"}]}, 0x9, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x446}}, {0x62, &(0x7f0000000740)=@string={0x62, 0x3, "91a28138ae471ac2628bc085d9e7f628fca57b98202c9930adcadc6730fd5ad8548707a95f78646714e5c728e0a6ba8b5ceb75a661e3c22d4ac0caebca44346c404a61e7c203d1502be588cd2d3ec5984bc2c8d723e4c842f5a5dacc0598d827"}}, {0x94, &(0x7f00000007c0)=@string={0x94, 0x3, "cb4db72abac2606f3702b96d5fe884ef484245e72634fa9f7f1fc452403fbafab7f49835daa71683b1a8b609c28d22fbce8b0b9959058bb59bc58770f6069643203af295b65760ad7909a6fd7421ebb4d51893ec74f010ea50bc627b571bc8602bf6782956117d7fbdaa288989318a67c32fc695c094f8d5344c468250dc2fe2cb8e3b44f3540fc415db05e51ce3833122e3"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x4001}}]}) (async) syz_usb_control_io(r2, &(0x7f0000000b40)={0x18, &(0x7f0000000a00)={0x40, 0x4, 0xa, {0xa, 0x2, "d627fce06c9b1dbd"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x4, 0xe1, "201bdfa2", "736bcda1"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x1, 0x9, 0x40, 0x52, 0x4d9}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000b80)={0x0, 0xb, 0x33, "48645e1454eba8b3ea43f12a4b72bdf80d78b300746790a23ea67e43058b3cc9f78d9dc770fc8c0c43eb0b5c1b320ddd6ed840"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000c80)={0x20, 0x0, 0x8, {0x8, 0x10, [0x0]}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0xe4}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "4cb6"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000e00)={0x40, 0x17, 0x6}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "14a7"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x8f}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x9}}) (async) 07:39:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053182c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) fstat(r0, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000080)=""/68, &(0x7f0000000100)=0x44) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0xf9, 0x0, @buffer={0x0, 0x2, &(0x7f0000000140)=""/2}, &(0x7f0000000240)="241572935d3c5de1a8f59f910d922ec16372345b76beb386975f81827a0632adb49d366f95e5c34ecbd3c0686d50cd5d477a6d0f38964fa1c73ddf7170caf43c55a0e2332c48885ff33df37b6795bb43dec90aae37f9ac8246cc8f8076bbe446b94a5d70598a767af6fa82a98fabc5eda0564fbc4b356431eb826bfd61b291cdf5bef77b1516a6eb419c93639bc0cb4c60ffeb78396f3603a365b2b61d4406b9496c5a5393e53730c182570c03b52b770114123e9e6d5715cb19bc0456287184d8eb1def3b0185f19a66eb56791127bbfb4c0af12fc61f21f724e928f5032d57e3458b6a1ed4b162dcf4cd0899f46eb56ffadcd8b6cef8a3a9", &(0x7f0000000340)=""/180, 0x8001, 0x10024, 0xffffffffffffffff, &(0x7f0000000180)}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) (async) fstat(r0, &(0x7f0000000000)) (async) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000080)=""/68, &(0x7f0000000100)=0x44) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0xf9, 0x0, @buffer={0x0, 0x2, &(0x7f0000000140)=""/2}, &(0x7f0000000240)="241572935d3c5de1a8f59f910d922ec16372345b76beb386975f81827a0632adb49d366f95e5c34ecbd3c0686d50cd5d477a6d0f38964fa1c73ddf7170caf43c55a0e2332c48885ff33df37b6795bb43dec90aae37f9ac8246cc8f8076bbe446b94a5d70598a767af6fa82a98fabc5eda0564fbc4b356431eb826bfd61b291cdf5bef77b1516a6eb419c93639bc0cb4c60ffeb78396f3603a365b2b61d4406b9496c5a5393e53730c182570c03b52b770114123e9e6d5715cb19bc0456287184d8eb1def3b0185f19a66eb56791127bbfb4c0af12fc61f21f724e928f5032d57e3458b6a1ed4b162dcf4cd0899f46eb56ffadcd8b6cef8a3a9", &(0x7f0000000340)=""/180, 0x8001, 0x10024, 0xffffffffffffffff, &(0x7f0000000180)}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) (async) 07:39:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x3}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:37 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xc780, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, {0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x8}, r1, 0x3f}}, 0x48) r2 = signalfd(r0, &(0x7f0000000100)={[0xfffffffd, 0x3]}, 0x8) write$binfmt_elf64(r2, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x9ac) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @ib={0x1b, 0x6, 0x7ff, {"429c496880e0cc6fd022f4fa9afe8c08"}, 0xfff, 0x78, 0x4}}}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7816, @private1, 0x1}, {0xa, 0x4e23, 0x2, @local, 0x7f}, 0xffffffffffffffff, 0x4}}, 0x48) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000240)={0x76, 0x80, 0x20000, {r2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) [ 671.661392][T17116] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 671.675974][T17113] IPVS: length: 68 != 24 [ 671.688539][T17116] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f00006da000/0x3000)=nil, 0x3000, 0x1000008, 0x12, r0, 0x0) [ 671.717197][T17115] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053282c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:37 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x4}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xc780, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, {0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x8}, r1, 0x3f}}, 0x48) (async) r2 = signalfd(r0, &(0x7f0000000100)={[0xfffffffd, 0x3]}, 0x8) write$binfmt_elf64(r2, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x9ac) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @ib={0x1b, 0x6, 0x7ff, {"429c496880e0cc6fd022f4fa9afe8c08"}, 0xfff, 0x78, 0x4}}}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7816, @private1, 0x1}, {0xa, 0x4e23, 0x2, @local, 0x7f}, 0xffffffffffffffff, 0x4}}, 0x48) (async) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000240)={0x76, 0x80, 0x20000, {r2}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) 07:39:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f00006da000/0x3000)=nil, 0x3000, 0x1000008, 0x12, r0, 0x0) [ 671.805262][T17129] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 671.834714][T17129] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 671.866425][T17134] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 671.965299][T15010] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 672.335363][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.346411][T15010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.356963][T15010] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 672.366690][T15010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.376415][T15010] usb 6-1: config 0 descriptor?? [ 672.617178][T17126] UDC core: couldn't find an available UDC or it's busy: -16 [ 672.624581][T17126] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.067933][T15010] saitek 0003:0738:1709.0049: unknown main item tag 0x0 [ 673.077120][T15010] saitek 0003:0738:1709.0049: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 07:39:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x7, 0x34, {0x34, 0x31, "78a3087f9c01a8d57111cd055dde597dae520885b03f0e39173f424008b4c3f90254ca48461a61cad41ebf1d7a3b3beec541"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f00000000c0)={0x0, 0x22, 0x16, {[@main=@item_4={0x3, 0x0, 0x8, "c593762b"}, @global=@item_4={0x3, 0x1, 0x2, "b18190b2"}, @local=@item_4={0x3, 0x2, 0x5, "9bfde9a4"}, @global=@item_012={0x1, 0x1, 0x5, "80"}, @main=@item_012={0x1, 0x0, 0xa, "9e"}, @main=@item_012={0x2, 0x0, 0xc, "904a"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0xbf}}}}, &(0x7f0000000440)={0x18, &(0x7f00000001c0)={0x20, 0x6, 0xe2, "ab182478b6cefc83c5bff3426af94d6a375f281d072fd576bbd10a7eea6a7498756b006f5e016f95fbb358bf4f4eb09b32b27caf5decbaf96c1575042a3a42cddd23c157bf8a9669ab729f839c173dc418b747211e7365f66615589bfc7e2ff43d77a93e80d0b1644b5639a99e31e13ed1bf598c89f59163ac980dad72f9fc16f4f517be47fa8d6f07ffece34902d8625bf9575a2aa5999bb6c29d73d71a8e5c0aa5e4454839dce9a2afe0cc8362d1b6e2f8f048ace40d55e3b01e427bbb8db83d078405e3c31829f8585662ff693eda4f85c1507b99ea6c9e0456d02a5ec99e8825"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xca}, &(0x7f0000000340)={0x20, 0x1, 0x9f, "fa024f9f37fb52ba1cd13bfaffc45701faf92b913909bca50b8d6ed4497fc66255580de00a324bbb756ffdee81621e82d6cc8b5756b4db93fbbf543ab31272ecf2e9d6e904567463f43dc3e41122fcb8a5c52107dacdf18c85dfad49c520febf2338f395d64cb7ef6777e453788359494986e6abde7a9d6aa8a74834c8a57d8280982f970eba94801c56cfd2a064f4eb5cb14dac2c5a912f726bc15c0b919c"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x4}}) 07:39:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x5}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053382c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:39 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f00006da000/0x3000)=nil, 0x3000, 0x1000008, 0x12, r0, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) mmap(&(0x7f00006da000/0x3000)=nil, 0x3000, 0x1000008, 0x12, r0, 0x0) (async) 07:39:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xc780, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, {0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x8}, r1, 0x3f}}, 0x48) r2 = signalfd(r0, &(0x7f0000000100)={[0xfffffffd, 0x3]}, 0x8) write$binfmt_elf64(r2, &(0x7f0000000f80)=ANY=[@ANYBLOB="7f454c460701200105000000000000000200060080000000290000000000000040000000000000005100000000000000ea060000400038000100d2202aff0600060000000400000004000000000000008000000000000000f10000000000000001000080000000000300000000000000010001000000000002000000810000000400000000000000010001000000000000fefffffffffffffb000000000000000000010000000000020000000000000047acd887d00f866fdf5e9a008fe0a42b78787fca08702a2366e809e82ecec8aad556981840c3dbcb0d50d563bc47d03546e26bb8350c610adf93083a1800b75b97052346bdb524e9fcf1c1ad97a77c0d5f1f1b1fb74d027652c17430f35222c42e79212ca7062048044c7c50be8225cc8128c126bcff414e0628d8362ac87721abafb4553d4b06d82400aa21293d7638182ed7adc87bccb1240daaa611a481cfd989b7ef15b1d26eaa5bd6f3cc23801655790cd8c6b96a08d1251da75d4fae0433a9e101461035d9b1c3f7a3307efffb62d377324fb7b7f7bb98b0752f7a76333126b71fbf86787390718f442c0319ad2edf6e1ea112b237a752957a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005"], 0x9ac) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @ib={0x1b, 0x6, 0x7ff, {"429c496880e0cc6fd022f4fa9afe8c08"}, 0xfff, 0x78, 0x4}}}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7816, @private1, 0x1}, {0xa, 0x4e23, 0x2, @local, 0x7f}, 0xffffffffffffffff, 0x4}}, 0x48) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000240)={0x76, 0x80, 0x20000, {r2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xc780, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, {0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x8}, r1, 0x3f}}, 0x48) (async) signalfd(r0, &(0x7f0000000100)={[0xfffffffd, 0x3]}, 0x8) (async) write$binfmt_elf64(r2, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x9ac) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @ib={0x1b, 0x6, 0x7ff, {"429c496880e0cc6fd022f4fa9afe8c08"}, 0xfff, 0x78, 0x4}}}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7816, @private1, 0x1}, {0xa, 0x4e23, 0x2, @local, 0x7f}, 0xffffffffffffffff, 0x4}}, 0x48) (async) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000240)={0x76, 0x80, 0x20000, {r2}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) [ 673.269559][T17126] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.269633][T17144] UDC core: couldn't find an available UDC or it's busy: -16 [ 673.285801][T17144] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.293410][T17126] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 673.312312][ T3676] usb 6-1: USB disconnect, device number 37 07:39:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0xef, 0xf9, @buffer={0x0, 0x5f, &(0x7f0000000000)=""/95}, &(0x7f0000000080)="36b82e98ba99416eb7ae664856c28479365d54041786dfb783333ca150d6718753656c6c57701fd6d0791c07349bc9bae66c8d0df64bd125e21a2b98dd88d8e6430c1d67a982e9e42b1ad39a77c24230d1b1462737ef0f8f39804bda737122030e8cb1761bf0f9e7eea3ad2e1977cc19ae68f6cb34acd639a22def1d493f2fb43021cbf08e54e2942b0648b9c15fef3936a290407494b367b2c6d82671155d7266ba55c16d80349bc8ba915496895ff4649fd96fb4359ef9a20719ceb8ae3500b52b0e88427dcbee28c54a8d750f476a7df1b658e0caaa17c12b11bb935e938d0dfb05bb28c6a36ea33a6e06909033", &(0x7f0000000240)=""/181, 0x8, 0x2d82b2ff8f120b84, 0x1, &(0x7f0000000180)}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 673.351202][T17153] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 673.351965][T17155] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 673.388136][T17153] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:39 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x6}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053482c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x7}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 673.532425][T17172] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:39 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 673.575377][T17176] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 673.775264][ T3676] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 674.155621][ T3676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.166601][ T3676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.176792][ T3676] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 674.186081][ T3676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.203975][ T3676] usb 6-1: config 0 descriptor?? [ 674.688097][ T3676] saitek 0003:0738:1709.004A: unknown main item tag 0x0 [ 674.698270][ T3676] saitek 0003:0738:1709.004A: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 07:39:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x7, 0x34, {0x34, 0x31, "78a3087f9c01a8d57111cd055dde597dae520885b03f0e39173f424008b4c3f90254ca48461a61cad41ebf1d7a3b3beec541"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f00000000c0)={0x0, 0x22, 0x16, {[@main=@item_4={0x3, 0x0, 0x8, "c593762b"}, @global=@item_4={0x3, 0x1, 0x2, "b18190b2"}, @local=@item_4={0x3, 0x2, 0x5, "9bfde9a4"}, @global=@item_012={0x1, 0x1, 0x5, "80"}, @main=@item_012={0x1, 0x0, 0xa, "9e"}, @main=@item_012={0x2, 0x0, 0xc, "904a"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0xbf}}}}, &(0x7f0000000440)={0x18, &(0x7f00000001c0)={0x20, 0x6, 0xe2, "ab182478b6cefc83c5bff3426af94d6a375f281d072fd576bbd10a7eea6a7498756b006f5e016f95fbb358bf4f4eb09b32b27caf5decbaf96c1575042a3a42cddd23c157bf8a9669ab729f839c173dc418b747211e7365f66615589bfc7e2ff43d77a93e80d0b1644b5639a99e31e13ed1bf598c89f59163ac980dad72f9fc16f4f517be47fa8d6f07ffece34902d8625bf9575a2aa5999bb6c29d73d71a8e5c0aa5e4454839dce9a2afe0cc8362d1b6e2f8f048ace40d55e3b01e427bbb8db83d078405e3c31829f8585662ff693eda4f85c1507b99ea6c9e0456d02a5ec99e8825"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xca}, &(0x7f0000000340)={0x20, 0x1, 0x9f, "fa024f9f37fb52ba1cd13bfaffc45701faf92b913909bca50b8d6ed4497fc66255580de00a324bbb756ffdee81621e82d6cc8b5756b4db93fbbf543ab31272ecf2e9d6e904567463f43dc3e41122fcb8a5c52107dacdf18c85dfad49c520febf2338f395d64cb7ef6777e453788359494986e6abde7a9d6aa8a74834c8a57d8280982f970eba94801c56cfd2a064f4eb5cb14dac2c5a912f726bc15c0b919c"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x4}}) (rerun: 64) 07:39:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0xef, 0xf9, @buffer={0x0, 0x5f, &(0x7f0000000000)=""/95}, &(0x7f0000000080)="36b82e98ba99416eb7ae664856c28479365d54041786dfb783333ca150d6718753656c6c57701fd6d0791c07349bc9bae66c8d0df64bd125e21a2b98dd88d8e6430c1d67a982e9e42b1ad39a77c24230d1b1462737ef0f8f39804bda737122030e8cb1761bf0f9e7eea3ad2e1977cc19ae68f6cb34acd639a22def1d493f2fb43021cbf08e54e2942b0648b9c15fef3936a290407494b367b2c6d82671155d7266ba55c16d80349bc8ba915496895ff4649fd96fb4359ef9a20719ceb8ae3500b52b0e88427dcbee28c54a8d750f476a7df1b658e0caaa17c12b11bb935e938d0dfb05bb28c6a36ea33a6e06909033", &(0x7f0000000240)=""/181, 0x8, 0x2d82b2ff8f120b84, 0x1, &(0x7f0000000180)}) (async, rerun: 64) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (rerun: 64) 07:39:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137353e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:42 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x8}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2127e081e91463af0855064f3dd845d0968c40930483f6be409ea77481c4ddd6903d451310f50c1229c12f5c3c154ff60f9f3d6b38121b9ceb881e5a6c953cc57220ef82ac77dc5f13fa0aeff20049d4e4db34f48226682755582827c76e8b5081014efcb8b16b3930cb741bfce9a9ebc0c0832f8018e9eff3b24fe56d8459e8ad0c8b4f113167e7d8459385de27d43767389192dbbfb8206a224e2e9237a4c8199d174c6f46f0490a77b4d59f61f3fada9daea5f306", @ANYRESDEC=r3, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESHEX=r1], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) [ 676.422864][ T3668] usb 6-1: USB disconnect, device number 38 [ 676.441754][T17183] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 676.446068][T17186] __nla_validate_parse: 2 callbacks suppressed [ 676.446084][T17186] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2127e081e91463af0855064f3dd845d0968c40930483f6be409ea77481c4ddd6903d451310f50c1229c12f5c3c154ff60f9f3d6b38121b9ceb881e5a6c953cc57220ef82ac77dc5f13fa0aeff20049d4e4db34f48226682755582827c76e8b5081014efcb8b16b3930cb741bfce9a9ebc0c0832f8018e9eff3b24fe56d8459e8ad0c8b4f113167e7d8459385de27d43767389192dbbfb8206a224e2e9237a4c8199d174c6f46f0490a77b4d59f61f3fada9daea5f306", @ANYRESDEC=r3, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESHEX=r1], 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) 07:39:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0xef, 0xf9, @buffer={0x0, 0x5f, &(0x7f0000000000)=""/95}, &(0x7f0000000080)="36b82e98ba99416eb7ae664856c28479365d54041786dfb783333ca150d6718753656c6c57701fd6d0791c07349bc9bae66c8d0df64bd125e21a2b98dd88d8e6430c1d67a982e9e42b1ad39a77c24230d1b1462737ef0f8f39804bda737122030e8cb1761bf0f9e7eea3ad2e1977cc19ae68f6cb34acd639a22def1d493f2fb43021cbf08e54e2942b0648b9c15fef3936a290407494b367b2c6d82671155d7266ba55c16d80349bc8ba915496895ff4649fd96fb4359ef9a20719ceb8ae3500b52b0e88427dcbee28c54a8d750f476a7df1b658e0caaa17c12b11bb935e938d0dfb05bb28c6a36ea33a6e06909033", &(0x7f0000000240)=""/181, 0x8, 0x2d82b2ff8f120b84, 0x1, &(0x7f0000000180)}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 676.503212][T17183] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:39:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x9}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:42 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37020b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2127e081e91463af0855064f3dd845d0968c40930483f6be409ea77481c4ddd6903d451310f50c1229c12f5c3c154ff60f9f3d6b38121b9ceb881e5a6c953cc57220ef82ac77dc5f13fa0aeff20049d4e4db34f48226682755582827c76e8b5081014efcb8b16b3930cb741bfce9a9ebc0c0832f8018e9eff3b24fe56d8459e8ad0c8b4f113167e7d8459385de27d43767389192dbbfb8206a224e2e9237a4c8199d174c6f46f0490a77b4d59f61f3fada9daea5f306", @ANYRESDEC=r3, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESHEX=r1], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2127e081e91463af0855064f3dd845d0968c40930483f6be409ea77481c4ddd6903d451310f50c1229c12f5c3c154ff60f9f3d6b38121b9ceb881e5a6c953cc57220ef82ac77dc5f13fa0aeff20049d4e4db34f48226682755582827c76e8b5081014efcb8b16b3930cb741bfce9a9ebc0c0832f8018e9eff3b24fe56d8459e8ad0c8b4f113167e7d8459385de27d43767389192dbbfb8206a224e2e9237a4c8199d174c6f46f0490a77b4d59f61f3fada9daea5f306", @ANYRESDEC=r3, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRESHEX=r1], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r4, 0x2}}, 0x18) (async) [ 676.663704][T17208] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.664956][T17211] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 676.723749][T17211] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 676.835384][ T3668] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 677.195481][ T3668] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.206440][ T3668] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.216499][ T3668] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 677.225889][ T3668] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.237262][ T3668] usb 6-1: config 0 descriptor?? [ 677.717269][ T3668] saitek 0003:0738:1709.004B: unknown main item tag 0x0 [ 677.725705][ T3668] saitek 0003:0738:1709.004B: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 07:39:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x7, 0x34, {0x34, 0x31, "78a3087f9c01a8d57111cd055dde597dae520885b03f0e39173f424008b4c3f90254ca48461a61cad41ebf1d7a3b3beec541"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f00000000c0)={0x0, 0x22, 0x16, {[@main=@item_4={0x3, 0x0, 0x8, "c593762b"}, @global=@item_4={0x3, 0x1, 0x2, "b18190b2"}, @local=@item_4={0x3, 0x2, 0x5, "9bfde9a4"}, @global=@item_012={0x1, 0x1, 0x5, "80"}, @main=@item_012={0x1, 0x0, 0xa, "9e"}, @main=@item_012={0x2, 0x0, 0xc, "904a"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0xbf}}}}, &(0x7f0000000440)={0x18, &(0x7f00000001c0)={0x20, 0x6, 0xe2, "ab182478b6cefc83c5bff3426af94d6a375f281d072fd576bbd10a7eea6a7498756b006f5e016f95fbb358bf4f4eb09b32b27caf5decbaf96c1575042a3a42cddd23c157bf8a9669ab729f839c173dc418b747211e7365f66615589bfc7e2ff43d77a93e80d0b1644b5639a99e31e13ed1bf598c89f59163ac980dad72f9fc16f4f517be47fa8d6f07ffece34902d8625bf9575a2aa5999bb6c29d73d71a8e5c0aa5e4454839dce9a2afe0cc8362d1b6e2f8f048ace40d55e3b01e427bbb8db83d078405e3c31829f8585662ff693eda4f85c1507b99ea6c9e0456d02a5ec99e8825"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xca}, &(0x7f0000000340)={0x20, 0x1, 0x9f, "fa024f9f37fb52ba1cd13bfaffc45701faf92b913909bca50b8d6ed4497fc66255580de00a324bbb756ffdee81621e82d6cc8b5756b4db93fbbf543ab31272ecf2e9d6e904567463f43dc3e41122fcb8a5c52107dacdf18c85dfad49c520febf2338f395d64cb7ef6777e453788359494986e6abde7a9d6aa8a74834c8a57d8280982f970eba94801c56cfd2a064f4eb5cb14dac2c5a912f726bc15c0b919c"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x4}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x738, 0x1709, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x7, 0x34, {0x34, 0x31, "78a3087f9c01a8d57111cd055dde597dae520885b03f0e39173f424008b4c3f90254ca48461a61cad41ebf1d7a3b3beec541"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f00000000c0)={0x0, 0x22, 0x16, {[@main=@item_4={0x3, 0x0, 0x8, "c593762b"}, @global=@item_4={0x3, 0x1, 0x2, "b18190b2"}, @local=@item_4={0x3, 0x2, 0x5, "9bfde9a4"}, @global=@item_012={0x1, 0x1, 0x5, "80"}, @main=@item_012={0x1, 0x0, 0xa, "9e"}, @main=@item_012={0x2, 0x0, 0xc, "904a"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0xbf}}}}, &(0x7f0000000440)={0x18, &(0x7f00000001c0)={0x20, 0x6, 0xe2, "ab182478b6cefc83c5bff3426af94d6a375f281d072fd576bbd10a7eea6a7498756b006f5e016f95fbb358bf4f4eb09b32b27caf5decbaf96c1575042a3a42cddd23c157bf8a9669ab729f839c173dc418b747211e7365f66615589bfc7e2ff43d77a93e80d0b1644b5639a99e31e13ed1bf598c89f59163ac980dad72f9fc16f4f517be47fa8d6f07ffece34902d8625bf9575a2aa5999bb6c29d73d71a8e5c0aa5e4454839dce9a2afe0cc8362d1b6e2f8f048ace40d55e3b01e427bbb8db83d078405e3c31829f8585662ff693eda4f85c1507b99ea6c9e0456d02a5ec99e8825"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xca}, &(0x7f0000000340)={0x20, 0x1, 0x9f, "fa024f9f37fb52ba1cd13bfaffc45701faf92b913909bca50b8d6ed4497fc66255580de00a324bbb756ffdee81621e82d6cc8b5756b4db93fbbf543ab31272ecf2e9d6e904567463f43dc3e41122fcb8a5c52107dacdf18c85dfad49c520febf2338f395d64cb7ef6777e453788359494986e6abde7a9d6aa8a74834c8a57d8280982f970eba94801c56cfd2a064f4eb5cb14dac2c5a912f726bc15c0b919c"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x4}}) (async) 07:39:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200) dup2(r1, r2) 07:39:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0xe}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:45 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:45 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37030b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) [ 679.490770][ T4258] usb 6-1: USB disconnect, device number 39 [ 679.525513][T17225] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:39:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) 07:39:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200) dup2(r1, r2) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) (async) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200) (async) dup2(r1, r2) (async) 07:39:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0xf}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 679.554966][T17225] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 679.585111][T17223] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) 07:39:45 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37050b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:45 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) [ 679.736236][T17244] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 679.777037][T17244] netlink: 210100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 679.789968][T17250] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 679.955223][ T4258] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 680.315782][ T4258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.326923][ T4258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.337447][ T4258] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 680.347346][ T4258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.357956][ T4258] usb 6-1: config 0 descriptor?? [ 680.846549][ T4258] saitek 0003:0738:1709.004C: unknown main item tag 0x0 [ 680.854476][ T4258] saitek 0003:0738:1709.004C: hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.5-1/input0 [ 681.398516][T17251] UDC core: couldn't find an available UDC or it's busy: -16 [ 681.406447][T17251] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:39:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x44f, 0xb65d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3d, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e0"], 0x0, 0x0, 0x0}, 0x0) 07:39:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x60}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) 07:39:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) (async, rerun: 32) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200) (rerun: 32) dup2(r1, r2) 07:39:48 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:48 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37060b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r4, 0xffffffff}}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r6}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6, 0x1000}}, 0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x9}}, 0x10) [ 682.598867][ T4258] usb 6-1: USB disconnect, device number 40 [ 682.610368][T17260] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 07:39:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x2f, 0x4, 0xffff, "ea6e46cfd7006b5fde9032310363390ac31f2691387f07ed10b54f746456479b9e9efe9488b1e766734cc6c65577d7"}) 07:39:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r4, 0xffffffff}}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r6}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6, 0x1000}}, 0x10) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3, 0x9}}, 0x10) 07:39:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 682.648746][T17260] netlink: 210100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 682.672129][T17265] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. 07:39:48 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37070b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 07:39:48 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433"], 0x448}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b1c210008000300", @ANYRES32=r2, @ANYRES16=r4], 0x448}}, 0x0) 07:39:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x2}, @device_a, @random="5c3b61d89e25"}, 0x0, @val={0x8c, 0x18, {0x0, "f2bdeaeb52db", @long="5f79ae7c7ff7fffcd8ceaa1acfa87c39"}}}}]}, 0x58}}, 0x0) [ 682.809260][T17275] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 682.823062][T17278] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 682.836977][T17275] netlink: 210100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 682.863920][T17279] netlink: 1060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 683.045349][ T4258] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 683.405463][ T4258] usb 6-1: config 0 interface 0 altsetting 61 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.418299][ T4258] usb 6-1: config 0 interface 0 altsetting 61 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.428665][ T4258] usb 6-1: config 0 interface 0 has no altsetting 0 [ 683.435616][ T4258] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.40 [ 683.444661][ T4258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.461043][ T4258] usb 6-1: config 0 descriptor?? [ 683.967197][ T4258] hid-thrustmaster 0003:044F:B65D.004D: unknown main item tag 0x0 [ 683.976298][ T4258] hid-thrustmaster 0003:044F:B65D.004D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 683.993049][ T4258] ================================================================== [ 684.001360][ T4258] BUG: KASAN: slab-out-of-bounds in thrustmaster_probe+0x8d5/0xb50 [ 684.009316][ T4258] Read of size 1 at addr ffff88807f643f52 by task kworker/0:9/4258 [ 684.017195][ T4258] [ 684.019525][ T4258] CPU: 0 PID: 4258 Comm: kworker/0:9 Not tainted 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0 [ 684.029690][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.039766][ T4258] Workqueue: usb_hub_wq hub_event [ 684.044813][ T4258] Call Trace: [ 684.048079][ T4258] [ 684.050999][ T4258] dump_stack_lvl+0xcd/0x134 [ 684.055585][ T4258] print_address_description.constprop.0.cold+0x8d/0x336 [ 684.062608][ T4258] ? thrustmaster_probe+0x8d5/0xb50 [ 684.067892][ T4258] ? thrustmaster_probe+0x8d5/0xb50 [ 684.073107][ T4258] kasan_report.cold+0x83/0xdf [ 684.077891][ T4258] ? thrustmaster_probe+0x8d5/0xb50 [ 684.083084][ T4258] thrustmaster_probe+0x8d5/0xb50 [ 684.088128][ T4258] ? thrustmaster_model_handler+0x370/0x370 [ 684.094015][ T4258] ? hid_match_id+0x27a/0x300 [ 684.098760][ T4258] ? thrustmaster_model_handler+0x370/0x370 [ 684.104661][ T4258] hid_device_probe+0x2bd/0x3f0 [ 684.109528][ T4258] ? hid_match_device+0x390/0x390 [ 684.114550][ T4258] really_probe+0x245/0xcc0 [ 684.119109][ T4258] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 684.125613][ T4258] __driver_probe_device+0x338/0x4d0 [ 684.130898][ T4258] driver_probe_device+0x4c/0x1a0 [ 684.135938][ T4258] __device_attach_driver+0x20b/0x2f0 [ 684.141312][ T4258] ? driver_allows_async_probing+0x150/0x150 [ 684.147303][ T4258] bus_for_each_drv+0x15f/0x1e0 [ 684.152157][ T4258] ? bus_for_each_dev+0x1d0/0x1d0 [ 684.157181][ T4258] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 684.163004][ T4258] ? lockdep_hardirqs_on+0x79/0x100 [ 684.168199][ T4258] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 684.174009][ T4258] __device_attach+0x228/0x4a0 [ 684.178880][ T4258] ? device_driver_attach+0x210/0x210 [ 684.184274][ T4258] ? kobject_uevent_env+0x2ac/0x1600 [ 684.189630][ T4258] bus_probe_device+0x1e4/0x290 [ 684.194484][ T4258] device_add+0xb83/0x1e20 [ 684.198909][ T4258] ? up_write+0x148/0x470 [ 684.203243][ T4258] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 684.209482][ T4258] ? __debugfs_create_file+0x392/0x540 [ 684.215020][ T4258] hid_add_device+0x344/0x9d0 [ 684.219695][ T4258] ? lockdep_init_map_type+0x21a/0x7f0 [ 684.225152][ T4258] ? modalias_show+0x150/0x150 [ 684.229951][ T4258] ? lockdep_init_map_type+0x21a/0x7f0 [ 684.235422][ T4258] ? __raw_spin_lock_init+0x36/0x110 [ 684.240707][ T4258] usbhid_probe+0xbf4/0x1070 [ 684.245470][ T4258] usb_probe_interface+0x315/0x7f0 [ 684.250646][ T4258] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 684.256022][ T4258] really_probe+0x245/0xcc0 [ 684.260550][ T4258] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 684.267185][ T4258] __driver_probe_device+0x338/0x4d0 [ 684.272473][ T4258] driver_probe_device+0x4c/0x1a0 [ 684.277498][ T4258] __device_attach_driver+0x20b/0x2f0 [ 684.283061][ T4258] ? driver_allows_async_probing+0x150/0x150 [ 684.289053][ T4258] bus_for_each_drv+0x15f/0x1e0 [ 684.293915][ T4258] ? bus_for_each_dev+0x1d0/0x1d0 [ 684.298929][ T4258] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 684.304731][ T4258] ? lockdep_hardirqs_on+0x79/0x100 [ 684.309950][ T4258] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 684.315747][ T4258] __device_attach+0x228/0x4a0 [ 684.320508][ T4258] ? device_driver_attach+0x210/0x210 [ 684.325879][ T4258] ? kobject_uevent_env+0x2ac/0x1600 [ 684.331167][ T4258] bus_probe_device+0x1e4/0x290 [ 684.336023][ T4258] device_add+0xb83/0x1e20 [ 684.340439][ T4258] ? mark_held_locks+0x9f/0xe0 [ 684.345226][ T4258] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 684.351485][ T4258] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 684.357281][ T4258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 684.363521][ T4258] usb_set_configuration+0x101e/0x1900 [ 684.368989][ T4258] usb_generic_driver_probe+0xba/0x100 [ 684.374448][ T4258] usb_probe_device+0xd9/0x2c0 [ 684.379202][ T4258] ? usb_driver_release_interface+0x180/0x180 [ 684.385265][ T4258] really_probe+0x245/0xcc0 [ 684.389782][ T4258] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 684.396086][ T4258] __driver_probe_device+0x338/0x4d0 [ 684.401403][ T4258] driver_probe_device+0x4c/0x1a0 [ 684.406434][ T4258] __device_attach_driver+0x20b/0x2f0 [ 684.411817][ T4258] ? driver_allows_async_probing+0x150/0x150 [ 684.417789][ T4258] bus_for_each_drv+0x15f/0x1e0 [ 684.422645][ T4258] ? bus_for_each_dev+0x1d0/0x1d0 [ 684.427660][ T4258] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 684.433546][ T4258] ? lockdep_hardirqs_on+0x79/0x100 [ 684.438738][ T4258] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 684.444629][ T4258] __device_attach+0x228/0x4a0 [ 684.449435][ T4258] ? device_driver_attach+0x210/0x210 [ 684.454888][ T4258] ? kobject_uevent_env+0x2ac/0x1600 [ 684.460170][ T4258] bus_probe_device+0x1e4/0x290 [ 684.465034][ T4258] device_add+0xb83/0x1e20 [ 684.469916][ T4258] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 684.476193][ T4258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 684.482451][ T4258] usb_new_device.cold+0x63f/0x108e [ 684.487691][ T4258] ? hub_disconnect+0x510/0x510 [ 684.492531][ T4258] ? rwlock_bug.part.0+0x90/0x90 [ 684.497464][ T4258] ? _raw_spin_unlock_irq+0x1f/0x40 [ 684.502654][ T4258] hub_event+0x2585/0x44d0 [ 684.507108][ T4258] ? hub_port_debounce+0x3c0/0x3c0 [ 684.512259][ T4258] ? lock_release+0x720/0x720 [ 684.516936][ T4258] ? lock_downgrade+0x6e0/0x6e0 [ 684.521780][ T4258] ? do_raw_spin_lock+0x120/0x2b0 [ 684.526817][ T4258] process_one_work+0x9ac/0x1650 [ 684.531808][ T4258] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 684.537214][ T4258] ? rwlock_bug.part.0+0x90/0x90 [ 684.542147][ T4258] ? _raw_spin_lock_irq+0x41/0x50 [ 684.547169][ T4258] worker_thread+0x657/0x1110 [ 684.551846][ T4258] ? process_one_work+0x1650/0x1650 [ 684.557121][ T4258] kthread+0x2e9/0x3a0 [ 684.561246][ T4258] ? kthread_complete_and_exit+0x40/0x40 [ 684.566892][ T4258] ret_from_fork+0x1f/0x30 [ 684.571324][ T4258] [ 684.574328][ T4258] [ 684.576635][ T4258] Allocated by task 4258: [ 684.580947][ T4258] kasan_save_stack+0x1e/0x40 [ 684.585618][ T4258] __kasan_kmalloc+0xa9/0xd0 [ 684.590221][ T4258] usb_get_configuration+0x1394/0x3b30 [ 684.595673][ T4258] usb_new_device+0x583/0x7d0 [ 684.600359][ T4258] hub_event+0x2585/0x44d0 [ 684.604769][ T4258] process_one_work+0x9ac/0x1650 [ 684.609696][ T4258] worker_thread+0x657/0x1110 [ 684.614392][ T4258] kthread+0x2e9/0x3a0 [ 684.618457][ T4258] ret_from_fork+0x1f/0x30 [ 684.622886][ T4258] [ 684.625197][ T4258] Last potentially related work creation: [ 684.630909][ T4258] kasan_save_stack+0x1e/0x40 [ 684.635603][ T4258] __kasan_record_aux_stack+0xbe/0xd0 [ 684.640970][ T4258] kvfree_call_rcu+0x74/0x990 [ 684.645641][ T4258] cfg80211_update_known_bss+0x833/0xa60 [ 684.651354][ T4258] cfg80211_bss_update+0xef/0x2070 [ 684.656455][ T4258] cfg80211_inform_single_bss_frame_data+0x731/0xf40 [ 684.663118][ T4258] cfg80211_inform_bss_frame_data+0xa7/0xb50 [ 684.669090][ T4258] ieee80211_bss_info_update+0x35b/0xb00 [ 684.674781][ T4258] ieee80211_ibss_rx_queued_mgmt+0x19cf/0x3150 [ 684.680944][ T4258] ieee80211_iface_work+0xa69/0xd00 [ 684.686129][ T4258] process_one_work+0x9ac/0x1650 [ 684.691051][ T4258] worker_thread+0x657/0x1110 [ 684.695718][ T4258] kthread+0x2e9/0x3a0 [ 684.699785][ T4258] ret_from_fork+0x1f/0x30 [ 684.704188][ T4258] [ 684.706493][ T4258] Second to last potentially related work creation: [ 684.713061][ T4258] kasan_save_stack+0x1e/0x40 [ 684.717729][ T4258] __kasan_record_aux_stack+0xbe/0xd0 [ 684.723096][ T4258] kvfree_call_rcu+0x74/0x990 [ 684.727781][ T4258] cfg80211_update_known_bss+0x833/0xa60 [ 684.733451][ T4258] cfg80211_bss_update+0xef/0x2070 [ 684.738555][ T4258] cfg80211_inform_single_bss_frame_data+0x731/0xf40 [ 684.745235][ T4258] cfg80211_inform_bss_frame_data+0xa7/0xb50 [ 684.751233][ T4258] ieee80211_bss_info_update+0x35b/0xb00 [ 684.756885][ T4258] ieee80211_ibss_rx_queued_mgmt+0x19cf/0x3150 [ 684.763029][ T4258] ieee80211_iface_work+0xa69/0xd00 [ 684.768215][ T4258] process_one_work+0x9ac/0x1650 [ 684.773141][ T4258] worker_thread+0x657/0x1110 [ 684.777804][ T4258] kthread+0x2e9/0x3a0 [ 684.781869][ T4258] ret_from_fork+0x1f/0x30 [ 684.786293][ T4258] [ 684.788637][ T4258] The buggy address belongs to the object at ffff88807f643f00 [ 684.788637][ T4258] which belongs to the cache kmalloc-96 of size 96 [ 684.802522][ T4258] The buggy address is located 82 bytes inside of [ 684.802522][ T4258] 96-byte region [ffff88807f643f00, ffff88807f643f60) [ 684.815610][ T4258] The buggy address belongs to the page: [ 684.821223][ T4258] page:ffffea0001fd90c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f643 [ 684.831368][ T4258] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 684.838915][ T4258] raw: 00fff00000000200 ffffea0001ad3540 dead000000000005 ffff888010c41780 [ 684.847515][ T4258] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 684.856091][ T4258] page dumped because: kasan: bad access detected [ 684.862508][ T4258] page_owner tracks the page as allocated [ 684.868221][ T4258] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY), pid 2974, ts 15127662770, free_ts 12672356416 [ 684.884116][ T4258] get_page_from_freelist+0xa72/0x2f50 [ 684.889573][ T4258] __alloc_pages+0x1b2/0x500 [ 684.894154][ T4258] alloc_pages+0x1aa/0x310 [ 684.898623][ T4258] allocate_slab+0x27f/0x3c0 [ 684.903242][ T4258] ___slab_alloc+0xbe1/0x12b0 [ 684.907918][ T4258] __slab_alloc.constprop.0+0x4d/0xa0 [ 684.913280][ T4258] __kmalloc+0x372/0x450 [ 684.917513][ T4258] tomoyo_encode2.part.0+0xe9/0x3a0 [ 684.922744][ T4258] tomoyo_encode+0x28/0x50 [ 684.927152][ T4258] tomoyo_realpath_from_path+0x186/0x620 [ 684.932779][ T4258] tomoyo_check_open_permission+0x272/0x380 [ 684.938660][ T4258] tomoyo_file_open+0xa3/0xd0 [ 684.943328][ T4258] security_file_open+0x45/0xb0 [ 684.948185][ T4258] do_dentry_open+0x358/0x1250 [ 684.952965][ T4258] path_openat+0x1c9e/0x2940 [ 684.957632][ T4258] do_filp_open+0x1aa/0x400 [ 684.962123][ T4258] page last free stack trace: [ 684.966778][ T4258] free_pcp_prepare+0x374/0x870 [ 684.971614][ T4258] free_unref_page+0x19/0x690 [ 684.976281][ T4258] __vunmap+0x798/0xc50 [ 684.980423][ T4258] free_work+0x58/0x70 [ 684.984476][ T4258] process_one_work+0x9ac/0x1650 [ 684.989401][ T4258] worker_thread+0x657/0x1110 [ 684.994066][ T4258] kthread+0x2e9/0x3a0 [ 684.998123][ T4258] ret_from_fork+0x1f/0x30 [ 685.002529][ T4258] [ 685.004838][ T4258] Memory state around the buggy address: [ 685.010448][ T4258] ffff88807f643e00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 685.018520][ T4258] ffff88807f643e80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 685.026612][ T4258] >ffff88807f643f00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 685.034660][ T4258] ^ [ 685.041318][ T4258] ffff88807f643f80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 685.049373][ T4258] ffff88807f644000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 685.057425][ T4258] ================================================================== [ 685.065484][ T4258] Disabling lock debugging due to kernel taint [ 685.072922][ T4258] Kernel panic - not syncing: panic_on_warn set ... [ 685.079513][ T4258] CPU: 0 PID: 4258 Comm: kworker/0:9 Tainted: G B 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0 [ 685.091047][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.101096][ T4258] Workqueue: usb_hub_wq hub_event [ 685.106125][ T4258] Call Trace: [ 685.109393][ T4258] [ 685.112318][ T4258] dump_stack_lvl+0xcd/0x134 [ 685.116908][ T4258] panic+0x2b0/0x6dd [ 685.120847][ T4258] ? __warn_printk+0xf3/0xf3 [ 685.125438][ T4258] ? preempt_schedule_common+0x59/0xc0 [ 685.130895][ T4258] ? thrustmaster_probe+0x8d5/0xb50 [ 685.136091][ T4258] ? preempt_schedule_thunk+0x16/0x18 [ 685.141460][ T4258] ? trace_hardirqs_on+0x38/0x1c0 [ 685.146495][ T4258] ? trace_hardirqs_on+0x51/0x1c0 [ 685.151513][ T4258] ? thrustmaster_probe+0x8d5/0xb50 [ 685.156710][ T4258] ? thrustmaster_probe+0x8d5/0xb50 [ 685.161916][ T4258] end_report.cold+0x63/0x6f [ 685.166511][ T4258] kasan_report.cold+0x71/0xdf [ 685.171278][ T4258] ? thrustmaster_probe+0x8d5/0xb50 [ 685.176472][ T4258] thrustmaster_probe+0x8d5/0xb50 [ 685.181497][ T4258] ? thrustmaster_model_handler+0x370/0x370 [ 685.187384][ T4258] ? hid_match_id+0x27a/0x300 [ 685.192088][ T4258] ? thrustmaster_model_handler+0x370/0x370 [ 685.197983][ T4258] hid_device_probe+0x2bd/0x3f0 [ 685.202839][ T4258] ? hid_match_device+0x390/0x390 [ 685.207867][ T4258] really_probe+0x245/0xcc0 [ 685.212374][ T4258] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 685.218620][ T4258] __driver_probe_device+0x338/0x4d0 [ 685.223910][ T4258] driver_probe_device+0x4c/0x1a0 [ 685.228936][ T4258] __device_attach_driver+0x20b/0x2f0 [ 685.234311][ T4258] ? driver_allows_async_probing+0x150/0x150 [ 685.240290][ T4258] bus_for_each_drv+0x15f/0x1e0 [ 685.245137][ T4258] ? bus_for_each_dev+0x1d0/0x1d0 [ 685.250161][ T4258] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 685.255962][ T4258] ? lockdep_hardirqs_on+0x79/0x100 [ 685.261173][ T4258] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 685.266976][ T4258] __device_attach+0x228/0x4a0 [ 685.271735][ T4258] ? device_driver_attach+0x210/0x210 [ 685.277105][ T4258] ? kobject_uevent_env+0x2ac/0x1600 [ 685.282390][ T4258] bus_probe_device+0x1e4/0x290 [ 685.287240][ T4258] device_add+0xb83/0x1e20 [ 685.291671][ T4258] ? up_write+0x148/0x470 [ 685.295994][ T4258] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 685.302251][ T4258] ? __debugfs_create_file+0x392/0x540 [ 685.307714][ T4258] hid_add_device+0x344/0x9d0 [ 685.312391][ T4258] ? lockdep_init_map_type+0x21a/0x7f0 [ 685.317846][ T4258] ? modalias_show+0x150/0x150 [ 685.322608][ T4258] ? lockdep_init_map_type+0x21a/0x7f0 [ 685.328062][ T4258] ? __raw_spin_lock_init+0x36/0x110 [ 685.333345][ T4258] usbhid_probe+0xbf4/0x1070 [ 685.337935][ T4258] usb_probe_interface+0x315/0x7f0 [ 685.343043][ T4258] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 685.348411][ T4258] really_probe+0x245/0xcc0 [ 685.352913][ T4258] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 685.359156][ T4258] __driver_probe_device+0x338/0x4d0 [ 685.364440][ T4258] driver_probe_device+0x4c/0x1a0 [ 685.369462][ T4258] __device_attach_driver+0x20b/0x2f0 [ 685.374832][ T4258] ? driver_allows_async_probing+0x150/0x150 [ 685.380809][ T4258] bus_for_each_drv+0x15f/0x1e0 [ 685.385655][ T4258] ? bus_for_each_dev+0x1d0/0x1d0 [ 685.390675][ T4258] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 685.396474][ T4258] ? lockdep_hardirqs_on+0x79/0x100 [ 685.401669][ T4258] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 685.407478][ T4258] __device_attach+0x228/0x4a0 [ 685.412237][ T4258] ? device_driver_attach+0x210/0x210 [ 685.417621][ T4258] ? kobject_uevent_env+0x2ac/0x1600 [ 685.422907][ T4258] bus_probe_device+0x1e4/0x290 [ 685.427754][ T4258] device_add+0xb83/0x1e20 [ 685.432167][ T4258] ? mark_held_locks+0x9f/0xe0 [ 685.436931][ T4258] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 685.443187][ T4258] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 685.448989][ T4258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 685.455234][ T4258] usb_set_configuration+0x101e/0x1900 [ 685.460703][ T4258] usb_generic_driver_probe+0xba/0x100 [ 685.466162][ T4258] usb_probe_device+0xd9/0x2c0 [ 685.470917][ T4258] ? usb_driver_release_interface+0x180/0x180 [ 685.476980][ T4258] really_probe+0x245/0xcc0 [ 685.481483][ T4258] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 685.487727][ T4258] __driver_probe_device+0x338/0x4d0 [ 685.493013][ T4258] driver_probe_device+0x4c/0x1a0 [ 685.498045][ T4258] __device_attach_driver+0x20b/0x2f0 [ 685.503412][ T4258] ? driver_allows_async_probing+0x150/0x150 [ 685.509389][ T4258] bus_for_each_drv+0x15f/0x1e0 [ 685.514244][ T4258] ? bus_for_each_dev+0x1d0/0x1d0 [ 685.519265][ T4258] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 685.525084][ T4258] ? lockdep_hardirqs_on+0x79/0x100 [ 685.530282][ T4258] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 685.536094][ T4258] __device_attach+0x228/0x4a0 [ 685.540854][ T4258] ? device_driver_attach+0x210/0x210 [ 685.546224][ T4258] ? kobject_uevent_env+0x2ac/0x1600 [ 685.551517][ T4258] bus_probe_device+0x1e4/0x290 [ 685.556369][ T4258] device_add+0xb83/0x1e20 [ 685.560785][ T4258] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 685.567030][ T4258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 685.573274][ T4258] usb_new_device.cold+0x63f/0x108e [ 685.578473][ T4258] ? hub_disconnect+0x510/0x510 [ 685.583342][ T4258] ? rwlock_bug.part.0+0x90/0x90 [ 685.588280][ T4258] ? _raw_spin_unlock_irq+0x1f/0x40 [ 685.593473][ T4258] hub_event+0x2585/0x44d0 [ 685.597898][ T4258] ? hub_port_debounce+0x3c0/0x3c0 [ 685.603008][ T4258] ? lock_release+0x720/0x720 [ 685.607772][ T4258] ? lock_downgrade+0x6e0/0x6e0 [ 685.612719][ T4258] ? do_raw_spin_lock+0x120/0x2b0 [ 685.617745][ T4258] process_one_work+0x9ac/0x1650 [ 685.622682][ T4258] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 685.628051][ T4258] ? rwlock_bug.part.0+0x90/0x90 [ 685.632986][ T4258] ? _raw_spin_lock_irq+0x41/0x50 [ 685.638027][ T4258] worker_thread+0x657/0x1110 [ 685.642704][ T4258] ? process_one_work+0x1650/0x1650 [ 685.647897][ T4258] kthread+0x2e9/0x3a0 [ 685.651962][ T4258] ? kthread_complete_and_exit+0x40/0x40 [ 685.657598][ T4258] ret_from_fork+0x1f/0x30 [ 685.662024][ T4258] [ 685.665186][ T4258] Kernel Offset: disabled [ 685.671908][ T4258] Rebooting in 86400 seconds..