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"}) unshare(0x42000000) [ 660.658643][T25991] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:23:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:08 executing program 1: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@loopback, @in=@loopback, 0x4e23, 0x0, 0x4e22, 0x1c96, 0xa, 0xa0, 0x0, 0x89, r2}, {0x0, 0xfffffffffffffffe, 0x9, 0x9, 0x0, 0x4, 0x3f, 0x5}, {0x87c, 0xffff, 0x8001}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x33}, 0x2, @in=@private=0xa010100, 0x3504, 0x4, 0x3, 0x2, 0xf686, 0x0, 0x180}}, 0xe8) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x128) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="959aeb49220c7a5f80"]) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8001, 0x1, 0x0, 0x100, 0x0, 0x200}) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=@can_delroute={0x7c, 0x19, 0x200, 0x70bd2c, 0x25dfdbfc, {0x1d, 0x1, 0x3}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "e2e6aa014cec4632"}, 0x2}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffffb, 0xbb}}, @CGW_LIM_HOPS={0x5, 0xd, 0x3}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0xffffffffffffffff}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x5, 0x4, 0x5}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "0db017f5b99dbefd"}, 0x7}}, @CGW_MOD_OR={0x15, 0x2, {{{0x1}, 0x8, 0x0, 0x0, 0x0, "ba54dece0cb3e5b9"}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x2000c004) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f00000006c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x10020c5, 0x0}}], 0xc6, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)={0x6, 0x8f}) r5 = accept4$phonet_pipe(r4, 0x0, &(0x7f00000000c0), 0x80000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0xffff8001}}, './file0\x00'}) 00:23:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r2, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) getsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) syz_emit_ethernet(0x7b, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@val={0x9100, 0x6, 0x0, 0x1}, {0x8100, 0x6, 0x1, 0x4}}, {@x25={0x805, {0x3, 0x2, 0x13, "3ff80832904f3a8246561c4716f46983a60319c11ef8990b115a6701dc6dcf7035758563088a023b0bbecf80f8e408f6d7ef22aa60c771fbea49f5a3089e466a123b612f59e3534bd58a84ae7a2c73e1684841d54d219522d7c6c00328a99bb34bba"}}}}, &(0x7f0000000080)={0x0, 0x2, [0x6de, 0xb16, 0xb07, 0xc35]}) [ 660.836232][T26029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:08 executing program 0: perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) perf_event_open(0x0, r0, 0x9, 0xffffffffffffffff, 0xb) mount(0xfffffffffffffffd, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='gfs2meta\x00', 0x1801, &(0x7f0000000200)=':\x00') syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x156, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_read_part_table(0xd102, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) syz_emit_ethernet(0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f00000017c0)=[{0x0}]) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000280)=""/201, 0xc9}, {0x0}, {0x0}, {&(0x7f00000033c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000580)=""/144, 0x90}], 0x7, 0x0, 0x6) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) 00:23:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:08 executing program 2: creat(&(0x7f00000001c0)='./file0\x00', 0x20) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="702700000400756c6c623002"], &(0x7f00000002c0)='./file0\x00', &(0x7f0000001300)='qnx6\x00', 0x0, 0x0) [ 661.648313][T26076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r2, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) getsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000290100002901000002000000000000000000000b00000000000000000000000100000000000000000000000004000006040000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000100000d0000000000000000000000bd7ddcfc000400000f01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d5000000000100000500000000000000000000000000000000000000000000000800000000000000000000000300000000000000000000000000000000000000000000000b00000000000000000000000700000000000000000000000800000000000000000300000604000000000000000000000000050000000000001e00"/326], 0x0, 0x146}, 0x20) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x12) tkill(r0, 0x40) clone(0x4008000, &(0x7f0000000140)="d37e30fe84b3193588f92e21f40c1615bb456b3dcb19148142827b10a0285c1a5635e5482c76d65f0701352a4d1ceaf0614b9b075abdc2501e78a90ca9ae42bfdba6b9ab55e5fbb2452a65f4a06c9fbc67c240e7702d301ad9f60c624e7352", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="c3d38a517e00ae1ef8027b4ad1c8c0eb70be69cfe98c1da9537faeba1197e9fb361f71fbe6396025751bc856eed54c6e83195d1eb02654f3a739aa7e574f59be8bdc0885c368d5b564103546d10541d08c6e6041dc9a2045ffc06fd5f06c5a083d03ec453e6369046576a06b3063df78c08900e2a3ed301b0608c55501581bb49d6b496ab7eca072b2e26229adfea05e2561d27548b896b9d012dafa57b74cf4f08ffb1d412b56b35837b225fb2fb6047a600ab02a0a1fe3ddfb4045cbd5204b055ec6d9901fbd57a2c147cb9c2b8811414ba41e747f66b14b75d15dfc3c6b06cf23c3c23b694842e91c3cbfd90a2259e815eaf2") wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x3e}) 00:23:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r2, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:09 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4(r1, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r3, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@delsa={0x84, 0x11, 0x8, 0x70bd2c, 0x25dfdbfe, {@in=@broadcast, 0x4d6, 0xa, 0x33}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@rand_addr=0x64010101, 0x32, 0x3, 0x0, 0x0, 0xa, 0xa}]}, @policy_type={0xa}]}, 0x84}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=@updpolicy={0x1fc, 0x19, 0x1, 0x70bd25, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x2c, r7, 0xee01}, {0x9, 0xfff3, 0x3, 0x12, 0x0, 0x3, 0x8, 0x7}, {0x2, 0x0, 0x3f, 0xfffffffffffffffd}, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x34ff, 0x4, 0x0, 0x7f, 0x0, 0xffff8000}]}, @sa={0xe4, 0x6, {{@in=@multicast1, @in=@multicast1, 0x4e24, 0x20, 0x4e22, 0x5, 0xa, 0x0, 0x20, 0x3c, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, {0x8001, 0x400}, {}, {}, 0x0, 0x0, 0xa}}, @extra_flags={0x8}, @policy_type={0xa}, @replay_thresh={0x8}]}, 0x1fc}}, 0x0) [ 662.061969][T26114] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:09 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000840)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r3 = socket$inet6(0xa, 0x401000000001, 0x0) close(r3) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) sendfile(r3, r4, 0x0, 0xffffdffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x5) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f00000001c0)) flock(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x41, 0x7f, 0x6, 0x1, 0x0, 0x2, 0x49010, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xafb, 0x2, @perf_config_ext={0x9, 0x6}, 0x41521, 0x6, 0xffffffc0, 0x2, 0x100000000, 0x7362, 0x4, 0x0, 0x7ff, 0x0, 0x5}, 0x0, 0x7, r1, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) [ 662.212205][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 662.212221][ T26] audit: type=1804 audit(1636244589.383:132): pid=26136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir750818294/syzkaller.uw8Jeh/547/bus" dev="sda1" ino=14623 res=1 errno=0 [ 662.243723][ T26] audit: type=1804 audit(1636244589.383:133): pid=26136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir750818294/syzkaller.uw8Jeh/547/bus" dev="sda1" ino=14623 res=1 errno=0 [ 662.268128][ T26] audit: type=1804 audit(1636244589.383:134): pid=26136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir750818294/syzkaller.uw8Jeh/547/bus" dev="sda1" ino=14623 res=1 errno=0 00:23:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:09 executing program 1: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000002600)=ANY=[@ANYRES64, @ANYBLOB]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)=@usbdevfs_driver={0x9, 0x6, &(0x7f0000000080)="736d88d06f0abc7894398bccec9b446709a45a2ffa3fb3fde1e8e08ba3a2396fbb7e4117d46867ff7bdfab1aecfce31b3942b08717f6104098d0f5b7595971d82230d4932b47150223d0c50ec137383e149c00e60e68c8bb8918824e6bfa4885981c13cc673cabd3f19a584131e2fcc4447390ffd86406d8e5d3aaa530ab1b23d5facf4cc6cd4b59b80f3973868a5e509b009dd54ebd97ebc95fc8c89cd013c17d3322818671e62741730eb400687afd91be3ce5ad52"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005e100)={{0x0, 0x0, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x5, 0x0, 0x8, 0x0, 0x0, 0xe1186fd}}) socket$phonet_pipe(0x23, 0x5, 0x2) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) [ 662.469543][T26146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 662.513878][T26157] hub 9-0:1.0: USB hub found [ 662.521268][T26157] hub 9-0:1.0: 8 ports detected [ 662.799930][ T26] audit: type=1804 audit(1636244589.473:135): pid=26139 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir750818294/syzkaller.uw8Jeh/547/bus" dev="sda1" ino=14623 res=1 errno=0 00:23:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:10 executing program 1: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000002600)=ANY=[@ANYRES64, @ANYBLOB]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)=@usbdevfs_driver={0x9, 0x6, &(0x7f0000000080)="736d88d06f0abc7894398bccec9b446709a45a2ffa3fb3fde1e8e08ba3a2396fbb7e4117d46867ff7bdfab1aecfce31b3942b08717f6104098d0f5b7595971d82230d4932b47150223d0c50ec137383e149c00e60e68c8bb8918824e6bfa4885981c13cc673cabd3f19a584131e2fcc4447390ffd86406d8e5d3aaa530ab1b23d5facf4cc6cd4b59b80f3973868a5e509b009dd54ebd97ebc95fc8c89cd013c17d3322818671e62741730eb400687afd91be3ce5ad52"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005e100)={{0x0, 0x0, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x5, 0x0, 0x8, 0x0, 0x0, 0xe1186fd}}) socket$phonet_pipe(0x23, 0x5, 0x2) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) 00:23:10 executing program 0: getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000000000ff69e373000007000100"], 0x2c}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000300)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) r2 = signalfd4(r1, &(0x7f0000000080), 0x8, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000057c0)={0x0}, &(0x7f0000005800)=0xc) sendmsg$nl_route(r2, &(0x7f0000005900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000058c0)={&(0x7f0000005840)=@RTM_GETNSID={0x4c, 0x5a, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x41) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0xaf}) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001500)) preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x7, 0xa07f) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x2}) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000380)={0x5, &(0x7f0000001700)=[{0x0, 0x78, &(0x7f00000000c0)="05f78dba0f17dad2ecbcbbc79603ec51751bebbe98004d280efec16cfccf955ec29097313f52721be3ebc4ae9e1674577338d43106debf002011d7764a86636c14adc7acfe0d3b95fd6c61c69cfbcd0a0e83f6421d038668205024f00f72a0a2ac2647c4b2ab373fbc6fa805fa4a48ccc2bbad2799f8f718", 0x2}, {0x0, 0x2c, &(0x7f00000001c0)="85641caca438ef800a33b666c85d4ebaf1c69b28a842afef4072899fddf07902f8727267d8ea01b3e067ab08", 0x1}, {0x0, 0xa5, &(0x7f0000000240)="c4ab06dd321e8098eb553c4f56c0901a353d1414ebae12f3b308a0329c6356e6e5211b427c057c6ff7af1193425e59da73ef70a8f6c2eaf63905c347b4729656387375683140b7b41c6152ee3fb408282668e17c6b103508655e582c9a04ad18c093fe386ee41b2bbe70401bbd964fee3ed72d9635c50f969296fe9c80269ef7f9160fffb8790d2c5c2e98dadf3f9a64b4b31f366c43a3b253e51e196115ff0c50190b87d7"}, {0x5, 0xb2, &(0x7f00000015c0)="056bc27647a296b7e5ffd38c5f0940f0b9637ae71655028f62d605c57d9bba0f520d444c3d788de3f2838d43042c736fe3f856db91292414e400e2c9941e34c9d25a27c2f8c73eb0f2d351ab8ac706ef6d0e568f140988c270dd0b5535e6206d08e18400ec3a4cbfa6151d3b4d767a8e23ca94a7ea4e1d5af6d123bdd564f4d643f591b903c2265314ccb6bf17a2615bb2d5d7a03769e77f6d8f247a76c3a9b1d66cdbec13d6c216d4ddf0410e89ce458b1f", 0x0, 0x1}, {0x0, 0x15, &(0x7f0000001680)="3f03a0e237e395421e96a3576199f2c483ad76d8c9", 0x0, 0x1}]}) 00:23:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:12 executing program 1: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000002600)=ANY=[@ANYRES64, @ANYBLOB]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)=@usbdevfs_driver={0x9, 0x6, &(0x7f0000000080)="736d88d06f0abc7894398bccec9b446709a45a2ffa3fb3fde1e8e08ba3a2396fbb7e4117d46867ff7bdfab1aecfce31b3942b08717f6104098d0f5b7595971d82230d4932b47150223d0c50ec137383e149c00e60e68c8bb8918824e6bfa4885981c13cc673cabd3f19a584131e2fcc4447390ffd86406d8e5d3aaa530ab1b23d5facf4cc6cd4b59b80f3973868a5e509b009dd54ebd97ebc95fc8c89cd013c17d3322818671e62741730eb400687afd91be3ce5ad52"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005e100)={{0x0, 0x0, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x5, 0x0, 0x8, 0x0, 0x0, 0xe1186fd}}) socket$phonet_pipe(0x23, 0x5, 0x2) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000300)={@local, 0x6a}) 00:23:12 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x4ac9e000) r2 = syz_io_uring_setup(0x4d6, &(0x7f0000000240)={0x0, 0x8001, 0x2, 0x1, 0x0, 0x0, r1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) memfd_secret(0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) r7 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x147, &(0x7f00000003c0)={0x0, 0xc7b2, 0x0, 0x0, 0x11a}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030000000000000000000000000000000000031a38399be2343434d886dc57f6249e1f35ddf22719d02295e5bb8d6614e7a20f11d64359ca6bb1f2dfdc9f1ad05a837b85d0332cb5ad80706de156c0d7bea2377fe2398212c5df549cafa0811141bf87bd3fd7fadca819ec0b71bcc12ac81394b2c90b20908ac2084c335ad7186b7bdbf0cfd5b820989f6f2c2fb68738ba572003d08b71cb2dfed83e133fd84e130d20ad3670318b6cc07ab20b9e4b", @ANYRES32=r8, @ANYBLOB="2a003300d0000000ffffffffffff080211000000505050505050000004040000000076060000000000000000"], 0x48}}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f00000002c0)={0x0, 0x10001, 0x4, 0x3b, 0x3, [{0xfffffffffffffffc, 0x100000001, 0xcf, '\x00', 0xc80}, {0x7f, 0x9, 0x40, '\x00', 0x178c}, {0x1, 0x200, 0x0, '\x00', 0x88}]}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000200)={'netpci0\x00', &(0x7f0000000100)=@ethtool_eee={0x45, 0x100, 0x2, 0xffffffff, 0x80000000, 0x4, 0x1000, 0x1000, [0x4, 0x3]}}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2080}, 0x0, 0x0, 0xffffffffffffffff, 0x9) io_uring_enter(r2, 0x302, 0x0, 0x0, 0x0, 0x0) 00:23:12 executing program 0: getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000000000ff69e373000007000100"], 0x2c}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000300)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) r2 = signalfd4(r1, &(0x7f0000000080), 0x8, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000057c0)={0x0}, &(0x7f0000005800)=0xc) sendmsg$nl_route(r2, &(0x7f0000005900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000058c0)={&(0x7f0000005840)=@RTM_GETNSID={0x4c, 0x5a, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x41) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0xaf}) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001500)) preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x7, 0xa07f) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x2}) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000380)={0x5, &(0x7f0000001700)=[{0x0, 0x78, &(0x7f00000000c0)="05f78dba0f17dad2ecbcbbc79603ec51751bebbe98004d280efec16cfccf955ec29097313f52721be3ebc4ae9e1674577338d43106debf002011d7764a86636c14adc7acfe0d3b95fd6c61c69cfbcd0a0e83f6421d038668205024f00f72a0a2ac2647c4b2ab373fbc6fa805fa4a48ccc2bbad2799f8f718", 0x2}, {0x0, 0x2c, &(0x7f00000001c0)="85641caca438ef800a33b666c85d4ebaf1c69b28a842afef4072899fddf07902f8727267d8ea01b3e067ab08", 0x1}, {0x0, 0xa5, &(0x7f0000000240)="c4ab06dd321e8098eb553c4f56c0901a353d1414ebae12f3b308a0329c6356e6e5211b427c057c6ff7af1193425e59da73ef70a8f6c2eaf63905c347b4729656387375683140b7b41c6152ee3fb408282668e17c6b103508655e582c9a04ad18c093fe386ee41b2bbe70401bbd964fee3ed72d9635c50f969296fe9c80269ef7f9160fffb8790d2c5c2e98dadf3f9a64b4b31f366c43a3b253e51e196115ff0c50190b87d7"}, {0x5, 0xb2, &(0x7f00000015c0)="056bc27647a296b7e5ffd38c5f0940f0b9637ae71655028f62d605c57d9bba0f520d444c3d788de3f2838d43042c736fe3f856db91292414e400e2c9941e34c9d25a27c2f8c73eb0f2d351ab8ac706ef6d0e568f140988c270dd0b5535e6206d08e18400ec3a4cbfa6151d3b4d767a8e23ca94a7ea4e1d5af6d123bdd564f4d643f591b903c2265314ccb6bf17a2615bb2d5d7a03769e77f6d8f247a76c3a9b1d66cdbec13d6c216d4ddf0410e89ce458b1f", 0x0, 0x1}, {0x0, 0x15, &(0x7f0000001680)="3f03a0e237e395421e96a3576199f2c483ad76d8c9", 0x0, 0x1}]}) [ 665.024545][T26203] __nla_validate_parse: 1 callbacks suppressed [ 665.024561][T26203] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 665.068415][T26204] hub 9-0:1.0: USB hub found [ 665.074798][T26204] hub 9-0:1.0: 8 ports detected 00:23:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 00:23:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:12 executing program 0: getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000000000ff69e373000007000100"], 0x2c}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000300)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) r2 = signalfd4(r1, &(0x7f0000000080), 0x8, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000057c0)={0x0}, &(0x7f0000005800)=0xc) sendmsg$nl_route(r2, &(0x7f0000005900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000058c0)={&(0x7f0000005840)=@RTM_GETNSID={0x4c, 0x5a, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x41) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0xaf}) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001500)) preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x7, 0xa07f) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x2}) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000380)={0x5, &(0x7f0000001700)=[{0x0, 0x78, &(0x7f00000000c0)="05f78dba0f17dad2ecbcbbc79603ec51751bebbe98004d280efec16cfccf955ec29097313f52721be3ebc4ae9e1674577338d43106debf002011d7764a86636c14adc7acfe0d3b95fd6c61c69cfbcd0a0e83f6421d038668205024f00f72a0a2ac2647c4b2ab373fbc6fa805fa4a48ccc2bbad2799f8f718", 0x2}, {0x0, 0x2c, &(0x7f00000001c0)="85641caca438ef800a33b666c85d4ebaf1c69b28a842afef4072899fddf07902f8727267d8ea01b3e067ab08", 0x1}, {0x0, 0xa5, &(0x7f0000000240)="c4ab06dd321e8098eb553c4f56c0901a353d1414ebae12f3b308a0329c6356e6e5211b427c057c6ff7af1193425e59da73ef70a8f6c2eaf63905c347b4729656387375683140b7b41c6152ee3fb408282668e17c6b103508655e582c9a04ad18c093fe386ee41b2bbe70401bbd964fee3ed72d9635c50f969296fe9c80269ef7f9160fffb8790d2c5c2e98dadf3f9a64b4b31f366c43a3b253e51e196115ff0c50190b87d7"}, {0x5, 0xb2, &(0x7f00000015c0)="056bc27647a296b7e5ffd38c5f0940f0b9637ae71655028f62d605c57d9bba0f520d444c3d788de3f2838d43042c736fe3f856db91292414e400e2c9941e34c9d25a27c2f8c73eb0f2d351ab8ac706ef6d0e568f140988c270dd0b5535e6206d08e18400ec3a4cbfa6151d3b4d767a8e23ca94a7ea4e1d5af6d123bdd564f4d643f591b903c2265314ccb6bf17a2615bb2d5d7a03769e77f6d8f247a76c3a9b1d66cdbec13d6c216d4ddf0410e89ce458b1f", 0x0, 0x1}, {0x0, 0x15, &(0x7f0000001680)="3f03a0e237e395421e96a3576199f2c483ad76d8c9", 0x0, 0x1}]}) [ 665.542031][T26239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:12 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x93, 0x9a, 0x12, 0x40, 0x47d, 0x5001, 0xa560, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x7d, 0xbe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000000)={0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="00000b0000000b41d2"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0xc, 0x58, {0x58, 0xb, "06be14fb2432c4264a0527bc093e4c05d9538fe2c9c91d48d1444ee67952e69878fd13ef2a8882f36dfeca0e77cb8a6d0d19eed248d48569bb9c6e074d75b48b57be420dc46361419c5536a61bff21a11714384e5cf9"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x0, 0x9, 0x7, "194a595b06b26b"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x20, 0x4, 0xd000000, 0x200, 0x288, 0x5, 0x1, 0x8, 0xfff, 0x8, 0x2, 0x1}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x8}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000340)={0x20, 0x89, 0x2}}) 00:23:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 00:23:13 executing program 4: unshare(0x28000400) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/219, 0xdb}, {&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000140)=""/104, 0x68}], 0x3) 00:23:13 executing program 2: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)='./file0\x00') pivot_root(0x0, &(0x7f0000000080)='./file0\x00') removexattr(0x0, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x108002, &(0x7f0000000300)={[], [{@dont_hash}, {@dont_appraise}]}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640)={0x100000, 0x72, 0x140000}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) preadv2(r1, &(0x7f0000001840)=[{&(0x7f0000000680)=""/180, 0xb4}, {&(0x7f0000000740)=""/37, 0x25}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/158, 0x9e}], 0x4, 0xff, 0x400, 0x8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440), 0x800, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@msize={'msize', 0x3d, 0xbea8}}, {@privport}, {@cachetag={'cachetag', 0x3d, 'bpf\x00'}}], [{@euid_eq={'euid', 0x3d, r2}}, {@appraise}]}}) open$dir(&(0x7f0000000380)='./file0\x00', 0x1812c1, 0x104) utime(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sched_setattr(0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)) 00:23:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x426}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @generic={0x80, 0x3, 0x9, 0x7, 0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000300)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x2, 0x2, 0xfffffffe}, 0x10}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = dup2(r0, r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001480)={r3, &(0x7f0000001340)="5d87948931b1f22949d2620f86d0f947af520f54bf84e7cc7af17c566a663734b77f58add49c29c036684476c98bc9efb4f626e0e8b8bf4b66340b1425891e940bc747d1a290886c3ccc929d935006f28a0d7754dce07b75f9ace880833e21f9ef9f71e298de83bbb5175a76feb91c4c5a0011b57b225fdbb073f18cfc7c14fbf29e5b04101d8224b5f7e89316504c5bbcb7fdfb7d12", &(0x7f0000001400)=""/118, 0x4}, 0x20) [ 665.974646][T26270] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 00:23:13 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x4, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r4 = getpid() sched_setattr(r4, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYRES64=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 666.261836][T22047] usb 2-1: new high-speed USB device number 9 using dummy_hcd 00:23:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 666.305201][T26291] device Y­4`Ò˜ left promiscuous mode 00:23:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 666.924560][T22047] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 00:23:14 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = dup(r1) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, 0x0) statx(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x10, &(0x7f0000000180)) getresgid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) mount$fuse(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x400, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0xb63}}, {@blksize}, {@default_permissions}], [{@hash}]}}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/fuse\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'fd'}}]}}) [ 666.966443][T26313] 9pnet: Insufficient options for proto=fd 00:23:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 667.105966][T22047] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 667.115053][T22047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.123277][T22047] usb 2-1: Product: syz [ 667.127828][T22047] usb 2-1: Manufacturer: syz [ 667.132435][T22047] usb 2-1: SerialNumber: syz [ 667.139809][T26315] fuse: Bad value for 'fd' [ 667.163169][T26315] fuse: Bad value for 'fd' [ 667.246132][T26320] fuse: Bad value for 'fd' [ 667.251318][T26315] fuse: Bad value for 'fd' [ 667.536942][T26291] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.544119][T26291] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.280782][T26291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.334111][T26291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.475466][T22047] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 668.481998][T22047] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 668.489701][T22047] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 668.699649][T26267] UDC core: couldn't find an available UDC or it's busy: -16 [ 668.707150][T26267] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 668.733615][T26291] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.742902][T26291] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.751891][T26291] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.760831][T26291] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.934598][T26301] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 668.962831][T26305] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 668.977694][T26321] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 669.006657][T22047] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 669.091652][T22047] usb 2-1: USB disconnect, device number 9 [ 669.098355][T22047] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 669.665354][T22047] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 670.045378][T22047] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 00:23:17 executing program 1: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)='./file0\x00') pivot_root(0x0, &(0x7f0000000080)='./file0\x00') removexattr(0x0, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x108002, &(0x7f0000000300)={[], [{@dont_hash}, {@dont_appraise}]}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640)={0x100000, 0x72, 0x140000}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) preadv2(r1, &(0x7f0000001840)=[{&(0x7f0000000680)=""/180, 0xb4}, {&(0x7f0000000740)=""/37, 0x25}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/158, 0x9e}], 0x4, 0xff, 0x400, 0x8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440), 0x800, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@msize={'msize', 0x3d, 0xbea8}}, {@privport}, {@cachetag={'cachetag', 0x3d, 'bpf\x00'}}], [{@euid_eq={'euid', 0x3d, r2}}, {@appraise}]}}) open$dir(&(0x7f0000000380)='./file0\x00', 0x1812c1, 0x104) utime(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sched_setattr(0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)) 00:23:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:17 executing program 2: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)='./file0\x00') pivot_root(0x0, &(0x7f0000000080)='./file0\x00') removexattr(0x0, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x108002, &(0x7f0000000300)={[], [{@dont_hash}, {@dont_appraise}]}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640)={0x100000, 0x72, 0x140000}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) preadv2(r1, &(0x7f0000001840)=[{&(0x7f0000000680)=""/180, 0xb4}, {&(0x7f0000000740)=""/37, 0x25}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/158, 0x9e}], 0x4, 0xff, 0x400, 0x8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440), 0x800, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@msize={'msize', 0x3d, 0xbea8}}, {@privport}, {@cachetag={'cachetag', 0x3d, 'bpf\x00'}}], [{@euid_eq={'euid', 0x3d, r2}}, {@appraise}]}}) open$dir(&(0x7f0000000380)='./file0\x00', 0x1812c1, 0x104) utime(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sched_setattr(0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)) 00:23:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) (fail_nth: 1) 00:23:17 executing program 0: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)='./file0\x00') pivot_root(0x0, &(0x7f0000000080)='./file0\x00') removexattr(0x0, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x108002, &(0x7f0000000300)={[], [{@dont_hash}, {@dont_appraise}]}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640)={0x100000, 0x72, 0x140000}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) preadv2(r1, &(0x7f0000001840)=[{&(0x7f0000000680)=""/180, 0xb4}, {&(0x7f0000000740)=""/37, 0x25}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/158, 0x9e}], 0x4, 0xff, 0x400, 0x8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440), 0x800, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@msize={'msize', 0x3d, 0xbea8}}, {@privport}, {@cachetag={'cachetag', 0x3d, 'bpf\x00'}}], [{@euid_eq={'euid', 0x3d, r2}}, {@appraise}]}}) open$dir(&(0x7f0000000380)='./file0\x00', 0x1812c1, 0x104) utime(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sched_setattr(0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)) [ 670.215499][T22047] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 670.224591][T22047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.232893][T22047] usb 2-1: Product: syz [ 670.237181][T22047] usb 2-1: Manufacturer: syz [ 670.241830][T22047] usb 2-1: SerialNumber: syz [ 670.316976][T26375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 670.381010][T26390] FAULT_INJECTION: forcing a failure. [ 670.381010][T26390] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 670.394781][T26390] CPU: 1 PID: 26390 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 670.403215][T26390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.413309][T26390] Call Trace: [ 670.416589][T26390] [ 670.419522][T26390] dump_stack_lvl+0x201/0x2d8 [ 670.424208][T26390] ? show_regs_print_info+0x12/0x12 [ 670.429408][T26390] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 670.435131][T26390] ? __might_fault+0xb6/0x110 [ 670.439822][T26390] should_fail+0x384/0x4b0 [ 670.445302][T26390] _copy_from_user+0x2d/0x170 [ 670.450018][T26390] sendmsg_copy_msghdr+0xbb/0x650 [ 670.455094][T26390] ? __copy_msghdr_from_user+0x620/0x620 [ 670.460758][T26390] __sys_sendmsg+0x250/0x370 [ 670.465366][T26390] ? ____sys_sendmsg+0x910/0x910 [ 670.470336][T26390] ? __context_tracking_exit+0x7a/0xd0 [ 670.475820][T26390] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 670.481806][T26390] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 670.487800][T26390] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 670.493787][T26390] ? lockdep_hardirqs_on+0x95/0x140 [ 670.498989][T26390] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 670.504978][T26390] do_syscall_64+0x44/0xd0 [ 670.509418][T26390] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 670.515313][T26390] RIP: 0033:0x7fd63774bae9 [ 670.519751][T26390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 670.539360][T26390] RSP: 002b:00007fd634ca0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.547781][T26390] RAX: ffffffffffffffda RBX: 00007fd63785f020 RCX: 00007fd63774bae9 [ 670.555757][T26390] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 670.563738][T26390] RBP: 00007fd634ca01d0 R08: 0000000000000000 R09: 0000000000000000 [ 670.571716][T26390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.579698][T26390] R13: 00007ffe1cfe296f R14: 00007fd634ca0300 R15: 0000000000022000 [ 670.587702][T26390] 00:23:17 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4020000000b00007910000000000000c310000351000000950074000000000015fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d19e93adb603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58ebecbad46ed6e7965a2bf103b0b36f790bb41931f923d4dd127c1b4a49f7468f5e60304e44f67581c92ef8a7e71ce17b3"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffefd}, 0x48) socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() clone(0x1000000, &(0x7f0000000280)="4abb1e8e30c589055e553e79f68bd80307ec2ba9aa086c33e6a68a573c19d986cbc4e5acb0e4243285221c23fe131f57b7fd568c40c549bab9fd28a213ff1ec5d3fe2a75fa748b6f94c51d6ca4dcd132aac15eeb2b907b2e3864fea40b06966824c7d97dbcaa67ee7db68ff012ae0ae30139b59e935f2bf57741b4e95caf257607734b304df1cce0cdf23797923e9ff449f341d7628b8108ccc58f4606de45984ff01ff5923b544602495bdb2814a332ce549ff62bf8551baf4a40f5a88c6d40d0", &(0x7f00000000c0), &(0x7f0000000380), &(0x7f00000003c0)="f6ff7ab10ef712f252f032ef2a1b5c847db31b57a06a9fec8d6bedbd0d5c5d8560a2230e6313caa2c35c6474b09e3f58ec703f9277a491a44b570753cd9c") socket$bt_cmtp(0x1f, 0x3, 0x5) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xff, 0x5, 0xfa, 0x7c, 0x0, 0x0, 0x7e20a, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x2080, 0x8, 0x0, 0x0, 0x401, 0x6b7f, 0x7, 0x0, 0x2, 0x0, 0x4}, r3, 0x9, r1, 0x3) 00:23:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:17 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 670.744965][T22047] usb 2-1: can't set config #1, error -71 [ 670.778530][T22047] usb 2-1: USB disconnect, device number 10 00:23:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) (fail_nth: 2) 00:23:18 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 671.023930][T26425] FAULT_INJECTION: forcing a failure. [ 671.023930][T26425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.037522][T26425] CPU: 1 PID: 26425 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 671.045945][T26425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 671.055997][T26425] Call Trace: [ 671.059269][T26425] [ 671.062189][T26425] dump_stack_lvl+0x201/0x2d8 [ 671.066863][T26425] ? show_regs_print_info+0x12/0x12 [ 671.072052][T26425] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 671.077773][T26425] ? __might_fault+0xb6/0x110 [ 671.082450][T26425] ? __lock_acquire+0x2b00/0x2b00 [ 671.087476][T26425] should_fail+0x384/0x4b0 [ 671.091910][T26425] _copy_from_user+0x2d/0x170 [ 671.096586][T26425] iovec_from_user+0x13f/0x390 [ 671.101361][T26425] __import_iovec+0xc6/0x530 [ 671.105948][T26425] ? iovec_from_user+0x390/0x390 [ 671.110892][T26425] import_iovec+0xe6/0x120 [ 671.115303][T26425] sendmsg_copy_msghdr+0x4e0/0x650 [ 671.120409][T26425] ? __copy_msghdr_from_user+0x620/0x620 [ 671.126042][T26425] __sys_sendmsg+0x250/0x370 [ 671.130623][T26425] ? ____sys_sendmsg+0x910/0x910 [ 671.135561][T26425] ? __context_tracking_exit+0x7a/0xd0 [ 671.141019][T26425] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 671.146987][T26425] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 671.152965][T26425] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 671.158933][T26425] ? lockdep_hardirqs_on+0x95/0x140 [ 671.164130][T26425] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 671.170099][T26425] do_syscall_64+0x44/0xd0 [ 671.174521][T26425] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 671.180405][T26425] RIP: 0033:0x7fd63774bae9 [ 671.184813][T26425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 671.204407][T26425] RSP: 002b:00007fd634ca0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.212811][T26425] RAX: ffffffffffffffda RBX: 00007fd63785f020 RCX: 00007fd63774bae9 [ 671.220785][T26425] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 671.228830][T26425] RBP: 00007fd634ca01d0 R08: 0000000000000000 R09: 0000000000000000 [ 671.236802][T26425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.244773][T26425] R13: 00007ffe1cfe296f R14: 00007fd634ca0300 R15: 0000000000022000 [ 671.252765][T26425] [ 671.651590][T26393] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.659053][T26393] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.987162][T26393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.028366][T26393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.323234][T26393] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.332484][T26393] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.342159][T26393] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.351095][T26393] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.466075][T26396] device Y­4`Ò˜ left promiscuous mode [ 673.054770][T26396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.095440][T26396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.372633][T26396] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.381780][T26396] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.390730][T26396] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.399682][T26396] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 00:23:20 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x24000050) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:20 executing program 2: socket(0x2b, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x91000000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9352baa6d79ff75b2ea516196d63626414e169160cdb6a6544ca65f2bd4dbadf2e349ea26ff6363c7e749cf6f005fc4c1473ceaaebb394395f6861880b616062a4d2696660f27902c4e55df9b4aed33cf29e86ea691de41b38b1ec7a6a9c257267fe07a8aff8abd266470cb0fc051eebf4eb56d812c150fb6545d795aacd33b5eaf96036be", @ANYRES32=0x0, @ANYBLOB="f3fff1ff0d00f3ff10000c00060005000838000008000d0001000000c80008801c0001000701ff01ffffff7f0000000008000000ff00000006000000100002000800ff0300008000040009001c000100087f20000900000000000000fffffeff000000000200000008000200020000801c0001008c000900ea000000010000000700000003000000070000001200020001008100d00e000000106c0b000200001c0001003f04ff070900000001000000070000000300000000000000040002001c00010001d8000000b1000000000000ff7f000040000000020000000800020009000700"], 0xfc}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000804) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(r2, &(0x7f0000000840)="ebeddc298ae484aa1ebefaeaac6b893360854d8984f4bac1bf6738d3c732f7d30f24d9616532292bbb1ce3ec03bc7f15de42d9f38951220e1537d8a7c533c9ac68aa6220b8b6c7eafe5f1ac11dac9a", 0x4f) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1) socket$inet_smc(0x2b, 0x1, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f0, 0x220, 0x138, 0x138, 0xa0, 0x220, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, &(0x7f0000000340), {[{{@ip={@empty, @multicast2, 0xff, 0xff000000, 'veth1\x00', 'dummy0\x00', {0xff}, {}, 0x1d, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0xf5a0f65, @remote, 0x4e23}}}, {{@ip={@empty, @multicast1, 0xff, 0xffffff00, 'erspan0\x00', 'veth1_to_hsr\x00', {0xff}, {0x698a570e6c7e1336}, 0x41, 0x2, 0x26}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x4}}}, {{@ip={@loopback, @loopback, 0xffffff00, 0xff, 'veth1_to_batadv\x00', 'wlan1\x00', {0xff}, {0xff}, 0x24873197157f63f8, 0x3, 0xc}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'ip6gre0\x00', 'netdevsim0\x00', {0xff}, {}, 0x89, 0x1, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0xffffff7e, @loopback, 0x4e22}}}, {{@ip={@loopback, @loopback, 0x0, 0xffffffff, 'vlan1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x33, 0x3, 0x10}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xff36) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/81, 0x51}], 0x1) 00:23:20 executing program 4: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1001000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000440)="453dcd28001000000300000000000000436f6d7072657373656420524f4d465326336279000000000700000008000000436f6d70726573736564000000000000c0415cf968000053c0040000ed815cf964000053c30d000066696c652e636f6c64000000ed415cf928000053420b000066696c6530000000ed815cf90a0000534214000066696c6031000000ed815cf928230053c215000066696c6532000000ed815cf928230053c215000066696c65", 0xb0}], 0x0, &(0x7f0000000340)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'ip6gre0\x00', &(0x7f0000001e00)={'syztnl0\x00', 0x0, 0x2f, 0x3f, 0x80, 0x4, 0x18, @empty, @local, 0x1, 0x7, 0xfffff000, 0x6}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001f40)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x19, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x7}, [@exit, @alu={0x7, 0x0, 0x8, 0x1, 0x2, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x8, '\x00', r2, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001f00)={0x0, 0x9, 0xffffffff, 0x7}, 0x10, r3}, 0x78) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x0, 0x0, [], [0x1, 0x74386a5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x101, 0x201, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x10f, 0x3ff, 0x343, 0x6, 0x8, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3f, 0x2, 0x0, 0x7fffffff, 0x0, 0xffffffff, 0x7, 0x0, 0x100000001, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001900)=[{0x0}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) getdents(r1, &(0x7f00000019c0)=""/248, 0xf8) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/233, 0xe9) 00:23:20 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)=0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x2d, 0x43408) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup=r2, r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r4, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000280)={0x0, 0x80, 0x0, 0x1f, 0xe5, 0x2, 0x0, 0x0, 0x280c0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff8000, 0x2, @perf_bp, 0x80, 0x1ff, 0x3, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x6}) 00:23:20 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0xc010080) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x2bcf) clone(0x20210000, &(0x7f0000000180)="1342884370bcb70e56e4e7a8884988c4dc7eb9907d78a8", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000240)="eba5af6c42e4dd1e44b587ff6f344e9ee41db26341ee1274a1e815a0712599028546d4dc90db1b1a56d202cb760f01f051032c2cf27e77200ea4d254e17a11c6940755eb2fd417318fb84dd75aee8da8b3561d514c57911cf89d90cc20405c3be26efb018a171dd8463ed2f25666f0fead3ea1348ace7188112523a150340bc52e36e2de159e33b27a39436a930375984f664ebef1dcc9c5dfcdff986618d867f6806e9e48f5fbac3fdb29f425cfbc67ace52685cb10f9a1d4b979fa28ccd0693e3f6959cf4c1a4a01872b226b9153f68a996a3841557de1109448e24cf583d1ab5a1462e0a4491ef537bd3ada677a") shutdown(0xffffffffffffffff, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) readahead(0xffffffffffffffff, 0xffffffff, 0x8) unshare(0x38020c00) [ 673.584248][T26420] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:20 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) (fail_nth: 3) [ 673.929686][T26462] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 674.000095][T26473] FAULT_INJECTION: forcing a failure. [ 674.000095][T26473] name failslab, interval 1, probability 0, space 0, times 1 [ 674.012899][T26473] CPU: 0 PID: 26473 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 674.021336][T26473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.031425][T26473] Call Trace: [ 674.034720][T26473] [ 674.037756][T26473] dump_stack_lvl+0x201/0x2d8 [ 674.042545][T26473] ? show_regs_print_info+0x12/0x12 [ 674.047768][T26473] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 674.053530][T26473] should_fail+0x384/0x4b0 [ 674.057981][T26473] ? __alloc_skb+0xd8/0x5a0 [ 674.062571][T26473] should_failslab+0x5/0x20 [ 674.067207][T26473] kmem_cache_alloc_node+0x75/0x370 [ 674.072529][T26473] __alloc_skb+0xd8/0x5a0 [ 674.076878][T26473] ? netlink_autobind+0x26c/0x2a0 [ 674.082091][T26473] netlink_sendmsg+0x75e/0xe40 [ 674.086876][T26473] ? memcpy+0x3c/0x60 [ 674.090962][T26473] ? netlink_getsockopt+0xa60/0xa60 00:23:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000000000000900010073797a310000000020000000000a010200000000000000000c0000000900010073797a310000000030000000160a01725119010000000000000000000000000900020073797a3100000000040003800900010073797a310000000014000000020a010100000000000000000000000020000000080a05000000000000000000000000000900010073797a300000000014000000020a05000000000000001c000c000000140000001100010000000000000000000000000a2c4c0421378cdcc25cd3"], 0xe0}, 0x1, 0x0, 0x0, 0x810}, 0x2000c840) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3008000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xc}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x50) 00:23:21 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) [ 674.096187][T26473] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 674.101579][T26473] ? security_socket_sendmsg+0x9d/0xb0 [ 674.107117][T26473] ? netlink_getsockopt+0xa60/0xa60 [ 674.112334][T26473] ____sys_sendmsg+0x5b9/0x910 [ 674.117128][T26473] ? __sys_sendmsg_sock+0x30/0x30 [ 674.122188][T26473] __sys_sendmsg+0x280/0x370 [ 674.126906][T26473] ? ____sys_sendmsg+0x910/0x910 [ 674.131886][T26473] ? __context_tracking_exit+0x7a/0xd0 [ 674.137377][T26473] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 674.143381][T26473] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 674.149393][T26473] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 674.155398][T26473] ? lockdep_hardirqs_on+0x95/0x140 [ 674.160624][T26473] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 674.166643][T26473] do_syscall_64+0x44/0xd0 [ 674.171100][T26473] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 674.177013][T26473] RIP: 0033:0x7fd63774bae9 [ 674.181448][T26473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 674.201072][T26473] RSP: 002b:00007fd634ca0188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.202339][T26479] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 674.209509][T26473] RAX: ffffffffffffffda RBX: 00007fd63785f020 RCX: 00007fd63774bae9 [ 674.209531][T26473] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 674.209543][T26473] RBP: 00007fd634ca01d0 R08: 0000000000000000 R09: 0000000000000000 [ 674.209556][T26473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:23:21 executing program 2: socket(0x2b, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x91000000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9352baa6d79ff75b2ea516196d63626414e169160cdb6a6544ca65f2bd4dbadf2e349ea26ff6363c7e749cf6f005fc4c1473ceaaebb394395f6861880b616062a4d2696660f27902c4e55df9b4aed33cf29e86ea691de41b38b1ec7a6a9c257267fe07a8aff8abd266470cb0fc051eebf4eb56d812c150fb6545d795aacd33b5eaf96036be", @ANYRES32=0x0, @ANYBLOB="f3fff1ff0d00f3ff10000c00060005000838000008000d0001000000c80008801c0001000701ff01ffffff7f0000000008000000ff00000006000000100002000800ff0300008000040009001c000100087f20000900000000000000fffffeff000000000200000008000200020000801c0001008c000900ea000000010000000700000003000000070000001200020001008100d00e000000106c0b000200001c0001003f04ff070900000001000000070000000300000000000000040002001c00010001d8000000b1000000000000ff7f000040000000020000000800020009000700"], 0xfc}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000804) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(r2, &(0x7f0000000840)="ebeddc298ae484aa1ebefaeaac6b893360854d8984f4bac1bf6738d3c732f7d30f24d9616532292bbb1ce3ec03bc7f15de42d9f38951220e1537d8a7c533c9ac68aa6220b8b6c7eafe5f1ac11dac9a", 0x4f) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1) socket$inet_smc(0x2b, 0x1, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f0, 0x220, 0x138, 0x138, 0xa0, 0x220, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, &(0x7f0000000340), {[{{@ip={@empty, @multicast2, 0xff, 0xff000000, 'veth1\x00', 'dummy0\x00', {0xff}, {}, 0x1d, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0xf5a0f65, @remote, 0x4e23}}}, {{@ip={@empty, @multicast1, 0xff, 0xffffff00, 'erspan0\x00', 'veth1_to_hsr\x00', {0xff}, {0x698a570e6c7e1336}, 0x41, 0x2, 0x26}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x4}}}, {{@ip={@loopback, @loopback, 0xffffff00, 0xff, 'veth1_to_batadv\x00', 'wlan1\x00', {0xff}, {0xff}, 0x24873197157f63f8, 0x3, 0xc}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'ip6gre0\x00', 'netdevsim0\x00', {0xff}, {}, 0x89, 0x1, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0xffffff7e, @loopback, 0x4e22}}}, {{@ip={@loopback, @loopback, 0x0, 0xffffffff, 'vlan1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x33, 0x3, 0x10}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xff36) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/81, 0x51}], 0x1) [ 674.209568][T26473] R13: 00007ffe1cfe296f R14: 00007fd634ca0300 R15: 0000000000022000 [ 674.209605][T26473] 00:23:21 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 00:23:21 executing program 2: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x120cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x23, &(0x7f00000001c0)) socketpair(0xa, 0x800, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4000) dup3(r2, r1, 0x0) 00:23:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000240)={"51b008f40b2bccaab2a95595fd1587c6412190d64b492ed6b4a566e5f6809d8477787c3f99696bc750c01bf0452da3fd124d59e9d791f9e1edb5ffe6ee5ee8edcc3687db8164c0c7513a6c0a1500a6b62f084d6daa1a061185614451479da33ce6454a01f41893082b29d6dc404608d523b56be4d15dbce760db324faad9090b8dcea0faaa22afec1f557965242189943c718c8937f21f6c2395939cdf77bf793a0cdf44e73b4c1ee66353131c3cdbd8762421e9634f53e66800c095715c9780f9cd6c292d1ccf33f1f31b46cfd27674fd0ebfce282336a66763e87d5b34a98d7511573c577f5168660d1a10ca5a38f2cd7b9714268845caa0eb21d95fa7c8c0334294fa5bbd870690f50699884b392310f32f3ecb9c5a576c3c26eb5b744b7890a51019da24358ae696accc3f786dcf7768fb0ca4020394b9923538af6f9cd445336370e12de692ff9b30f822dd2ba1203b41d41f6c01fc0feec0620d5f9d056375c6dce41aa8d7555e1a98b0108ac962075de21bd452f2609320114bce4739c42706f5d5642597d4a6568a2cd67b7764c25ffaccbbf1410575e4edbf62df381fcadbffa21ba6d23b6c34cf2d8d9b2f3b3bd44c285a7aff03dfd64a3cfabe9327a9d8af27ff0b72f1452a429f5e332885a63e114c40eeac91a7d42fcaa6c775f4badf001ca6e9ac20bceb11f8d2012e2767e00d185ba7611dbf1084953b76b92372e85dadf512b10d8726e5b56684bcb22e9b6012c0acd57c71e4b39154f93209a46b5022b490581a3abc0d141c3dbc21935f53c5c298bc7fea2142bd820b109b21f3e187dcf7700ede855d33b070de1b2c2019bb371cbd0afe3c8a83def07d51292f4d00eb17b3a66484bd779525de26f34c122613f05c7cbb4411184e950242df47f74b869ba3b27c83653eefcb59871e11de86ce46134dd38d45e815c447adec9ee15f8d82437b7280faee65180e406c37861aa92c2b3480bd7c6dd0ca8274853cc965bb62a628dabc179144d0e149938ea90ce4e76b4e2395d51ba86ac1f625a1e833fc2c0e010b0cf950533b04e6814417f23c120d42b458ca89b74b3c3a06acc84864798dc471d32cc07013eddd445b4bac00db7ab2cd1c97424ce67e8a1e57c87ce1f39ec898b7b48508c8f741c8739473585bf7bc03b71742bdaab3ce79cfb6d2172bffca9afbeb9df674d88b32351969cca7975c30b8e405fb70a320af277bd7423eadb31097c5d6bd0200708067fbe95a4383efcc50df32c20db684370d26365b9ed7f229888389861e0d6a3eecebf94f1a5535e8b533d4dbc4118dea8ff30b6d6045af7dcbaf2314b6e482efc1be4d608991323cd48d5a8b6b7c8407491ca0c280828a4e186e8df89a2c89d267579eb7adc33a48ec07e5d87e95094f88640e327bbb12a4aec2ab9620cf8355206da4253e3183e6f9cc5c308c5a"}) r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000187000/0x2000)=nil, 0x2000, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000187000/0x1000)=nil, &(0x7f0000188000/0x4000)=nil, &(0x7f0000189000/0x3000)=nil, &(0x7f0000187000/0x4000)=nil, &(0x7f0000187000/0x1000)=nil, &(0x7f0000189000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000189000/0x2000)=nil, &(0x7f0000000000)="3c90ae2370c101c86de3723fb3e5f873f628de81b84f32b38d3e9bbb1f0add2a8209edd79104ad70a52312d2dc5eb5e11383d6f5fe7fbcd0404d7dc6767a5587287a77cd8499f2cfb6db03270fb558026a84701b8030a56cc698cf8a6c43e73ac4db07dcf4f1fb59cc1865ef4e76e0efadf8cbaef8e6937721e4e8f3fec2cd80e728c1c871a902b942ace87487f5038a95f04293a2cba98ae57a38f56c7924", 0x9f, r1}, 0x68) 00:23:21 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) [ 674.677547][T26479] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 00:23:21 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) (fail_nth: 1) 00:23:21 executing program 0: syz_emit_ethernet(0x76, &(0x7f0000000200)={@multicast, @random="00ba0500", @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d9ec03", 0x3c, 0x3a, 0x0, @mcast1, @empty, {[@hopopts={0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}, @pad1]}, @fragment={0x2c, 0x0, 0x1f, 0x1, 0x0, 0xe, 0x67}], @ndisc_ns={0x87, 0x0, 0x0, @remote}}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@multicast, @random="413563d041a2", @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x40, 0x1, 0x0, 0x0, "fa3f9554017d56d4420b02dd338178117527c3f9b6383bcd9973fcfce72f2946ad021eb191ea21d72021cd27c45eb7099a432d74167c7131bb4606503cfdd614"}}}}, &(0x7f0000000080)={0x0, 0x2, [0x9c3, 0x316, 0x4d8, 0x310]}) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@random="82114a055b9b", @empty, @void, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x22, 0x0, 0x0, 0x0, "e79d52c66e8c471eb1714e2562336a482e99223e950b27de541e944433caeacaf0bd779de336aa0f2e99618a88f94fe29b23439244c15a4b7d1f608c4d3b4baf"}}}}, &(0x7f0000000140)={0x1, 0x3, [0xe5d, 0x596, 0x313, 0x819]}) [ 674.755953][T26494] delete_channel: no stack [ 674.762230][T26494] delete_channel: no stack [ 674.930924][T26502] FAULT_INJECTION: forcing a failure. [ 674.930924][T26502] name failslab, interval 1, probability 0, space 0, times 0 [ 674.943921][T26502] CPU: 0 PID: 26502 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 674.952359][T26502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.962433][T26502] Call Trace: [ 674.965728][T26502] [ 674.968670][T26502] dump_stack_lvl+0x201/0x2d8 [ 674.973367][T26502] ? show_regs_print_info+0x12/0x12 [ 674.978593][T26502] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 674.984360][T26502] should_fail+0x384/0x4b0 [ 674.988803][T26502] ? __alloc_skb+0xd8/0x5a0 [ 674.993317][T26502] should_failslab+0x5/0x20 [ 674.997840][T26502] kmem_cache_alloc_node+0x75/0x370 [ 675.003057][T26502] ? __alloc_pages+0x255/0x580 [ 675.007848][T26502] __alloc_skb+0xd8/0x5a0 [ 675.012192][T26502] ? mark_lock+0x191/0x1e00 [ 675.016717][T26502] alloc_skb_with_frags+0xab/0x660 [ 675.021857][T26502] sock_alloc_send_pskb+0x928/0xa60 [ 675.027069][T26502] ? sock_kzfree_s+0x50/0x50 [ 675.031669][T26502] ? __lock_acquire+0x1382/0x2b00 [ 675.036698][T26502] tun_get_user+0xbdf/0x39e0 [ 675.041373][T26502] ? rcu_read_lock_sched_held+0x89/0x130 [ 675.047006][T26502] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 675.052986][T26502] ? tun_ring_recv+0xcd0/0xcd0 [ 675.057755][T26502] ? rcu_lock_release+0x5/0x20 [ 675.062526][T26502] tun_chr_write_iter+0x10a/0x1e0 [ 675.067543][T26502] vfs_write+0xb11/0xe90 [ 675.071786][T26502] ? file_end_write+0x230/0x230 [ 675.076750][T26502] ? __fdget_pos+0x1d8/0x2f0 [ 675.081333][T26502] ? ksys_write+0x77/0x2c0 [ 675.085754][T26502] ksys_write+0x18f/0x2c0 [ 675.090078][T26502] ? print_irqtrace_events+0x220/0x220 [ 675.095533][T26502] ? __ia32_sys_read+0x80/0x80 [ 675.100286][T26502] ? lockdep_hardirqs_on+0x95/0x140 [ 675.105577][T26502] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 675.111555][T26502] do_syscall_64+0x44/0xd0 [ 675.115973][T26502] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 675.121858][T26502] RIP: 0033:0x7fb397e195ff [ 675.126297][T26502] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 675.145890][T26502] RSP: 002b:00007fb3953dc150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 675.154295][T26502] RAX: ffffffffffffffda RBX: 00007fb397f79f60 RCX: 00007fb397e195ff [ 675.162285][T26502] RDX: 000000000000fdef RSI: 00000000200004c0 RDI: 00000000000000f0 [ 675.170354][T26502] RBP: 00007fb3953dc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 675.178316][T26502] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 675.186452][T26502] R13: 00007fff6575f26f R14: 00007fb3953dc300 R15: 0000000000022000 [ 675.194432][T26502] [ 675.313943][T26497] delete_channel: no stack [ 675.318760][T26497] delete_channel: no stack 00:23:23 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0xc010080) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x2bcf) clone(0x20210000, &(0x7f0000000180)="1342884370bcb70e56e4e7a8884988c4dc7eb9907d78a8", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000240)="eba5af6c42e4dd1e44b587ff6f344e9ee41db26341ee1274a1e815a0712599028546d4dc90db1b1a56d202cb760f01f051032c2cf27e77200ea4d254e17a11c6940755eb2fd417318fb84dd75aee8da8b3561d514c57911cf89d90cc20405c3be26efb018a171dd8463ed2f25666f0fead3ea1348ace7188112523a150340bc52e36e2de159e33b27a39436a930375984f664ebef1dcc9c5dfcdff986618d867f6806e9e48f5fbac3fdb29f425cfbc67ace52685cb10f9a1d4b979fa28ccd0693e3f6959cf4c1a4a01872b226b9153f68a996a3841557de1109448e24cf583d1ab5a1462e0a4491ef537bd3ada677a") shutdown(0xffffffffffffffff, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) readahead(0xffffffffffffffff, 0xffffffff, 0x8) unshare(0x38020c00) 00:23:23 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)='\xb8.\xa5\xd7o\xe02\xe3\aC\xdb\xf6O\x16\xa3\xdd\xb0\x92hia\xf2\xc3\xa3\xd9\xee\xd9s\x92\f]#\x1a:\xdc\xdf\x8c\xdd\xcd\x13\x9d\x98\xf8I\x15\x87\xde\x9c\xa7\xf3\xa4%r\x93\xac\xa9\x03R\x8f9\xa7\xd1\x00bn\x1f\xf5\x00\x84\xd9\x1a\xf0\xc4\x9e\xc1\xbe=\xac\x88\xfb\x92\x10\x85\xe6\xb0\x8d\x997T)X?\x16\xc1\x02\x17A\xa5\xee\xb9\xea\x91\xc9\xff$\x06Yu\xeb\xda\xb5\rrN\x00'/128, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0xd8, 0x3, 0xab, 0x20, 0x0, 0x80000000, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x101, 0x588d}, 0x2200, 0x80000000, 0x9, 0x8, 0x29fc, 0x1f, 0xff62, 0x0, 0x2, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xff, 0x4, 0x7, 0x8, 0x0, 0x7, 0x81000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3f}, 0x800, 0x20, 0x7a544514, 0x0, 0x8, 0x8001, 0x5, 0x0, 0xffffffff, 0x0, 0x1000}, 0xffffffffffffffff, 0xc, r2, 0x4) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = dup(r3) ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x40, 0x5, 0x4, 0x6, 0x0, 0xd6, 0x400, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9dda, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x6bbb7f6a1d64f5dc, 0x875, 0x3, 0x8, 0xfffffffffffffeff, 0x800, 0xfffc, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xe, r4, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup2(r0, r1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400002, 0x1, 0x2011, r1, 0x0) 00:23:23 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f00000800395032303030"], 0x15) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x110000, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@privport}, {@version_L}, {@version_L}, {@access_any}, {@msize={'msize', 0x3d, 0x69}}, {@msize={'msize', 0x3d, 0x2}}, {@cache_fscache}, {@version_u}, {@cache_mmap}, {@msize={'msize', 0x3d, 0xd3b2}}], [{@euid_eq={'euid', 0x3d, r7}}]}}) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x9, 0x40, 0x1f, 0x8, 0x0, 0x6, 0xb1023, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x1, @perf_config_ext={0x0, 0x7ff}, 0x80, 0x7, 0x6, 0x0, 0x8, 0x80, 0x4ef, 0x0, 0x0, 0x0, 0x5cb6}, r6, 0x8, 0xffffffffffffffff, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x40c80, 0x0) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000240)={0x2b, 0x4, 0x0, {0x1, 0x20, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_bulk={0x3, {0xc}, 0x81, 0xc1, &(0x7f00000000c0)="78f8f2cc1952ee1edb8ebdc798cd7a1d04c0baaebd9154d772070d0fab13e557c3ae03ce18bdf48f7fd27b27ca3bfddcaeae8c6111137ad689b8d064062be57a020bcb37cf70612814af70a6841ec7", 0x4f, 0x8, 0x0, 0x6c, 0x400, 0x9, &(0x7f0000000140)="e0f00f087d2a616e8835c5daad8e35eda5b41409106d60ef6afeadeb05c5511455eefb0fd25ce2207651d9344c05f13ff7707044a345ff8184aa651e52d0e65dd7e7a53d1dc62efd94157aa9795cb096fc19c2c6b1f838552ff36a06269a2dc6c8a2a46202296c610c43a2fde763be10d0dccf18e47893b7b7213b6e65"}) write$9p(r8, &(0x7f0000000580)="d2f62d084b56307c7cc66dd1abff5b4756ed5fc2467bad4c0210e1f6aa40ac9c151fc4f7425a497abf36d5b502bf2dd9c5f7e61bb6b2b7289088ac1e93edeeeb665b737e51a8c4b1202a153c7bacb8db3b21098e7f21c050182e7df593053b76ebc4c88f642b3bda96847ae78a12e701fedaeba0b2682c71589bb54dd6c74d87b92abfb03846d94986e665e3edffd0c330d899c670f4606195f065f81d096f9cc7000d53efa4bd9af7b4152872785dfb5bc7c05a1e2c02179ce006c0189579ff9734cadd44487ef1004234a74ac4a7bfef50d3b1ff632f650ffb50d9c832a4f205907160797272bade06dce1d8056c4596d1c21505b1756fa0b7c4", 0xfb) 00:23:23 executing program 2: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x120cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x23, &(0x7f00000001c0)) socketpair(0xa, 0x800, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4000) dup3(r2, r1, 0x0) 00:23:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:23 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) (fail_nth: 2) [ 676.717524][T26520] FAULT_INJECTION: forcing a failure. [ 676.717524][T26520] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 676.730550][T26521] delete_channel: no stack [ 676.731333][T26520] CPU: 0 PID: 26520 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 676.731357][T26520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.737529][T26521] delete_channel: no stack [ 676.744180][T26520] Call Trace: [ 676.744193][T26520] [ 676.744202][T26520] dump_stack_lvl+0x201/0x2d8 [ 676.744234][T26520] ? show_regs_print_info+0x12/0x12 [ 676.744255][T26520] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 676.744297][T26520] should_fail+0x384/0x4b0 [ 676.744324][T26520] prepare_alloc_pages+0x1db/0x5a0 [ 676.744357][T26520] __alloc_pages+0x161/0x580 [ 676.744382][T26520] ? __rmqueue_pcplist+0x2090/0x2090 [ 676.744417][T26520] ? rcu_read_lock_sched_held+0x89/0x130 [ 676.744438][T26520] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 676.744458][T26520] ? alloc_skb_with_frags+0xab/0x660 [ 676.744481][T26520] kmalloc_large_node+0x7c/0x180 [ 676.744502][T26520] ? alloc_skb_with_frags+0xab/0x660 [ 676.744524][T26520] __kmalloc_node_track_caller+0x30f/0x400 [ 676.744541][T26520] ? kmem_cache_alloc_node+0x25e/0x370 [ 676.744558][T26520] ? __alloc_skb+0xd8/0x5a0 [ 676.744582][T26520] ? alloc_skb_with_frags+0xab/0x660 [ 676.744601][T26520] __alloc_skb+0x127/0x5a0 [ 676.744615][T26520] ? mark_lock+0x191/0x1e00 [ 676.744638][T26520] alloc_skb_with_frags+0xab/0x660 [ 676.744669][T26520] sock_alloc_send_pskb+0x928/0xa60 [ 676.744711][T26520] ? sock_kzfree_s+0x50/0x50 [ 676.744735][T26520] ? __lock_acquire+0x1382/0x2b00 [ 676.744768][T26520] tun_get_user+0xbdf/0x39e0 [ 676.744800][T26520] ? rcu_read_lock_sched_held+0x89/0x130 [ 676.744820][T26520] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 676.744848][T26520] ? tun_ring_recv+0xcd0/0xcd0 [ 676.744882][T26520] ? rcu_lock_release+0x5/0x20 [ 676.744928][T26520] tun_chr_write_iter+0x10a/0x1e0 [ 676.744952][T26520] vfs_write+0xb11/0xe90 [ 676.744981][T26520] ? file_end_write+0x230/0x230 [ 676.745023][T26520] ? __fdget_pos+0x1d8/0x2f0 [ 676.745040][T26520] ? ksys_write+0x77/0x2c0 [ 676.745061][T26520] ksys_write+0x18f/0x2c0 [ 676.745080][T26520] ? print_irqtrace_events+0x220/0x220 [ 676.745111][T26520] ? __ia32_sys_read+0x80/0x80 [ 676.745132][T26520] ? lockdep_hardirqs_on+0x95/0x140 [ 676.745156][T26520] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 676.745181][T26520] do_syscall_64+0x44/0xd0 [ 676.745203][T26520] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 676.745225][T26520] RIP: 0033:0x7fb397e195ff [ 676.745245][T26520] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 676.745261][T26520] RSP: 002b:00007fb3953dc150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 676.745283][T26520] RAX: ffffffffffffffda RBX: 00007fb397f79f60 RCX: 00007fb397e195ff [ 676.745298][T26520] RDX: 000000000000fdef RSI: 00000000200004c0 RDI: 00000000000000f0 [ 676.745310][T26520] RBP: 00007fb3953dc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 676.745323][T26520] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 676.745334][T26520] R13: 00007fff6575f26f R14: 00007fb3953dc300 R15: 0000000000022000 [ 676.745367][T26520] [ 677.081732][T26522] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:24 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) (fail_nth: 3) 00:23:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 677.492306][T26547] FAULT_INJECTION: forcing a failure. [ 677.492306][T26547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.505803][T26547] CPU: 1 PID: 26547 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 677.514248][T26547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.524316][T26547] Call Trace: [ 677.527607][T26547] [ 677.530546][T26547] dump_stack_lvl+0x201/0x2d8 [ 677.535244][T26547] ? show_regs_print_info+0x12/0x12 [ 677.540462][T26547] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 677.546192][T26547] ? __might_fault+0xb6/0x110 [ 677.550875][T26547] ? __lock_acquire+0x2b00/0x2b00 [ 677.555929][T26547] should_fail+0x384/0x4b0 [ 677.560364][T26547] _copy_from_iter+0x25b/0x1080 [ 677.565307][T26547] ? skb_set_owner_w+0x244/0x3b0 [ 677.570274][T26547] ? _copy_mc_to_iter+0x1540/0x1540 [ 677.575495][T26547] ? __virt_addr_valid+0x21b/0x2d0 [ 677.580709][T26547] ? __phys_addr_symbol+0x2b/0x70 [ 677.585754][T26547] skb_copy_datagram_from_iter+0xec/0x6d0 [ 677.591489][T26547] ? __lock_acquire+0x1382/0x2b00 [ 677.596528][T26547] ? skb_put+0x10f/0x1e0 [ 677.600915][T26547] tun_get_user+0xd20/0x39e0 [ 677.605522][T26547] ? rcu_read_lock_sched_held+0x89/0x130 [ 677.611170][T26547] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 677.617180][T26547] ? tun_ring_recv+0xcd0/0xcd0 [ 677.621977][T26547] ? rcu_lock_release+0x5/0x20 [ 677.626783][T26547] tun_chr_write_iter+0x10a/0x1e0 [ 677.631829][T26547] vfs_write+0xb11/0xe90 [ 677.636094][T26547] ? file_end_write+0x230/0x230 [ 677.640983][T26547] ? __fdget_pos+0x1d8/0x2f0 [ 677.645581][T26547] ? ksys_write+0x77/0x2c0 [ 677.650008][T26547] ksys_write+0x18f/0x2c0 [ 677.654355][T26547] ? print_irqtrace_events+0x220/0x220 [ 677.659832][T26547] ? __ia32_sys_read+0x80/0x80 [ 677.664611][T26547] ? lockdep_hardirqs_on+0x95/0x140 [ 677.669826][T26547] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 677.675828][T26547] do_syscall_64+0x44/0xd0 [ 677.680270][T26547] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 677.686182][T26547] RIP: 0033:0x7fb397e195ff [ 677.690623][T26547] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 677.695905][T26550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 677.710252][T26547] RSP: 002b:00007fb3953dc150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 677.710280][T26547] RAX: ffffffffffffffda RBX: 00007fb397f79f60 RCX: 00007fb397e195ff 00:23:24 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f00000800395032303030"], 0x15) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x110000, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@privport}, {@version_L}, {@version_L}, {@access_any}, {@msize={'msize', 0x3d, 0x69}}, {@msize={'msize', 0x3d, 0x2}}, {@cache_fscache}, {@version_u}, {@cache_mmap}, {@msize={'msize', 0x3d, 0xd3b2}}], [{@euid_eq={'euid', 0x3d, r7}}]}}) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x9, 0x40, 0x1f, 0x8, 0x0, 0x6, 0xb1023, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x1, @perf_config_ext={0x0, 0x7ff}, 0x80, 0x7, 0x6, 0x0, 0x8, 0x80, 0x4ef, 0x0, 0x0, 0x0, 0x5cb6}, r6, 0x8, 0xffffffffffffffff, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x40c80, 0x0) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000240)={0x2b, 0x4, 0x0, {0x1, 0x20, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_bulk={0x3, {0xc}, 0x81, 0xc1, &(0x7f00000000c0)="78f8f2cc1952ee1edb8ebdc798cd7a1d04c0baaebd9154d772070d0fab13e557c3ae03ce18bdf48f7fd27b27ca3bfddcaeae8c6111137ad689b8d064062be57a020bcb37cf70612814af70a6841ec7", 0x4f, 0x8, 0x0, 0x6c, 0x400, 0x9, &(0x7f0000000140)="e0f00f087d2a616e8835c5daad8e35eda5b41409106d60ef6afeadeb05c5511455eefb0fd25ce2207651d9344c05f13ff7707044a345ff8184aa651e52d0e65dd7e7a53d1dc62efd94157aa9795cb096fc19c2c6b1f838552ff36a06269a2dc6c8a2a46202296c610c43a2fde763be10d0dccf18e47893b7b7213b6e65"}) write$9p(r8, &(0x7f0000000580)="d2f62d084b56307c7cc66dd1abff5b4756ed5fc2467bad4c0210e1f6aa40ac9c151fc4f7425a497abf36d5b502bf2dd9c5f7e61bb6b2b7289088ac1e93edeeeb665b737e51a8c4b1202a153c7bacb8db3b21098e7f21c050182e7df593053b76ebc4c88f642b3bda96847ae78a12e701fedaeba0b2682c71589bb54dd6c74d87b92abfb03846d94986e665e3edffd0c330d899c670f4606195f065f81d096f9cc7000d53efa4bd9af7b4152872785dfb5bc7c05a1e2c02179ce006c0189579ff9734cadd44487ef1004234a74ac4a7bfef50d3b1ff632f650ffb50d9c832a4f205907160797272bade06dce1d8056c4596d1c21505b1756fa0b7c4", 0xfb) 00:23:24 executing program 2: clone(0x200000, &(0x7f00000000c0)="5c3e6457ee8a58188e6ce931cf0f3cf654d2f9aad0b3da14bf6c35f38e07e2d75f49cb1a156d61385f62f9224b177493fe9fb1742d5f1d46491b41401c3d8745b6a38fad2f61dd6a23568e505d8176d4a9ed837cff582dd913d7e13c97df97aef79ea84187384d09af5aafac828b4d5c2d7d035552800a07083a6e3df28542089e3826f04f041668aac49bc5646ab6f57ad82d1031402ca4118d9aa0c0033cd3127f313348f0ab1b33896b0de08751b4876a2c2fceb9362b9ea7279a6764fe1bc810b090dbf6852b", &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)="431bda24987f1aa2134c0cf3ff4cf85e2b7a5503a2b0343667d436bc2503ebca9bd2d9a8decf3e8ffe535bd25ad771a699a05604543e1f0e8eb253d397822962962e10dd94170c1c2254058038ce09ea85") clone(0x42480, &(0x7f0000000400)="eb579f5bd4d752315303738892b379c2b5e33fb113db385babb22d4a29", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="c524da6f5d98cb0b2628bfa8c270e9d92a66744f0b1400956bbbdc3e3de906cad9eda87013b7c70b6ddcfdcd7d46026a9208def136d28d46baabc0cdcf55ac44018b66747e8ef258fe07290b72a6fb705efb24beba6a68f24693958833ec6bf5b7878f4543e35eba642fe6765ec988706a8363960a0430829d954e6d054f34dcff2a18c14a1b912332f0946b885a2553a5a3d7922093843940bc5471a2abec851804008b6c106e23c5d3ed3ca302cec62934b09914c1e1539cec8d76ccf358243fdf55b6154b4eb48c65701762dd") bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x9, 0x1, 0xc}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) clone(0x2000, &(0x7f0000000280)="656662b67aa7e3ced2e0e1f56a161b71736599c48378070c36bd3da54ae65636aaeba71ab77017466db8d4889b59b64f3ec38f891cb81ba2c723104f5556d88dcf9caa43b31b0f3223019de8b9180e0a97aebc9022d5bfb9e0fd800afe549bec39f1dcdb2bc4763b7f8004d03602c36b1266ed25ab93583ef128aa30798e8b17dc4e94", &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="8556e9673e550640be107377a1d81938d71b47d758c87283c638f1728e5686") 00:23:24 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000009000008250592d2070000000101090224ffff050074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0xfffffffffffffe7a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x4b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}]}, 0x30}}, 0x80) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) [ 677.710293][T26547] RDX: 000000000000fdef RSI: 00000000200004c0 RDI: 00000000000000f0 [ 677.710303][T26547] RBP: 00007fb3953dc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 677.710315][T26547] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 677.710326][T26547] R13: 00007fff6575f26f R14: 00007fb3953dc300 R15: 0000000000022000 [ 677.710358][T26547] 00:23:25 executing program 2: r0 = syz_open_dev$video(&(0x7f00000011c0), 0x3, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000040), {0x81, 0x1000, 0x30314247}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2, 0x1f}) [ 678.218605][T26550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:26 executing program 1: socket$inet6(0xa, 0x40000080806, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd70002fee8265d507e1523848fcdbdf25e856000008000200030000002400018005000200d0000000080006000000000008000700", @ANYRES32=0x0, @ANYBLOB="060005004e23000008000300030000000800020004000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000011c0)='+\'\x00') r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000001200)={0x3, 0xb76, 0x0, 0xe2f, 0x2, [{0x4, 0x23de, 0x659, '\x00', 0x108}, {0x0, 0x7, 0xffff, '\x00', 0x2100}]}) connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000001c0)={{0x0, 0xffffffffffff8001, 0x0, 0x6, 0x3ff, 0x0, 0x1, 0x1f, 0x4, 0x5, 0x8001, 0x0, 0x0, 0x0, 0x5}}) 00:23:26 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x2, 0xff, 0x44, @ipv4={'\x00', '\xff\xff', @empty}, @private0, 0x80, 0x700, 0x40, 0xd92}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x6, &(0x7f0000000140)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x63, 0x2e}, [@call={0x15}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x21, 0x94, &(0x7f0000000080)=""/148, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:23:26 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) (fail_nth: 4) 00:23:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:26 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/61) socket$netlink(0x10, 0x3, 0x15) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x208040, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) 00:23:26 executing program 4: ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xb, 0x3, 0x4, {0x8001, 0x3, 0x8, 0x9}}) [ 679.696678][T26594] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 679.726430][T26593] FAULT_INJECTION: forcing a failure. [ 679.726430][T26593] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 679.739938][T26593] CPU: 1 PID: 26593 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 679.748357][T26593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.758424][T26593] Call Trace: [ 679.761698][T26593] [ 679.764619][T26593] dump_stack_lvl+0x201/0x2d8 [ 679.769293][T26593] ? show_regs_print_info+0x12/0x12 [ 679.774483][T26593] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 679.780202][T26593] ? __print_lock_name+0x1d0/0x1d0 [ 679.785304][T26593] should_fail+0x384/0x4b0 [ 679.789719][T26593] prepare_alloc_pages+0x1db/0x5a0 [ 679.794840][T26593] __alloc_pages+0x161/0x580 [ 679.799427][T26593] ? __rmqueue_pcplist+0x2090/0x2090 [ 679.804716][T26593] ? do_xdp_generic+0x349/0x6a0 [ 679.809628][T26593] kmalloc_large_node+0x7c/0x180 [ 679.814557][T26593] ? do_xdp_generic+0x349/0x6a0 [ 679.819399][T26593] __kmalloc_node_track_caller+0x30f/0x400 [ 679.825219][T26593] ? do_xdp_generic+0x349/0x6a0 [ 679.830061][T26593] pskb_expand_head+0x111/0x10e0 [ 679.834991][T26593] ? lockdep_softirqs_on+0x580/0x580 [ 679.840275][T26593] do_xdp_generic+0x349/0x6a0 [ 679.844942][T26593] ? trace_xdp_exception+0x280/0x280 [ 679.850235][T26593] tun_get_user+0x1e42/0x39e0 [ 679.854915][T26593] ? rcu_read_lock_sched_held+0x89/0x130 [ 679.860568][T26593] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 679.866557][T26593] ? tun_ring_recv+0xcd0/0xcd0 [ 679.871329][T26593] ? rcu_lock_release+0x5/0x20 [ 679.876103][T26593] tun_chr_write_iter+0x10a/0x1e0 [ 679.881129][T26593] vfs_write+0xb11/0xe90 [ 679.885380][T26593] ? file_end_write+0x230/0x230 [ 679.890239][T26593] ? __fdget_pos+0x1d8/0x2f0 [ 679.894820][T26593] ? ksys_write+0x77/0x2c0 [ 679.899245][T26593] ksys_write+0x18f/0x2c0 [ 679.903564][T26593] ? print_irqtrace_events+0x220/0x220 [ 679.909018][T26593] ? __ia32_sys_read+0x80/0x80 [ 679.913769][T26593] ? lockdep_hardirqs_on+0x95/0x140 [ 679.918957][T26593] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 679.924931][T26593] do_syscall_64+0x44/0xd0 [ 679.929337][T26593] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 679.935217][T26593] RIP: 0033:0x7fb397e195ff [ 679.939621][T26593] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 679.959212][T26593] RSP: 002b:00007fb3953dc150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 679.967635][T26593] RAX: ffffffffffffffda RBX: 00007fb397f79f60 RCX: 00007fb397e195ff [ 679.975593][T26593] RDX: 000000000000fdef RSI: 00000000200004c0 RDI: 00000000000000f0 [ 679.983554][T26593] RBP: 00007fb3953dc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 679.991688][T26593] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 679.999644][T26593] R13: 00007fff6575f26f R14: 00007fb3953dc300 R15: 0000000000022000 [ 680.007618][T26593] [ 680.049202][T26594] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:27 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/block/loop0', 0x402080, 0x0) r0 = creat(0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696c653020cdd8b352b4a0f76f65e06efdf2b0"], 0x191) socketpair(0x25, 0x6, 0xfffffffc, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, 0x0, 0x20044051) unshare(0x8000400) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x80000000}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x48) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0), 0x0) setreuid(0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 00:23:27 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) setns(0xffffffffffffffff, 0x20000) syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x6, 0x2, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x8, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000f00)='./file0\x00', 0x0) rmdir(&(0x7f0000000180)='./file0\x00') syz_mount_image$jfs(&(0x7f0000003840), 0x0, 0x0, 0x0, &(0x7f00000039c0), 0x0, &(0x7f0000003a00)={[{@discard}, {@errors_remount}]}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = dup(r1) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0x13, 0x8000, {r0}, {0xee01}, 0xff, 0x100000000}) 00:23:27 executing program 2: syz_open_dev$vbi(&(0x7f00000003c0), 0x1, 0x2) syz_mount_image$omfs(&(0x7f0000002800), &(0x7f0000002840)='./file1\x00', 0x0, 0x0, &(0x7f0000002980), 0x0, &(0x7f0000002a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB='N\x00']) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/155, 0x9b}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f00000001c0)=""/123, 0x7b}, {&(0x7f0000000240)=""/89, 0x59}], 0x4, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x121) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x1010, r5, 0x10aae000) kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, r3, &(0x7f0000000380)={r1, r5, 0xfffffffa}) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x400) dup3(r1, r1, 0x80000) 00:23:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:27 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) (fail_nth: 5) [ 680.411146][T26629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:27 executing program 1: socket$inet6(0xa, 0x40000080806, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local, @mcast1, @mcast2}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd70002fee8265d507e1523848fcdbdf25e856000008000200030000002400018005000200d0000000080006000000000008000700", @ANYRES32=0x0, @ANYBLOB="060005004e23000008000300030000000800020004000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000011c0)='+\'\x00') r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000001200)={0x3, 0xb76, 0x0, 0xe2f, 0x2, [{0x4, 0x23de, 0x659, '\x00', 0x108}, {0x0, 0x7, 0xffff, '\x00', 0x2100}]}) connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000001c0)={{0x0, 0xffffffffffff8001, 0x0, 0x6, 0x3ff, 0x0, 0x1, 0x1f, 0x4, 0x5, 0x8001, 0x0, 0x0, 0x0, 0x5}}) [ 680.503203][T26629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 680.595168][T26652] FAULT_INJECTION: forcing a failure. [ 680.595168][T26652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.608963][T26652] CPU: 0 PID: 26652 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 680.617400][T26652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.627471][T26652] Call Trace: [ 680.630765][T26652] [ 680.633702][T26652] dump_stack_lvl+0x201/0x2d8 [ 680.638410][T26652] ? show_regs_print_info+0x12/0x12 [ 680.643627][T26652] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 680.649359][T26652] ? __might_fault+0xb6/0x110 [ 680.654055][T26652] ? snprintf+0xd6/0x120 [ 680.658314][T26652] should_fail+0x384/0x4b0 [ 680.662759][T26652] _copy_to_user+0x2d/0x130 [ 680.667283][T26652] simple_read_from_buffer+0xd9/0x160 [ 680.672701][T26652] proc_fail_nth_read+0x1af/0x220 [ 680.677824][T26652] ? proc_fault_inject_write+0x3a0/0x3a0 [ 680.683480][T26652] ? security_file_permission+0x46b/0x5d0 [ 680.689220][T26652] ? proc_fault_inject_write+0x3a0/0x3a0 [ 680.694981][T26652] vfs_read+0x324/0xe60 [ 680.699173][T26652] ? kernel_read+0x200/0x200 [ 680.703794][T26652] ? __fget_files+0x35a/0x390 [ 680.708506][T26652] ? mutex_lock_nested+0x1a/0x20 [ 680.713481][T26652] ? __fdget_pos+0x24e/0x2f0 [ 680.718092][T26652] ? ksys_read+0x77/0x2c0 [ 680.722438][T26652] ksys_read+0x18f/0x2c0 [ 680.726702][T26652] ? print_irqtrace_events+0x220/0x220 [ 680.727703][T26642] new mount options do not match the existing superblock, will be ignored [ 680.732207][T26652] ? vfs_write+0xe90/0xe90 [ 680.745569][T26652] ? lockdep_hardirqs_on+0x95/0x140 [ 680.750794][T26652] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 680.756799][T26652] do_syscall_64+0x44/0xd0 [ 680.761235][T26652] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 680.767140][T26652] RIP: 0033:0x7fb397e1969c [ 680.771575][T26652] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 00:23:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 680.791199][T26652] RSP: 002b:00007fb3953bb170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 680.799639][T26652] RAX: ffffffffffffffda RBX: 000000000000fdef RCX: 00007fb397e1969c [ 680.807631][T26652] RDX: 000000000000000f RSI: 00007fb3953bb1e0 RDI: 0000000000000003 [ 680.815624][T26652] RBP: 00007fb3953bb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 680.823609][T26652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.831594][T26652] R13: 00007fff6575f26f R14: 00007fb3953bb300 R15: 0000000000022000 [ 680.839698][T26652] 00:23:28 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0x5) [ 680.993247][T26662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x30a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x78, 0x0, 0x7f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x81, {0x9, 0x21, 0x7ff, 0x80, 0x1, {0x22, 0x68b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x8, 0x5}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0xc, 0x1, 0x40, 0x40, 0x1}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0xa, [{0xb3, &(0x7f0000000440)=@string={0xb3, 0x3, "0ba4c69ea74e2bb79c2ee6bb16658d2bf6ce150e001a28a3f387139bd355e38bf180e2fb0a5d1d916ae7e39fe358f09db5c20e18fdb3c12dc3271df7e0ec3b72ea47a614af75892678a6b04837d1d1f1a57c1a3e7c54c7eb0b42c3560942b60fc11b4f628ee275568163d6f19185ac057e5a424264b70aeda91ac6e640a1934f09f27a67236b606406ee259328c5a6c3a9ebdaf3c076777366ee2c04a278fcd32927b6f0f45ae4f540e8d2cde80fd6b417"}}, {0x73, &(0x7f0000000500)=@string={0x73, 0x3, "e37e84b5f2f8e2429ef0dec388684c4212a0c16e11dc354620d476f9732c78e5fdfb0b14d7d94d8446ec9ccc0152f17ff94f856a97db7793d93d247634b6c6357260fe169a17142695ed8ba2173de1195750ea1358e958dbc29e0f981feb8f33202f5f8ed8b3619beb57c1d7a455935f42"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x427}}, {0xf6, &(0x7f0000000700)=@string={0xf6, 0x3, "c581e91ed76de9e99fbe287cae3cc72f8c12005c4bd5d5d4bae46e033c7f47ec919b4090c3ab78c669122178ef11bceff290086446105aceb11215c5abf415a6b7d45ae16686ddca247ec8531bb1de84e0741d661552fa93afee6137cfb639898531809154ad7f826dd4b9dc753c90cdb4a766a8043250a9935bcece69af1ea53e1889e9f4e9056e937f3d92822a55deb63a1f950fa68b3e5c0a0a68c68ef56c5ba9350a8227f14cc6190f26cd16f2930d5f63ae0aae45ba4b74a4877353c6b702123efa161aa4b517310e8fdb4c7cdbb5e5506fc25e2265b78345ad9b4bd2700c52fd14e24ccf60245a532a9f8f11d745593ac9"}}, {0xf9, &(0x7f0000000940)=@string={0xf9, 0x3, "7a6e2487ef91967149be68301ce80960981662cfc11861b78b1f916d03258618857a3fe23b67bdfda22101777379c95bce8041591f0a396c74974beee13de3ad4cb104d0e0ae72b100a90518073d1df6ce0af6b1e66700ee5de90957efad5671d4c60024eda28400fbb29abbdd3d05d672446b7a85c5faa4d4930e73c90301e643c64a6222420e28f6eaca5f0e20fac35a420e6ffcff2797b97fac55554e0b5cb812655829edffc9902ddf0b8719f12c880fade0c2611f9312992a65671c323498e7f835a4ca0a8884bd604bee2cca6f3e6d86ca1243a57b8a7b8a3d29bb6523280d44d6fb21f3d52912c954c0592d798e5d9231e1376f"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0x24, 0xc, {0xc, 0x3, "9a549545bfadcb05ace7"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0xe77}}}}, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)={0x0, 0xf, 0xb5, "e0d5e15c56c095252d1dcf50b596af5e0365474cc1cb0f6c97154c7c49ed000af7f67459750cc1da51a7f705d47c6839e7c5e8aa7382ea138b5c3f1db6288915e4948c7b24f18cd104a7f2a9cda58485c995e1d53f845f28e224d50fbdae107e868d8ed4433bc24504a56b7e484ae88414e1ab77dd3e5d82643723e90510bd69d75296a178c3be7460784681cb6604f55d9b6d84420c59800ccfd92b3fe675043682da2541611d96501290bda2fe7f3742ec11ae21"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000b00)={0x20, 0x1, 0x100, "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"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0022240000000b29a5e517e94cf0"], 0x0}, 0x0) 00:23:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 681.361595][T26685] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:28 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0x5) 00:23:28 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/block/loop0', 0x402080, 0x0) r0 = creat(0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696c653020cdd8b352b4a0f76f65e06efdf2b0"], 0x191) socketpair(0x25, 0x6, 0xfffffffc, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, 0x0, 0x20044051) unshare(0x8000400) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x80000000}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x48) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0), 0x0) setreuid(0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 00:23:28 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 681.488986][T26695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 681.535671][T22041] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 681.781770][T26642] new mount options do not match the existing superblock, will be ignored [ 681.949923][T22041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.960947][T22041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.970953][T22041] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 681.983868][T22041] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 681.993019][T22041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.017603][T22041] usb 3-1: config 0 descriptor?? 00:23:29 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) setns(0xffffffffffffffff, 0x20000) syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x6, 0x2, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x8, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000f00)='./file0\x00', 0x0) rmdir(&(0x7f0000000180)='./file0\x00') syz_mount_image$jfs(&(0x7f0000003840), 0x0, 0x0, 0x0, &(0x7f00000039c0), 0x0, &(0x7f0000003a00)={[{@discard}, {@errors_remount}]}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = dup(r1) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0x13, 0x8000, {r0}, {0xee01}, 0xff, 0x100000000}) 00:23:29 executing program 1: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0x5, 0x6, 0x7, 0x0, 0x1, 0x104, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x9, 0x3}, 0x40, 0x0, 0xffff, 0x4, 0x9, 0x9, 0x8, 0x0, 0xe2, 0x0, 0x5}, r0, 0xb, 0xffffffffffffffff, 0x2) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x4, 0x80, 0x1, 0x80, 0x7, 0x4, 0x0, 0x400, 0x20080, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x72e1198e, 0x8}, 0x0, 0xffffffffffffc556, 0x3, 0x4, 0x4, 0x800, 0x1, 0x0, 0x5, 0x0, 0x4}) syz_read_part_table(0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0201420000000a000000ff45ac000000000042000000060000000000024000ffffff82000000e100000088770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) 00:23:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x83, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:29 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 682.247984][T26734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:29 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x200102af, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f00000000c0)=@isdn, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getpgid(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', r4, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000080)={0x0, 0x1, 0x10}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000380)="8b464ca2256279ebb57da1edd99b02fd5ab1cdd98984f5b5214a200b43ed2475efecf2569057201b0373d417b03504b4413d7ebfb5f3989b6c9c583629142e93bd536b8b440207426f8684b3a260c76bc3584993c45cd86dad54ba3320b00c40f67615600ba603c9f0eca2f765746169e0d2f316995f2be9ad55327129831c7de120d9026fccbd915b6a62c1c6ad23655c4f83c20b4e0c1b2bcaab62a40609218ba7cdbffeb27a2cda665bfe2bbeb7d273092be78d4120a178acee673381bd87bc98182d", 0xc4) [ 682.486054][T26680] UDC core: couldn't find an available UDC or it's busy: -16 [ 682.493478][T26680] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 00:23:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 682.638047][T22041] logitech-djreceiver 0003:046D:C534.0012: item fetching failed at offset 7/9 [ 682.687753][T22041] logitech-djreceiver 0003:046D:C534.0012: logi_dj_probe: parse failed [ 682.696190][T22041] logitech-djreceiver: probe of 0003:046D:C534.0012 failed with error -22 [ 682.734078][T26761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 682.824193][T22041] usb 3-1: USB disconnect, device number 24 [ 682.852990][T26747] new mount options do not match the existing superblock, will be ignored [ 682.890335][T26760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 683.009525][T26761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 683.674392][T10966] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 684.034465][T10966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.045989][T10966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.055863][T10966] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 684.070095][T10966] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 684.079204][T10966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.089859][T10966] usb 3-1: config 0 descriptor?? 00:23:31 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/block/loop0', 0x402080, 0x0) r0 = creat(0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696c653020cdd8b352b4a0f76f65e06efdf2b0"], 0x191) socketpair(0x25, 0x6, 0xfffffffc, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, 0x0, 0x20044051) unshare(0x8000400) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x80000000}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x48) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000000c0), 0x0) setreuid(0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) 00:23:31 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7ffff000, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400}}) io_setup(0x100, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180)='e', 0x1, 0x7) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000001c0)) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x10, "008000b32eefe7660a352a0800"}) ioctl$TCSETS(r4, 0x40045431, 0x0) r5 = syz_open_pts(r4, 0x0) read(r5, &(0x7f0000000100)=""/19, 0xfdef) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/200}) 00:23:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f00000000c0)=@isdn, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getpgid(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', r4, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000080)={0x0, 0x1, 0x10}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000380)="8b464ca2256279ebb57da1edd99b02fd5ab1cdd98984f5b5214a200b43ed2475efecf2569057201b0373d417b03504b4413d7ebfb5f3989b6c9c583629142e93bd536b8b440207426f8684b3a260c76bc3584993c45cd86dad54ba3320b00c40f67615600ba603c9f0eca2f765746169e0d2f316995f2be9ad55327129831c7de120d9026fccbd915b6a62c1c6ad23655c4f83c20b4e0c1b2bcaab62a40609218ba7cdbffeb27a2cda665bfe2bbeb7d273092be78d4120a178acee673381bd87bc98182d", 0xc4) 00:23:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000600000008000100520a747634f014f977edf0eb7011d72e7245fc320afb6f9138f4b02c046a1b1174af77bd3d5c99ce5f3df013618e547e59880313c4073ac95354d6a23e97c236627ab2df5ea75127ded4d5ee74f232c43a48a6d71999f1d9907df713fabad7adb356d2538d8ff77bb47e9107cbf30a538692163434e85dd189d0ce756f17e5583800000000000000", @ANYRES32=r3, @ANYBLOB="08000500040000000500530000000000"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44001000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fedbdf2509000000050030000100000005003800010000000500370001000000050035008000000005002d00000000000800310005000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x24044840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = accept4(r4, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d40)={0x33c, 0x0, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x228d1d64, 0x68}}}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}, @NL80211_ATTR_FRAME={0x1a3, 0x33, @probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @broadcast, @broadcast, @from_mac=@broadcast, {0x8}}, @ver_80211n={0x0, 0x7, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x4, 0x1}, {0x9}, {0x1, 0x1}, {0x0, 0x1}, {0x6c}]}, @void, @void, @void, [{0xdd, 0x84, "142ec6325c7f318b65c217fff148ead6a072d4205fc62b465a45e3110ba4cb673a7bd652e26ee9923c02794fe5a1f8dd312a9b18484a456e41ac8e38dfe7fd0f02da452b69c7fcb0fe004cea15540b8166904e6c031fb8c66226ac17d197b7430fbff6e4b5e2eec7bdb3ff21b5a84cb8ddb5c8d733865235fe143c12483ca01b31f38b4d"}, {0xdd, 0x61, "b5049dc1806c3d257335accbc5d867f51ae0ab0c61023012033a81a6e05d7960a2163983c35e008f996d2154f2d159d69d0410d2e30c311fce478c04e76b771e14b4def1ee5f0405353d2c28c938ac62fbaf62d1c41c0c292f400c8c0007877cdc"}, {0xdd, 0x43, "dd89b54a8f6cc88d4cd34e4fa020076d779e0bd2e1563545af8315e27c82ebc7df0856e9bc6ffceea9a6dc084fc8dfe893be89d31f28d1844c0e4fb19c573274565707"}, {0xdd, 0x44, "5685d1c175a6de426806e36af616a855ee68f7b116aa825e5586345232b613af609f4d65321b5187a03ee4ac4bb7863345eff6bd2bfe8d9b519a9f4996d2ffe9e6d890d5"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x67a}], @NL80211_ATTR_FRAME={0x12a, 0x33, @auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6770}, @broadcast, @device_a, @initial, {0x2, 0xe12}}, @ver_80211n={0x0, 0x8b, 0x3, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x1, 0x1, 0x1a, @val={0x10, 0x1, 0x61}, [{0xdd, 0xff, "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"}]}}]}, 0x33c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900040000000a001a0008021100000000000a000600ffffffffffff00000a00060008021100000100000a001a00ffffffffffff00000a001a0008021100000100"/84], 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000000740)=""/211, 0xd3}, {&(0x7f0000000840)=""/70, 0x46}, {&(0x7f00000008c0)=""/160, 0xa0}, {&(0x7f0000000980)=""/216, 0xd8}], 0x5, &(0x7f0000000b00)=""/205, 0xcd}, 0x22162) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r7, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa0, r11, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x46, 0xa9, @random="255357654652441e58e66da91cff45048a69e9bc446a98a3336501826ebfa8eab1cefb5ec176cbbcb0c59d8ff2d4c69b9afb8ae524b0fff85acebe9d992dc7204980"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48890}, 0x44080) [ 684.248136][T26811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.273429][T10966] usbhid 3-1:0.0: can't add hid device: -71 [ 684.279537][T10966] usbhid: probe of 3-1:0.0 failed with error -71 00:23:31 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfffffdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 684.418906][T10966] usb 3-1: USB disconnect, device number 25 00:23:31 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfffffffffffffdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x14000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000038000511d21280648c63940d0124fc602f6e35400c0002000e00000037153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x0, 0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0x3c}}, 0x0) [ 684.571134][T26813] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 684.593439][T26831] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:23:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) gettid() fork() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r4) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 684.700064][T26811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.703470][T26848] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 684.723913][T26847] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 00:23:32 executing program 1: ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) fdatasync(0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ccc0)={0x0, [], 0x40, "944a99252ba204"}) sendfile(r1, r0, 0x0, 0x400000000006) open_by_handle_at(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x40) accept4(0xffffffffffffffff, &(0x7f0000000100)=@nfc_llcp, &(0x7f0000000180)=0x80, 0x0) setns(0xffffffffffffffff, 0x0) [ 684.791233][T26847] device 0 entered promiscuous mode 00:23:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xec0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:32 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xffffffffffffffff, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) dup(0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000e8000000000000ff0000028500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_journal_start\x00', r2}, 0x10) syz_open_dev$video4linux(&(0x7f0000003c80), 0x2, 0x101) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c0002800640020040000000"], 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) accept$unix(r0, &(0x7f0000003cc0), &(0x7f0000003d40)=0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_journal_start\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) 00:23:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x14000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000038000511d21280648c63940d0124fc602f6e35400c0002000e00000037153e370a00018025641d00d1bd", 0x2e}], 0x1}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x0, 0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0x3c}}, 0x0) [ 685.074444][T26892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:32 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 685.243546][T26915] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 685.256980][T26915] device 1 entered promiscuous mode 00:23:32 executing program 1: ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) fdatasync(0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ccc0)={0x0, [], 0x40, "944a99252ba204"}) sendfile(r1, r0, 0x0, 0x400000000006) open_by_handle_at(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x40) accept4(0xffffffffffffffff, &(0x7f0000000100)=@nfc_llcp, &(0x7f0000000180)=0x80, 0x0) setns(0xffffffffffffffff, 0x0) 00:23:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) gettid() fork() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r4) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 00:23:32 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 685.525414][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 00:23:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) gettid() fork() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r4) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 00:23:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r4 = dup(r3) ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="f2a50f00da670f015b0a0fd366673e640f01c80f01d10f06ba410066b80800000066ef650f78c1"}], 0x1, 0x0, 0x0, 0xfffffffffffffee2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x1b000}) ioctl$KVM_NMI(r2, 0xae9a) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={0x4, @bcast={0xa2, 0xa6, 0xa8, 0x40, 0x40, 0x40, 0x12}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) dup(0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000e8000000000000ff0000028500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_journal_start\x00', r2}, 0x10) syz_open_dev$video4linux(&(0x7f0000003c80), 0x2, 0x101) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c0002800640020040000000"], 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) accept$unix(r0, &(0x7f0000003cc0), &(0x7f0000003d40)=0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_journal_start\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x20b000) 00:23:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() unshare(0x600) unshare(0x20000000) clone(0x39226100, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) wait4(0x0, 0x0, 0x0, 0x0) 00:23:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x8300, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:32 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:33 executing program 4: syz_mount_image$sysv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x4201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@known='user.syz\x00', &(0x7f0000000340)='qnx4\x00', 0x5, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) syz_mount_image$qnx4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="c294", 0x2}], 0x4080, &(0x7f00000006c0)={[{'user.syz\x00'}, {'user.syz\x00'}, {'\xde\bx4\x00'}, {'\xd3\xf0.\xe5%\x10p\xc5\x15\xc3\xd3q\xcc\x00\x00\x00\x00'}, {}, {'(]'}, {}], [{@obj_role={'obj_role', 0x3d, 'fd/3\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@euid_lt={'euid<', r3}}]}) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=""/188, 0xac, 0xbc}, 0x20) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xa80c, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x1001}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='fd/3\x00') ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000680)=0xffff) 00:23:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() unshare(0x600) unshare(0x20000000) clone(0x39226100, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) wait4(0x0, 0x0, 0x0, 0x0) 00:23:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) gettid() fork() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r4) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 00:23:33 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xc00e, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:33 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x70180) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000017c0)={0x60, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa44, 0x0, 0x0, @loopback}}, {0x1a, 0x2, @in={0x2, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r9, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8024}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xf15, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x4}}}, 0x24}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r3, 0x2, 0x6, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x6, 0x8, 0x5, 0x9, 0x0, 0x7, 0x40000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp, 0x90, 0x0, 0x4, 0x1, 0x2, 0x8, 0x2, 0x0, 0x5f510000, 0x0, 0xfffffffffffffff9}, 0x0, 0x2, 0xffffffffffffffff, 0x3) 00:23:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) gettid() fork() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r4) socket$netlink(0x10, 0x3, 0x4) 00:23:33 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x34000, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:34 executing program 4: syz_mount_image$sysv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x4201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@known='user.syz\x00', &(0x7f0000000340)='qnx4\x00', 0x5, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) syz_mount_image$qnx4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="c294", 0x2}], 0x4080, &(0x7f00000006c0)={[{'user.syz\x00'}, {'user.syz\x00'}, {'\xde\bx4\x00'}, {'\xd3\xf0.\xe5%\x10p\xc5\x15\xc3\xd3q\xcc\x00\x00\x00\x00'}, {}, {'(]'}, {}], [{@obj_role={'obj_role', 0x3d, 'fd/3\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@euid_lt={'euid<', r3}}]}) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=""/188, 0xac, 0xbc}, 0x20) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xa80c, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x1001}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='fd/3\x00') ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000680)=0xffff) 00:23:34 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x4, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x40000, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() unshare(0x600) unshare(0x20000000) clone(0x39226100, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) wait4(0x0, 0x0, 0x0, 0x0) 00:23:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) gettid() fork() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r4) 00:23:34 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x6, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 687.379169][T27075] __nla_validate_parse: 10 callbacks suppressed [ 687.379188][T27075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x400300, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) gettid() fork() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0x7) 00:23:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) gettid() fork() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r4) 00:23:34 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x29, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 687.742009][T27105] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() unshare(0x600) unshare(0x20000000) clone(0x39226100, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) wait4(0x0, 0x0, 0x0, 0x0) 00:23:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:35 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2b, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:35 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = dup(r2) ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[@exit_looper], 0x79, 0x0, &(0x7f0000000180)="49bd1fcc4ccfd54f3514c727b49018ef7f06136ac8435553199107c2bf2251651f1430c803558bd675b9ef55ba267efd73a97ae9b2ea6061d525656499cd1f77f1e9a3043716478d31562a5dde8505372c9738eff7e3073c36ab24dc54c84b7ba2dab6fb94e787e973f847068619b01d8f784d28faafcaf395"}) r4 = socket(0x6, 0x1, 0xffffffff) sendmsg$802154_dgram(r4, &(0x7f0000001340)={&(0x7f0000000280)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000001300)={&(0x7f0000000300)="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", 0x1000}, 0x1, 0x0, 0x0, 0xcd8ad7492aeb372}, 0x20000000) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x66, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x10) 00:23:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) gettid() fork() socket(0x10, 0x2, 0x0) [ 688.220968][T27143] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:35 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2c, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x4000000}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='xprtrdma_op_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000300)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000380)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x1, 0x9, 0x6f04b42e}, 0x10}, 0x78) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x5, 0x1f, 0x3, 0x6, 0x0, 0x399d, 0x4204, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x6400, 0xe91, 0xffffffe0, 0x1, 0x20, 0x2, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x7, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup, r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x0, 0x390, &(0x7f0000000840)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xdc\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94\x8c\n\xf7\xdf\x8a\xc1\x1e\xb2Y\xb7\xfbl\xd7\xad\xca\x06\x88\xb2\xf2@N\x9d\xff]\x8b\xb6\xc9\x9bq\xc7\x8f\x14\xfd\"D\x8b\x88s\x7f~\xa1\a\xc2\xf4\xd3\xdb\x9f\x04_\xe2\xf2\\5\xfd\xbdT\xb7\np>\xf8\xd5\x1a8\x03\xdf\xabo\xd6\xbem\\?Y\x95\x11*Rk\xdb=))\x9f\x0e\x1f\xc3e\n\xa4\xe1d\xfe\x9c9\x15FkK\xd9lu\xb4g\xf2\x95!f\xc6}\xdc\xcdmxMw\xcc\xa0\xd6\xdb\x8e\x81\x9b_i\xed\xfd^~D\x83MB\x04\xe2\x1e\x12\xb6\f9\xba\xa4\xfaA/t\x9e\xbb\f\xab\x9b\xe7\x10k\x86&\xf7\xf0\x8f\xc3m}<\xee\xbb\x87\xaf\xadM\x99\xe2\x8czd\xe8M\xc0\\@F\x95-\x1b[1}/\xc1\xe6\xf8'}, 0x30) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r5, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) [ 688.361996][T27143] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) gettid() fork() 00:23:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:35 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x3a, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 688.580907][T27184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) gettid() 00:23:35 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x3c, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 688.745466][T27195] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x4000000}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='xprtrdma_op_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000300)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000380)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x1, 0x9, 0x6f04b42e}, 0x10}, 0x78) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x5, 0x1f, 0x3, 0x6, 0x0, 0x399d, 0x4204, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x6400, 0xe91, 0xffffffe0, 0x1, 0x20, 0x2, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x7, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup, r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x0, 0x390, &(0x7f0000000840)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xdc\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94\x8c\n\xf7\xdf\x8a\xc1\x1e\xb2Y\xb7\xfbl\xd7\xad\xca\x06\x88\xb2\xf2@N\x9d\xff]\x8b\xb6\xc9\x9bq\xc7\x8f\x14\xfd\"D\x8b\x88s\x7f~\xa1\a\xc2\xf4\xd3\xdb\x9f\x04_\xe2\xf2\\5\xfd\xbdT\xb7\np>\xf8\xd5\x1a8\x03\xdf\xabo\xd6\xbem\\?Y\x95\x11*Rk\xdb=))\x9f\x0e\x1f\xc3e\n\xa4\xe1d\xfe\x9c9\x15FkK\xd9lu\xb4g\xf2\x95!f\xc6}\xdc\xcdmxMw\xcc\xa0\xd6\xdb\x8e\x81\x9b_i\xed\xfd^~D\x83MB\x04\xe2\x1e\x12\xb6\f9\xba\xa4\xfaA/t\x9e\xbb\f\xab\x9b\xe7\x10k\x86&\xf7\xf0\x8f\xc3m}<\xee\xbb\x87\xaf\xadM\x99\xe2\x8czd\xe8M\xc0\\@F\x95-\x1b[1}/\xc1\xe6\xf8'}, 0x30) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r5, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 00:23:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x4000000}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='xprtrdma_op_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000300)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000380)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x1, 0x9, 0x6f04b42e}, 0x10}, 0x78) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x5, 0x1f, 0x3, 0x6, 0x0, 0x399d, 0x4204, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x6400, 0xe91, 0xffffffe0, 0x1, 0x20, 0x2, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x7, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup, r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x0, 0x390, &(0x7f0000000840)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xdc\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94\x8c\n\xf7\xdf\x8a\xc1\x1e\xb2Y\xb7\xfbl\xd7\xad\xca\x06\x88\xb2\xf2@N\x9d\xff]\x8b\xb6\xc9\x9bq\xc7\x8f\x14\xfd\"D\x8b\x88s\x7f~\xa1\a\xc2\xf4\xd3\xdb\x9f\x04_\xe2\xf2\\5\xfd\xbdT\xb7\np>\xf8\xd5\x1a8\x03\xdf\xabo\xd6\xbem\\?Y\x95\x11*Rk\xdb=))\x9f\x0e\x1f\xc3e\n\xa4\xe1d\xfe\x9c9\x15FkK\xd9lu\xb4g\xf2\x95!f\xc6}\xdc\xcdmxMw\xcc\xa0\xd6\xdb\x8e\x81\x9b_i\xed\xfd^~D\x83MB\x04\xe2\x1e\x12\xb6\f9\xba\xa4\xfaA/t\x9e\xbb\f\xab\x9b\xe7\x10k\x86&\xf7\xf0\x8f\xc3m}<\xee\xbb\x87\xaf\xadM\x99\xe2\x8czd\xe8M\xc0\\@F\x95-\x1b[1}/\xc1\xe6\xf8'}, 0x30) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r5, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 00:23:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:38 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) 00:23:38 executing program 2: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006c0000000300000032"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="2c2da2ee918a3730f7b1fdf3c8bea25d86dd8936c025fdb506000000d74a6b8002c43edc93b5a8a14bdeef2960e128f481c003c6a794e5315680", 0xfdef}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cc40)={0x80000001, [{}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "a8c3133d73d9db"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000002000000000000000ffffffff000000000002000000000000753d00000010000003cd000027000000fbffffffffffffff81000000000000000000008000000000000000000000000000000000000000005b28c8a93476a13878314f91c0a6dfe4347767e6e964db7f3db021c5e62e441a3fbdb1fde869cc50fadff6d3521d6855eb0381d88f0eff12dd6602402df751e043312ae032946c5f898edb9a2828ff1267c91e20e7b73dc67da04c8f6c41c04f0a5ee36bbc75f64cd74b86fa10d18e0afda17ce95bffb130d8545516a79fbb330c7789932613c04d817b549cc4d23bafb84bf5e866545427284f3d9179da817501d8c20cb3b6e4a2217f333cccc0956ee501faf6ca676fa30df9946e532501d13d52e11d63e6ed0d14fd1eeeedc863464c459eda35a4a10104f78a6fef4e63e1b6e0a25424b3cff3aff9c81c8d78e1624198707ad3212a43208c4d9be54e5e735d1cd478504277a5b95961238bf7c1bc5761a34b2d718c268672bca32172664e758cfc90c712ec64c1ab0ac9baa32df220bdcb4f8abaa6ce08874abe00aab23666ae1c9afbc428000000000000000000000000271fdbd4da3b6da3689be75b07e4b77dba25e1110942da1086492430db6543f93f09abc953bb73e5ffa0cd09c07b0ee542931d24a4958eb68a7f99099ee515bbb0979cef646c25e3ff3fa504c8af18b40d427910c5dd52f36797802e41878805ddad52569a3bed9a6ab05a25fecd133f5fd31e15052523b38aff8c6d9d3f712b301c0d606024fe71ba0f8bfee27b028361118a986d62dbc841001ed2e44b0e8845451f4959fc45838e579d4f238880dd4aade51de794c95f85be840fd5027a2cef7538e80a82528e622f4da3653d21dba80000000000000000000000000000000065809408097ae319368dee78dd9826f2d5870af57c894231c4fe3dab19f43d4b224bb0369b430ce59673781746957b73300b05b90000ff0100000000"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ccc0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r6}], 0x40, "944a99252ba204"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005d840)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xfd, "ebb42b802bbb65"}) r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055300)={0xfff, [{r12}, {0x0, r13}, {}, {r11}, {}, {r12}, {}, {r11, r13}, {0x0, r13}, {r12, r13}, {r11, r13}, {r12}, {}, {r12, r13}, {}, {}, {r11}, {}, {}, {0x0, r13}, {}, {r12, r13}, {r11}, {}, {0x0, r13}, {}, {r12}, {r12}, {}, {}, {0x0, r13}, {r12, r13}, {r11}, {}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {r12, r13}, {}, {r12, r13}, {}, {}, {}, {0x0, r13}, {}, {}, {r11}, {r12}, {}, {r12}, {r12}, {}, {r11}, {}, {}, {}, {0x0, r13}, {}, {r11}, {}, {r12}, {0x0, r13}, {0x0, r13}, {r16, r13}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {r12}, {0x0, r13}, {r12, r13}, {0x0, r13}, {}, {0x0, r13}, {r12}, {}, {}, {r12}, {0x0, r13}, {r11}, {r11}, {}, {}, {r12}, {r12}, {}, {0x0, r13}, {}, {r11, r13}, {0x0, r13}, {r11}, {}, {0x0, r13}, {r12, r13}, {}, {}, {r11, r13}, {}, {r14}, {r12, r13}, {}, {r11}, {r12}, {}, {}, {0x0, r13}, {}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {r11, r13}, {}, {}, {r11}, {0x0, r13}, {}, {r11, r13}, {r11}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {0x0, r13}, {r11, r13}, {r11}, {}, {0x0, r13}, {r11}, {}, {0x0, r13}, {}, {}, {}, {r12}, {0x0, r13}, {0x0, r13}, {}, {r12}, {}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r12, r13}, {}, {r11}, {}, {r11}, {r12}, {}, {}, {r11, r13}, {}, {r12, r13}, {r15, r13}, {r11, r13}, {0x0, r13}, {0x0, r13}, {r12}, {}, {r11}, {r12, r13}, {r12, r13}, {r11}, {0x0, r13}, {}, {r12, r13}, {r12}, {r12, r13}, {}, {}, {}, {0x0, r13}, {r12}, {0x0, r13}, {r12}, {r11}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {r12, r13}, {r17, r13}, {}, {0x0, r13}, {}, {}, {}, {}, {r12, r13}, {0x0, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r11}, {}, {}, {0x0, r13}, {r12}, {r12}, {0x0, r13}, {r12}, {}, {r12, r13}, {}, {r11}, {r11}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {r12, r13}, {r11}, {r12}, {}, {r11}, {}, {r12, r13}, {r11, r13}, {r11, r13}, {r12}, {0x0, r13}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {}, {r11}, {}, {r11}, {r11, r13}, {}, {}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r12}], 0x0, "4de5e83826fe0a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000005e840)={{0x0, 0x5, 0xfffffffffffff800, 0x6, 0x4, 0xfffffffffffffff7, 0x800, 0x81, 0x10001, 0x734, 0x6ca9, 0x2, 0x4, 0x10000, 0x5032695d}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e8c0)={0xdb52, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r8}, {r11}, {r18}], 0x3f, "a5d7cd3d874b39"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000053000)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053200)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r19}], 0x2, "3b7604e664df0d"}) [ 691.193228][T27233] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 691.261280][T27233] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:38 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x2, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) fspick(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0) 00:23:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:38 executing program 4: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x3a, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:38 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x3, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 691.635995][T27267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:38 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x0, 0xffffffff) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9100}], 0x92, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/152, 0x98}], 0x1, &(0x7f0000002300)=""/253, 0xfd}, 0x101) r2 = dup3(r1, r0, 0x0) r3 = dup2(r2, r1) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x802}, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) [ 691.709664][T27267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:23:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000062c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="100000001ab78add39000000000000000100000000000000"], 0x28}}], 0x2, 0x0) 00:23:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:39 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x4, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:39 executing program 4: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x3a, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:23:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f00000002c0)=""/123, 0x7b}, {&(0x7f0000000340)=""/95, 0x5f}], 0x3, &(0x7f00000003c0)=""/71, 0x47}, 0x12141) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="832459dc016e03ef5cf600000000010000003da621a9659d", 0x18}], 0x1}}], 0x1, 0x0) 00:23:39 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x7, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:39 executing program 4: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x3a, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:23:39 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x0, 0xffffffff) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}, 0x9100}], 0x92, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/152, 0x98}], 0x1, &(0x7f0000002300)=""/253, 0xfd}, 0x101) r2 = dup3(r1, r0, 0x0) r3 = dup2(r2, r1) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x802}, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) 00:23:39 executing program 2: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"b354b4d6582bf979f135ba4a4f915d66", 0x0, r4, {0x1ff, 0x233fc2b7}, {0x6, 0x8}, 0x6, [0x9, 0x6, 0x4, 0x400, 0x1, 0x1000, 0x1, 0x4, 0x7, 0x32c, 0x9, 0x81, 0x5, 0x0, 0x4]}) r5 = accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x60) sendmmsg(r5, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="5483b6378318aee355ad86e115b625ef18e67faa3bd1638e65ae16503da346a2c4d1cf59a25ff6fb87c716e9a7d823457b29b2c66f868de27e6204b1889e042f30d91b8015120966f51dfb5d6fd8f807e697665ba547329a6c524b0b11cd3b63a4d3c87a32b5098e7562ec30244613178dc3c577b327b15f7ef1", 0x7a}, {&(0x7f0000000540)="ef0550411fdd6f14584dbb27b08209db7a39fb28dd37600da64fb234348609ffaf3797e58cb903a46bfebceb92343afb0398758db950c9a102b19193f6db3f0c2f0a3389e6572cba48d39d445b08dd2ed482187088319e3f62f8d08448617401c31a8ea8c7a63b5a5f1feabd0f8e942d5262e2a71ec76012c617308a666a7428242f7eb97582069f43e119cd32f4e425d252ce44c23aaf0a3edffa26d0ddc7545a6d291c2f8b9ce48a3761579e94498b0c251e28b9fd6d0dc2535c9f57f2e0093e6a03f07ea0835c3f19376704fa92e0eb678e1f82f7f99f79c73d4360c19aad8616f492f6906e139b86bfd1f2ab5f4f0b092a384c7372", 0xf7}], 0x2, &(0x7f0000000640)=[{0xd8, 0x103, 0x81, "ce1fdc237cf7f3cb95b921d5e048ba21fd4d55c0f65bdc0fee669df8ec50dcb38f8c072041e8ee7fd59a5d1552132c76ec95ee4e4d1c9b07f6135f749affd6db0dab8f1ff9c035fd0ce4302e31d9f02461e0dbc845a8f937ca96b77201995f4d78a16c9fa85c5c97c25fefb7f79e0f8efb26b65ecf22aafef2c79460ff48649e108b759555b3d19a877ea9ac52936f2c97d70aa29c614f18f5d605d35f78768284271a75ca54eaf1964920356f26bf3d4265f975af83ed5f9954f6411531f65f78c7bf5089d13e7c"}, {0x30, 0x102, 0x7, "685ee8db927837c99465bc11d6b97a114e5c1debca42d750d3"}, {0x100, 0xff, 0x3, "6de842e90295aecefb07a516d1b849cd857ec33d4d62f6ea8aba0b3754acbfa2dffca55333bd5106ba643a360f56bcb614573a7ec65ea5de84b63759d7bfa28d9333fa90a3d5c1b925dba6a9a19f7cc3b009cc2b3c2677025dc44e8f355cee9eeaa30cf5fbe9807050b76039b92e96eff62a021245cfb39aded0bf5b1ff11fd4dce266977196879d83571332662573496256e4faf55f0aedb9982e3f123c07284b8e11a6b789dc3638ea9ce7dfaba8e7f86a2c46ca591e43e7aa14c1e620ebfa13b55ff35a64aedd37cdfb98a184e432be11828debb7d8e834f856713edff0daf03cb3a5dd491182b7097b38"}, {0x30, 0x104, 0x7, "63a97e4b85c4b9f04983eec8919731befd925d66ae855577d8818b02"}, {0x38, 0x116, 0x800, "14e824775ecd7cb865e6692a3d68766ee426a7d98e853e9b4c7088b15ddaafd7940017d6f1"}, {0x90, 0x1, 0x800, "747f3f92499cad00f906994e68f6e75ce49e467e0adcab877e4626926d6b58d9e592b539c517d1cac92a71b5ad8f7a25f1cc051968b03ebc037691604c623f3307c35bb800f487e89bc9fa44a821b47290e56a4df85a6af909c494a6d9cf3235c75d499bf5d6e5bab6265d4c7dc2a7f150e02f34c2fe3c5ab7a23522b62e"}, {0x100, 0x1, 0x80000001, "c5c8214f005406dcbd0449214cb7214dd209e1e7d334a3ac8ac4314e8a9ba4f2e4a05343b796e37a33c54ea3dd7bdb2000d0adde2fbb9d6edf5fdbb7662e23519ba8137fca275b6eea9c86c5363ee5cce7713c7228aee626a130776045fbec5c02fc56d0d556bfb91f115719a3585d46422c6e280cf57fca59ad42bb7a0b2e4977e066c21e4aec5cc22995de4a7cfc01acaf1f213fb4e1636184cc6cd2961238515de71a2afbb8e237096c8368d7842d65a8c4044b3039490684dfc6551c41baaeea370b05ccc63abeec5cd6b5400e7670a3e6489d782399b195891ed16c57ce1323db36bdd1206b693f97df56"}, {0xf8, 0x115, 0x1, "7be2427a92b1d63887629042a84d5ba52bbd41ea556aafdfa400f82e47c349b75cc1b7faa92b3970ba7b121c1eeefb8032bd307bba2bc0d48f8ecb7ffeeb9e8e4da77a90a7c120638534c2b6cdca29ce53cdd2b940654466f14d344a9863fde66df077883d9d1f72dd2359af1b62039f23d9470ec172c8b2f5d73a11505200728e31be1a737c4dd6a9cc06e55f718fe3475cf0df01b80d6994f8fc35de9a9fd5ef8d901fbe922005f5766088453628d959c12f0085d2b9ff3c75b9d455fe51a29271bc4708cfd960368a3f579c994c47103aee89bc198df256e0f9de958a794c06cd07880ad7af"}, {0xb8, 0x29, 0x1c40000, "4fb37d60808e340fa363d6a42f5668a91f817b2234267fd04a64ed944bf2b84fb54dcae8aff382db541e01e3be36713e0578dae9a919e3b9532e21aab91165a335fe056055e14e53b559c9cdb3076175e2e732db0b8d27ef3b7ebe826a78cc0279c398a8ebf13d96128178cc8cb5cb9cb2312cb96f834aed69d9a3713a99d4f5bf6c44e70440835006b029e70b96995c17ba96952a7ec8e7367ba5547f61f7ef576dd77979e5"}, {0x70, 0xff, 0x18000, "043d0c7c0006f60dc08b135556fc77eded66b3d2b1f31d4e7b8a398f4680be150239cc8aa9acbe0ac2a3c8d5eb602c20a262f96864911816a1bd7daa04c848d7693646bbfcdf77d50e3063e6d287d3b0f458e4fbda8287e577eee42844cbb8"}], 0x620}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c80)="30c8859adf11b2bf3f2e4de624e73971af0a936b72741248d59070fbb41fbbf84fa28fdded4095ebb24d7ce87dcff1b75bddece0b733d8e2d1fb0311293c8b9f1f7421c30964935db77f506ec8e1b7e6bed6b76100fcfd2aa33b012629ea943e983b3d3fbab6e11f7a7b563224e8b64694a4c69b5a6ce4c40e6679e85703232f7ed0396e5a62c6c25931a64962142869667684231fe427231853dda29a3047b03fe963cb9560780d8b96cdac3988a5dffdec63fe371451f375", 0xb9}, {&(0x7f0000000d40)="4616cf35b5934028c398fa010e32b3ec3c", 0x11}, {&(0x7f0000000d80)="aa1e4c3c80be3c523837d6eda94859daf4746073929d7e631131ddd0666c24569cb566639f502178f38cc92654e02931025ce0a7a6ee6afbfecbf5fdbfb09d9a0ad25bf657271981989f64d8257b84d2bdf71ace5afb312cd6c7e650f493b445729ba95de4754b6c9afaf540c2189d963a7247059c29697e3185796492b8719b42834bc5f25fcc3c7d38fb73a3ef61873122c44cacf3b54ce0f105e9d51c6d7093b73d21fdf0282024f3553fdb3dcb7099c3c670556bd187fa0c6bd93d385277e4d89a062161c33ba441638254f03c18a5e435068e98b1299ddbec858d", 0xdd}], 0x3}}, {{&(0x7f0000000ec0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f40)="bdd39248d78fd539d0e846b2e2b33c1687991f3c65bc2734593157", 0x1b}, {&(0x7f0000000f80)="4817ba12041326c4a1bbe2b62caaa60e4f668f5e74eaf23707ab3ae4ae3f70361bdce26c2a4ca975f277f5a61ef0e17a2fda27921d4f51d86ae13634eab913cd2ec94a594a581595febf2d1379aeb941c7d18ee016ebd498d84b0400f974ad301c97b09094bd47aadac0ca48d2404bee4d25bdf31f1d20ea35e9c56e3536b98b55ac2d71a164c81e2ad7a51f0c6acb1f1f5bdc611192c48e36c1bf3c8adc51ecba089015bc1323942b6193dcda6da1dcd30fcdf5274d86a37ea42d4ea383fd1d9416c8d772eb069ca3", 0xc9}, {&(0x7f0000001080)}], 0x3, &(0x7f0000001100)=[{0x48, 0x105, 0x2, "038bc354659e01157022c90619ffff1ce6396aa69016efe66fd10367370f72ea411d95f7ac2ccb0a4039b618f075d3178afb1b8b88"}, {0x60, 0x104, 0x5, "e385e206cf808748a87fae3f9d5d4dbdcc6823476f440d1d6fa382c16a17b0a8ad07c8e91c8d46f2c045a95c47b08f799b03dc38421c6d000a78e6270468a55115bdfc7f4cb184a6eb10"}, {0x88, 0x0, 0x2, "ca68112b527e9788bb062c4924ab492ae2433b5f0972422e4feef67cfec7902353c06c002cb74a054ac77c73bfbf7552f026b7abcfa3459bdfaf1e08ac93e831f2eb1251c2a1e14ebdd68757bc8079a1ad0076d463e19eecac632f99948b40a80dab7f28fc62af4c87641af536cb8e0338f13db4b6"}, {0xc8, 0xff, 0x1d, "d7a4456a87d732dd935dbe5720fd0c0e598f9ae556cb243b419d2afd7fc75612a590031805084293b09bf08b7cf5794e36c0cdeb42661b9958c95eb09ed87c360ca3aa6c0cd634ed8c015dbf7c14179437072c0795382c76140a41a785e27eef0f9bff40830848dec899ac6db7aef53533510be6b617c58beb3b2b2c460df8732929f2bfd30d7a6e9f52c6c254f2645978a782626d5a79f5e653d6bf16223ed000341cd9394c69c06c3d475468a9c7583e7a80ce5a81945f"}, {0x100, 0x10e, 0x10001, "9675d37bf59af3a084deed32ec60c082df3891de5293cf01974144e97f40c2c3b1075bdfcc814f83ca75051642e239b3510fddbe28c8e21461a23422445c08d3d6c2307cd626ccabe96ab26543b4f5322490674899a68052828290e8e9c73076b965981a628e24ce7c24f5a4b6288d21ad1cd11a059ca18c2fe7a938caf2b47d17a673f2944625a4e5a264408b7241ac827cf8fdf3a6015cdb624d823bc81d1cee050a30de4c1ab491c6ff13e7bcc8ca4bc341fff7b90e7f8441a911c1bc101d111357e90566d37510cbf0fe42a9b03a6853bcba0bfca0838fbd16acc8bdb59fd110dc3b5ffe037f6c1eeb27ed"}], 0x2f8}}, {{&(0x7f0000001400)=@isdn={0x22, 0xfe, 0x7, 0x6, 0xf7}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001480)="e41e7a7c21b31b5917d9a6a03c4f81e73bcaf9a8554418b33e1967f4980b9cb77a4bc1248725df4a3505e0564ad6487f1714edc9c583430ef0fe5759a53b9c87a289b4935adaf02bab1971a2df9bdfd25f941b5c9d7795769613724e3dd0f16200cc232f905fbe2b1214a612fb49fb23b00e2431a123df25f0d1faa43534fbd26d1b32209b757ea91cd1326c07f9b1f9cf970f5a3be4d1dcc984b5598b5bb2fd2259e871a712d5ad74e713404bce084a997ce7d9a5a4ead5cdd28e56f29ae7448a74fd90e0", 0xc5}], 0x1}}], 0x4, 0x8000) 00:23:39 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x8, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:23:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="b9800000c03500400000665c0f5d0202f513559afff39aff35c5e17de7a54b49f5064900c42e660f3881b7c700000000f3c744244400ac0000b805000000b9108000000f01d9442402079e4200ff1c2426660f388077694f4f0f5c19c7442400b4000000c74424020efc0000ff2c24f5f342d8868680000066b82001c6460d91854f4a4a66420fc73326650fae15fbffffffed", 0x93}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000006480)={{0x681bf776ab9bd958, 0x0, 0x80, {0x0, 0x2000}}, "be77f645fa0faab4173328e03e0e9f020bbc798c84be65bf762199e269b6d15af3d542e5a531a895866fbf13910d95e922d6aa84d68924efe5e444b34d9df08a868ae23c677546798d6ec2c17d6e3f87f0d757c2078c9325c641fea9938ba4f20ebb2577f51ba467d973398c7fa94be4e2abd427b7ad4385c63e630090759c2a6c768a973d0b1e7244e494d5925d9d9f40afd544ff001fdb8de7af279d8700739c11327a76f8bc32743c959d8858b276c211222f40206257be84ddd07b20d8b1de9b5390ba5eaa289c0bfdf6b5636b7acfac5159e2e775395858847e3e28da4ed237027cd849991ab91e6e5dc61b9936de574c3b26a2b0e303386c02ed1bd0a5acaf8a9271e196bc59fb3d7d6a88383d53302680fd8ebd0e75fa67333a6fb9da0333d6f87b3f628136a4b9ec1c2f4cf3d5ec900ec17d48e3f741860d963ec6e629243d06b547374ec3f5a0a8e71cdd67e8f591d68711ba4df1f2fc62d9f54c6f7b8844c8ce569fb7f983a631250e77374780413ab37235afdefb70572e79f35d36406aded61bcf76711aacf325b2ac1f78b4ede1239e36d5d644c7a81cdf6b95a1e3aa6c2f70d889654572d1c37d6570102c2525a9b3fa28a88c83ded573a896239900bd365dc0323d4921810479a1ac83b64f0f9b2008eb51832bce90105dab379b3d99f6761d4cf438d92356c563c982938fe83026258aad0a7d9f5eacfa359c68ec271d3ecf9a57d3eec56cb0bcf1bb0adc6c297d6e5b101640d39a950bcb54faebed4f850e737b5a2837054bccbecfd1c28e70a967a350d21867ea95b2cdfe55fd3edc6e1f4db06a5e6b77a333af48e92899e074794f3b4687dce6d45cb33433e922b1602e767164dc0e760d14b4c70f304de2cb56ca5ea35719f492480e48b9007e4073a8e02450a93d3932971b32aca283773bbb7974486478d380d8524c0eee27ba19d9c51196494bc3f2c41c1ddc72b0b9d97ca307022baf742cb69b45de669e3224c1eaf4e6ec7bb76f921ad3fd01e1138eda10e945ca95302c1729adf6526041169700a783f767632e99b55eac5e4ebc25b63e11649a31e1dba33445a36b40c7cc7ab6450cb4853c69a9f1eb00d466f6c98f297d3e4882fd4d1a9dff0786cece0dd1b03fd84f982b493349f32e49be255102e7bd1475e25574a992da6907a0e6bce48d4601b51ca05798a0e8b5faa9ed6700902e4626b866b4219e3880277bca07f577def954fdd64e089622ed0eec558759a9b6d3e512b330fa30e31403053a73da1747a7874f5b7a9fde4c0f9f29a27e795e275c9f6c33d9db7f370f148a790811428b2f96566bd0e2b148997e69b0ffe1a81cb04d43ce6a24ea2a9414b930fa1330153cb20aaae484e515393b9ddf9d029806c35d5e956462b7cc7f1c7995006ffeae1f1ba1daf8d43309198bf444ec82c670800d5dacd600924564931014b1e834a38274c6560784572e6d4bf8c4a5a1ee5edb2f4ea5fa9f07b11d3d1d88b993fa662bc04dfb9ffa9e534f1622efd7f823346aa7e0a988f56be531c73f34439df61f9737cca8b93d2c25695138c70c469298c3a114c89a8c3409d4dc18e7bd0158631d0b936823a6dda814ed50f83862058d1ecc19b2e1195c910edb5e7164fbd403de0beb5d7feec901a5a373afa1162be95f0e71e50d479e33494d7c98c1cb2ac886c81610678923685fa9f5fff2584c89130b7d2ac78317e531bb2fcade76520cf8bec450e31eebfa5ae2f78587c572d36d56a69cf3f2cc9e15b77c11877d27e8af0196902d7f94646f0294b4507ae4461397ef21b24a2142f740460e1eb1935cbaccd14f71f21d6fb7144de99154f037cf31e9f30da3c935950c7d1c859096d44b57e7bd37147304b2fe51ab63ca7c4031c1f07913c8a894a6b0573886d7a0a62cd20a0f433e541a43808465eb82af5bb9c819a74bed83cf91aa180442c28b9f4d69dd7e728c7734dd3bd3e277e67e96ab9f09e083c0a6e42fe2bc5dcae9a2deddb7f763e62b0d8adacc00af734bb9e978c13309468a2f942f5d2c9f7cafc97dae2f542ef33be39952fa70ee3e2ecb3105c1a490db73fcf46a3645de10e1cb335ea604f41d10b723872c26f20a71f44b1301fffd601c6a609e0d195bbcb1203cd23fdb3e3f59fa8ae5a484881c34706bacb6a479fa7c9cc6920613dd6903bf046493bac060f046efc6ce43aafe9a3b735c1cb283714548fdc16a2ce9d9dccd77f3b8037132ec1b1f1d965932a9ec4b20efe1f2212c94511b61799b5bd29be84e47d1c1209af544bb4c4820b4897fe00fd583b8ae5394354d1f2532d0801f202ba31bf01a896ebea5302167cf9b0ed71e793d9572fac48d75724caa57f99ba9db2113f5fa52d19356ed1d0c85bd60805952113e521a01444d6a6a502144691a9d32363284410e967626c720cdb3444a56b1b7043047dbf8e5f1b5177c82a651710eaed591e1d4ac5ffaf85411f7c3c3e58fefb5e0528f74b3f78a0b31de68f1e31415a7a37010be818b886c28cca1bf68db068929bad71bc6b4ae2a4c9f2c9bf98f15164e6ef96ef4121c191e5a94ca431b49c475f02acebc42d2c6026e4f7d595e5677947bf6cc0d6f95d7838f91cfc04492cebaed4374984706465ac83a1acbb55450f5b5e1e4cc00a88c334afc4d337089d22c443bcdfb3d268a3e57f563b9732cc3f5d8b1fd98a6f44e3b056cbeb65946ec917ef093c3a62757f2b27e6b4873ae7183b5b9a6528a576af69449df90cda4bfad6c54bed67fecc6fdc624183aecb5072002c8dc9d45505901c61489ab31b7d6cde6943f042953df648861b68663291117f3deb74d3f9e9501d9d50b095baaeef21aca82e00203c06ce103cc923e6f02ab481eed2da0a4eedeb827e9d7961f6d972f347c649e706dc0259d697a6a5ea1ba33a6f2c16beed92b58fa290026c728e91f3de285a74e56e968c5d174639a915b5e53d7b1e5566b1a89f09434afb2a2ff1fd00d13e7ce5a3dcb8e628f39a6c6825acd4b7152a777d21485f6360af8b1c62a4a29f2ad98d9c393530187c14b4defdfc8ac12433be7f56a40ce4087eb1f7cf949e4e9b3c612e4953716ab027a36ce839f1d2815c289d08e0e500630c2f54344d6549b9645a4b31648d25f71dc7a43651aa8530ccd0cec2f96a4385b185823111c514b5beb817a98824f301462598f03919ec52c0fdf5a522f3e4b250ded3089e0958bb20e5f936c8ab4fc00316ce483254f6e2abc024835acdba239decc60fcc316cbb5fe85db2e22ecd1259c607b575d836222d7a21f0fccdc6d4f90c487c66dcbe9d17f6af2edc30b57189f009072fa5b46e1f49aa33a6546aea60202c4e77066e2f487b2bd36f3178ea888488ae52fad830868172d8f2b3335db98a83c45e047ba93eb32e08a014d13fb8b9f3b54c16adaac8a95c250051baaa3667343a3df51ab7dccedcf4410482fb24ab337285d4c0d182bf00050c5cd2f8a1f7954fe0ce1c2325dc159445464327f0c463dfdae8c944db603ceab504409be7e3316e679960b63e1935018641f0d30d40fb4f83faa2786e7284b0adf6fe0ae04f61c362be89177aa7a27cd00a1c101debb3fbae04b8b20fceeef601049626954f0436470eb4d344fd53c34eab4fca401bb6aa64c1d1891ca88300ce5f8b9b7badb64a5aa3ce8ea848e288239def4602e4812c66503ccc2a68b734d97b2fe71e321e09275bbc727e4c02ce1a967f2f7c5f02f658c5e449a1c718a535561afbddd05ad28559c6ea8a5d19298eeccee69818b69a833b972128e153306522a3733396e25e3a2175443715b0926ea967609f73e2529fa4b6c346e32543431d11f57f557c71ff6b789d9a78e8039f78c5089586aeba7a584b3d6b753f8633d062b5cca3639eb95885027a1b78a90f79d33e8872b455a21618b76a4afd3d704849b067ab8f968bf528fbdbdfdd34e84163d644e211e32f9b5b91f86fb815890f6e405d7324fd6ff84fea268cf4d613d8b8cc784fd434f317dd77ccaf40d974c43d70ec15306c691ce9782267b20b35c150c1c104adff5437068f7c9dee058c08403024e5ed1f35bf1b6db213af8fd0293b230ddc7a405e1e3e584292cf6d9bd4ca1d0c325ecf37c57134320f79fac3f26874b1d595d0aacb7bf454bc4e15f755c1c7e2d0951d7731d8bf27c8002f611a942d633c9e0203ee9f848de15966e6c993d790bbc26958fdc3ff4e62b971697855ad0980d3cf6cd79c0f2f0d41eab6d2c67e83295afcbee60179e0997ddf9b15002b7fc058afa567034dabc640790aba2419a5ccbce25abccde586373f4e31f3436e5bab2e156b4cd6abaadbd4e991cb4a15cdea2202b13bce716e1df40d6bcc275f14c152ffe6294d2b5a5377a9da546490a0ff9ec3f27a0a6070f1b0d72b75a74ac1e764c4670b9547faa728500233dc410132d800bddd4e81272f1ace1fa8186e1b68e19b23ee611b2c9119b094764fd0720212c14f12f1835596660e08dbaf1a28c2ecb391094e8decb500484a4f9de412781fe084695a243d474471a3d6abd4ac640cfb7da40e0327defce95a8101a25f7145b55db0510dd090af63fd65f9003693b21b2f3d4775c65707fed78474238d6453592933b2265c3836d0c775b95e9739b3de3856072a5b43c9e3024e8843b2522e92d12aab4a636c68af12722ab38d881f4c97118014db986f3ec966783b93d81d1d70e3ea611482df745256c3ef9c6c949c6afc6929f69d9427ddde81f3f278500c586b3bb736c2fc7713ad92ed13640f4051e72b38568e3f211f75261ee6517de0b980076127d7dc00a1660a11232325f7ac097f46e0ef4493cd7de875d14056419373d887a821672d894d32c810464705e92c9abe32967fead2464c8b2f693f45d07a8160f59ec046019b016ee8b07764278af8c6b22b4cc079f406c0ba898332aa8911b026c75edd02d5a40f8ed9c1a3d39c1893a0affe4b38c77305429562e9d0907179753051cbf13ff936091334fe24a53816d2aa5e2e26993dac3f2c573b0001152ee26b633afd966bfb704050227160bf292bbcc35f78a649bb7f4fe1783a6b10de778519c8a71f1381cc67a779e51ce3097e666d964728d55708e76953826c7659c3647d3f3cedf9f1b45b27f5735bb8d78d874bf73147b738b9c0566a0d2fdcb17f85dc712462e381ba1466d92d903ba24d0cc17ddbeb7bd80b5525d7236a8add54d4eca06fe4cd0d3724403c7ad09f22eb2fcb4181eddde271be821579b7382bbfe36dab5079811e62842da65165c27c181dfed279d5ec12a1c0c13541760c2fe5cce95c6892622229ac24a7211ba43e513077f34342b61611a1ab10b6c51f6e3a06be0716d7d1abc82f5903e32f1e6e3e85789c1b8f140bbe1903b9677ec9655e171bf1f4d27dda003c27d4ef0e043d0def451dbc0f48cb6cb605b1e2d27e9fc9db10c0b571b6805f316b00b581d0d7358f83e14d1b4290e61fc0d0bd97334f31a547350c00877c90bcb591b98986c19d9d477f7dc521ac43d2edf9201ea61c43e6365e795bfb44b0d90ced7b9d34a849dec495d79cae7769c721d7cd17f1503df3d113c49fcb18449ff180d39c94717ae8fcba7ee1d8cf75873098a7a697d5f5d7a6eeef14daf146710ee40c94ff8ea9ff048d108688776fd074e72658d6ea43f42ea03883f70f45c7b86d3eb0bced0f3a60b6da510833728ffdb82af9a34c5fc86e0130861ac66c68b784300", "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"}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x83000000, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:40 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x11, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) [ 692.844301][T27351] __nla_validate_parse: 4 callbacks suppressed [ 692.844318][T27351] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:40 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x3}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000710124c48a76054a3d257fc31bb8be194b6d470e3fc10c2fe6c047b9858eb36fdbe96b391d9485", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x140, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1c31600}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc00000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc708}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x992}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdec4}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x1) splice(r1, 0x0, r2, 0x0, 0x7fffffff, 0x0) 00:23:40 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x60, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x9205a3d6, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 693.172247][T27383] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:40 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 693.321463][T27393] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:40 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x803}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x40000000) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYBLOB="9543b057899ff710e7d361d3d95baf6e325a17dde1527f16c9d31f81febbeb8b01fd05e31989978daa4f70142f", @ANYRES64, @ANYRES32=r1, @ANYRES64], 0x114, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) semget(0x1, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x100000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)) clock_nanosleep(0x4, 0x0, &(0x7f0000000140), &(0x7f0000000180)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) 00:23:41 executing program 2: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"b354b4d6582bf979f135ba4a4f915d66", 0x0, r4, {0x1ff, 0x233fc2b7}, {0x6, 0x8}, 0x6, [0x9, 0x6, 0x4, 0x400, 0x1, 0x1000, 0x1, 0x4, 0x7, 0x32c, 0x9, 0x81, 0x5, 0x0, 0x4]}) r5 = accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x60) sendmmsg(r5, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="5483b6378318aee355ad86e115b625ef18e67faa3bd1638e65ae16503da346a2c4d1cf59a25ff6fb87c716e9a7d823457b29b2c66f868de27e6204b1889e042f30d91b8015120966f51dfb5d6fd8f807e697665ba547329a6c524b0b11cd3b63a4d3c87a32b5098e7562ec30244613178dc3c577b327b15f7ef1", 0x7a}, {&(0x7f0000000540)="ef0550411fdd6f14584dbb27b08209db7a39fb28dd37600da64fb234348609ffaf3797e58cb903a46bfebceb92343afb0398758db950c9a102b19193f6db3f0c2f0a3389e6572cba48d39d445b08dd2ed482187088319e3f62f8d08448617401c31a8ea8c7a63b5a5f1feabd0f8e942d5262e2a71ec76012c617308a666a7428242f7eb97582069f43e119cd32f4e425d252ce44c23aaf0a3edffa26d0ddc7545a6d291c2f8b9ce48a3761579e94498b0c251e28b9fd6d0dc2535c9f57f2e0093e6a03f07ea0835c3f19376704fa92e0eb678e1f82f7f99f79c73d4360c19aad8616f492f6906e139b86bfd1f2ab5f4f0b092a384c7372", 0xf7}], 0x2, &(0x7f0000000640)=[{0xd8, 0x103, 0x81, "ce1fdc237cf7f3cb95b921d5e048ba21fd4d55c0f65bdc0fee669df8ec50dcb38f8c072041e8ee7fd59a5d1552132c76ec95ee4e4d1c9b07f6135f749affd6db0dab8f1ff9c035fd0ce4302e31d9f02461e0dbc845a8f937ca96b77201995f4d78a16c9fa85c5c97c25fefb7f79e0f8efb26b65ecf22aafef2c79460ff48649e108b759555b3d19a877ea9ac52936f2c97d70aa29c614f18f5d605d35f78768284271a75ca54eaf1964920356f26bf3d4265f975af83ed5f9954f6411531f65f78c7bf5089d13e7c"}, {0x30, 0x102, 0x7, "685ee8db927837c99465bc11d6b97a114e5c1debca42d750d3"}, {0x100, 0xff, 0x3, "6de842e90295aecefb07a516d1b849cd857ec33d4d62f6ea8aba0b3754acbfa2dffca55333bd5106ba643a360f56bcb614573a7ec65ea5de84b63759d7bfa28d9333fa90a3d5c1b925dba6a9a19f7cc3b009cc2b3c2677025dc44e8f355cee9eeaa30cf5fbe9807050b76039b92e96eff62a021245cfb39aded0bf5b1ff11fd4dce266977196879d83571332662573496256e4faf55f0aedb9982e3f123c07284b8e11a6b789dc3638ea9ce7dfaba8e7f86a2c46ca591e43e7aa14c1e620ebfa13b55ff35a64aedd37cdfb98a184e432be11828debb7d8e834f856713edff0daf03cb3a5dd491182b7097b38"}, {0x30, 0x104, 0x7, "63a97e4b85c4b9f04983eec8919731befd925d66ae855577d8818b02"}, {0x38, 0x116, 0x800, "14e824775ecd7cb865e6692a3d68766ee426a7d98e853e9b4c7088b15ddaafd7940017d6f1"}, {0x90, 0x1, 0x800, "747f3f92499cad00f906994e68f6e75ce49e467e0adcab877e4626926d6b58d9e592b539c517d1cac92a71b5ad8f7a25f1cc051968b03ebc037691604c623f3307c35bb800f487e89bc9fa44a821b47290e56a4df85a6af909c494a6d9cf3235c75d499bf5d6e5bab6265d4c7dc2a7f150e02f34c2fe3c5ab7a23522b62e"}, {0x100, 0x1, 0x80000001, "c5c8214f005406dcbd0449214cb7214dd209e1e7d334a3ac8ac4314e8a9ba4f2e4a05343b796e37a33c54ea3dd7bdb2000d0adde2fbb9d6edf5fdbb7662e23519ba8137fca275b6eea9c86c5363ee5cce7713c7228aee626a130776045fbec5c02fc56d0d556bfb91f115719a3585d46422c6e280cf57fca59ad42bb7a0b2e4977e066c21e4aec5cc22995de4a7cfc01acaf1f213fb4e1636184cc6cd2961238515de71a2afbb8e237096c8368d7842d65a8c4044b3039490684dfc6551c41baaeea370b05ccc63abeec5cd6b5400e7670a3e6489d782399b195891ed16c57ce1323db36bdd1206b693f97df56"}, {0xf8, 0x115, 0x1, "7be2427a92b1d63887629042a84d5ba52bbd41ea556aafdfa400f82e47c349b75cc1b7faa92b3970ba7b121c1eeefb8032bd307bba2bc0d48f8ecb7ffeeb9e8e4da77a90a7c120638534c2b6cdca29ce53cdd2b940654466f14d344a9863fde66df077883d9d1f72dd2359af1b62039f23d9470ec172c8b2f5d73a11505200728e31be1a737c4dd6a9cc06e55f718fe3475cf0df01b80d6994f8fc35de9a9fd5ef8d901fbe922005f5766088453628d959c12f0085d2b9ff3c75b9d455fe51a29271bc4708cfd960368a3f579c994c47103aee89bc198df256e0f9de958a794c06cd07880ad7af"}, {0xb8, 0x29, 0x1c40000, "4fb37d60808e340fa363d6a42f5668a91f817b2234267fd04a64ed944bf2b84fb54dcae8aff382db541e01e3be36713e0578dae9a919e3b9532e21aab91165a335fe056055e14e53b559c9cdb3076175e2e732db0b8d27ef3b7ebe826a78cc0279c398a8ebf13d96128178cc8cb5cb9cb2312cb96f834aed69d9a3713a99d4f5bf6c44e70440835006b029e70b96995c17ba96952a7ec8e7367ba5547f61f7ef576dd77979e5"}, {0x70, 0xff, 0x18000, "043d0c7c0006f60dc08b135556fc77eded66b3d2b1f31d4e7b8a398f4680be150239cc8aa9acbe0ac2a3c8d5eb602c20a262f96864911816a1bd7daa04c848d7693646bbfcdf77d50e3063e6d287d3b0f458e4fbda8287e577eee42844cbb8"}], 0x620}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c80)="30c8859adf11b2bf3f2e4de624e73971af0a936b72741248d59070fbb41fbbf84fa28fdded4095ebb24d7ce87dcff1b75bddece0b733d8e2d1fb0311293c8b9f1f7421c30964935db77f506ec8e1b7e6bed6b76100fcfd2aa33b012629ea943e983b3d3fbab6e11f7a7b563224e8b64694a4c69b5a6ce4c40e6679e85703232f7ed0396e5a62c6c25931a64962142869667684231fe427231853dda29a3047b03fe963cb9560780d8b96cdac3988a5dffdec63fe371451f375", 0xb9}, {&(0x7f0000000d40)="4616cf35b5934028c398fa010e32b3ec3c", 0x11}, {&(0x7f0000000d80)="aa1e4c3c80be3c523837d6eda94859daf4746073929d7e631131ddd0666c24569cb566639f502178f38cc92654e02931025ce0a7a6ee6afbfecbf5fdbfb09d9a0ad25bf657271981989f64d8257b84d2bdf71ace5afb312cd6c7e650f493b445729ba95de4754b6c9afaf540c2189d963a7247059c29697e3185796492b8719b42834bc5f25fcc3c7d38fb73a3ef61873122c44cacf3b54ce0f105e9d51c6d7093b73d21fdf0282024f3553fdb3dcb7099c3c670556bd187fa0c6bd93d385277e4d89a062161c33ba441638254f03c18a5e435068e98b1299ddbec858d", 0xdd}], 0x3}}, {{&(0x7f0000000ec0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f40)="bdd39248d78fd539d0e846b2e2b33c1687991f3c65bc2734593157", 0x1b}, {&(0x7f0000000f80)="4817ba12041326c4a1bbe2b62caaa60e4f668f5e74eaf23707ab3ae4ae3f70361bdce26c2a4ca975f277f5a61ef0e17a2fda27921d4f51d86ae13634eab913cd2ec94a594a581595febf2d1379aeb941c7d18ee016ebd498d84b0400f974ad301c97b09094bd47aadac0ca48d2404bee4d25bdf31f1d20ea35e9c56e3536b98b55ac2d71a164c81e2ad7a51f0c6acb1f1f5bdc611192c48e36c1bf3c8adc51ecba089015bc1323942b6193dcda6da1dcd30fcdf5274d86a37ea42d4ea383fd1d9416c8d772eb069ca3", 0xc9}, {&(0x7f0000001080)}], 0x3, &(0x7f0000001100)=[{0x48, 0x105, 0x2, "038bc354659e01157022c90619ffff1ce6396aa69016efe66fd10367370f72ea411d95f7ac2ccb0a4039b618f075d3178afb1b8b88"}, {0x60, 0x104, 0x5, "e385e206cf808748a87fae3f9d5d4dbdcc6823476f440d1d6fa382c16a17b0a8ad07c8e91c8d46f2c045a95c47b08f799b03dc38421c6d000a78e6270468a55115bdfc7f4cb184a6eb10"}, {0x88, 0x0, 0x2, "ca68112b527e9788bb062c4924ab492ae2433b5f0972422e4feef67cfec7902353c06c002cb74a054ac77c73bfbf7552f026b7abcfa3459bdfaf1e08ac93e831f2eb1251c2a1e14ebdd68757bc8079a1ad0076d463e19eecac632f99948b40a80dab7f28fc62af4c87641af536cb8e0338f13db4b6"}, {0xc8, 0xff, 0x1d, "d7a4456a87d732dd935dbe5720fd0c0e598f9ae556cb243b419d2afd7fc75612a590031805084293b09bf08b7cf5794e36c0cdeb42661b9958c95eb09ed87c360ca3aa6c0cd634ed8c015dbf7c14179437072c0795382c76140a41a785e27eef0f9bff40830848dec899ac6db7aef53533510be6b617c58beb3b2b2c460df8732929f2bfd30d7a6e9f52c6c254f2645978a782626d5a79f5e653d6bf16223ed000341cd9394c69c06c3d475468a9c7583e7a80ce5a81945f"}, {0x100, 0x10e, 0x10001, "9675d37bf59af3a084deed32ec60c082df3891de5293cf01974144e97f40c2c3b1075bdfcc814f83ca75051642e239b3510fddbe28c8e21461a23422445c08d3d6c2307cd626ccabe96ab26543b4f5322490674899a68052828290e8e9c73076b965981a628e24ce7c24f5a4b6288d21ad1cd11a059ca18c2fe7a938caf2b47d17a673f2944625a4e5a264408b7241ac827cf8fdf3a6015cdb624d823bc81d1cee050a30de4c1ab491c6ff13e7bcc8ca4bc341fff7b90e7f8441a911c1bc101d111357e90566d37510cbf0fe42a9b03a6853bcba0bfca0838fbd16acc8bdb59fd110dc3b5ffe037f6c1eeb27ed"}], 0x2f8}}, {{&(0x7f0000001400)=@isdn={0x22, 0xfe, 0x7, 0x6, 0xf7}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001480)="e41e7a7c21b31b5917d9a6a03c4f81e73bcaf9a8554418b33e1967f4980b9cb77a4bc1248725df4a3505e0564ad6487f1714edc9c583430ef0fe5759a53b9c87a289b4935adaf02bab1971a2df9bdfd25f941b5c9d7795769613724e3dd0f16200cc232f905fbe2b1214a612fb49fb23b00e2431a123df25f0d1faa43534fbd26d1b32209b757ea91cd1326c07f9b1f9cf970f5a3be4d1dcc984b5598b5bb2fd2259e871a712d5ad74e713404bce084a997ce7d9a5a4ead5cdd28e56f29ae7448a74fd90e0", 0xc5}], 0x1}}], 0x4, 0x8000) 00:23:41 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:23:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:41 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x2}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x3}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000710124c48a76054a3d257fc31bb8be194b6d470e3fc10c2fe6c047b9858eb36fdbe96b391d9485", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x140, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1c31600}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc00000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc708}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x992}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdec4}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x1) splice(r1, 0x0, r2, 0x0, 0x7fffffff, 0x0) 00:23:41 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:23:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800400010000507000000c16000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}}, 0x0) 00:23:41 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x3}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:42 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x4}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) [ 695.005460][T27457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 695.041282][T27470] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:42 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x7}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:59 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x803}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x40000000) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYBLOB="9543b057899ff710e7d361d3d95baf6e325a17dde1527f16c9d31f81febbeb8b01fd05e31989978daa4f70142f", @ANYRES64, @ANYRES32=r1, @ANYRES64], 0x114, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) semget(0x1, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x100000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)) clock_nanosleep(0x4, 0x0, &(0x7f0000000140), &(0x7f0000000180)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) 00:23:59 executing program 4: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x2}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:59 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:23:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xc00e0000, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:23:59 executing program 2: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"b354b4d6582bf979f135ba4a4f915d66", 0x0, r4, {0x1ff, 0x233fc2b7}, {0x6, 0x8}, 0x6, [0x9, 0x6, 0x4, 0x400, 0x1, 0x1000, 0x1, 0x4, 0x7, 0x32c, 0x9, 0x81, 0x5, 0x0, 0x4]}) r5 = accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x60) sendmmsg(r5, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="5483b6378318aee355ad86e115b625ef18e67faa3bd1638e65ae16503da346a2c4d1cf59a25ff6fb87c716e9a7d823457b29b2c66f868de27e6204b1889e042f30d91b8015120966f51dfb5d6fd8f807e697665ba547329a6c524b0b11cd3b63a4d3c87a32b5098e7562ec30244613178dc3c577b327b15f7ef1", 0x7a}, {&(0x7f0000000540)="ef0550411fdd6f14584dbb27b08209db7a39fb28dd37600da64fb234348609ffaf3797e58cb903a46bfebceb92343afb0398758db950c9a102b19193f6db3f0c2f0a3389e6572cba48d39d445b08dd2ed482187088319e3f62f8d08448617401c31a8ea8c7a63b5a5f1feabd0f8e942d5262e2a71ec76012c617308a666a7428242f7eb97582069f43e119cd32f4e425d252ce44c23aaf0a3edffa26d0ddc7545a6d291c2f8b9ce48a3761579e94498b0c251e28b9fd6d0dc2535c9f57f2e0093e6a03f07ea0835c3f19376704fa92e0eb678e1f82f7f99f79c73d4360c19aad8616f492f6906e139b86bfd1f2ab5f4f0b092a384c7372", 0xf7}], 0x2, &(0x7f0000000640)=[{0xd8, 0x103, 0x81, "ce1fdc237cf7f3cb95b921d5e048ba21fd4d55c0f65bdc0fee669df8ec50dcb38f8c072041e8ee7fd59a5d1552132c76ec95ee4e4d1c9b07f6135f749affd6db0dab8f1ff9c035fd0ce4302e31d9f02461e0dbc845a8f937ca96b77201995f4d78a16c9fa85c5c97c25fefb7f79e0f8efb26b65ecf22aafef2c79460ff48649e108b759555b3d19a877ea9ac52936f2c97d70aa29c614f18f5d605d35f78768284271a75ca54eaf1964920356f26bf3d4265f975af83ed5f9954f6411531f65f78c7bf5089d13e7c"}, {0x30, 0x102, 0x7, "685ee8db927837c99465bc11d6b97a114e5c1debca42d750d3"}, {0x100, 0xff, 0x3, "6de842e90295aecefb07a516d1b849cd857ec33d4d62f6ea8aba0b3754acbfa2dffca55333bd5106ba643a360f56bcb614573a7ec65ea5de84b63759d7bfa28d9333fa90a3d5c1b925dba6a9a19f7cc3b009cc2b3c2677025dc44e8f355cee9eeaa30cf5fbe9807050b76039b92e96eff62a021245cfb39aded0bf5b1ff11fd4dce266977196879d83571332662573496256e4faf55f0aedb9982e3f123c07284b8e11a6b789dc3638ea9ce7dfaba8e7f86a2c46ca591e43e7aa14c1e620ebfa13b55ff35a64aedd37cdfb98a184e432be11828debb7d8e834f856713edff0daf03cb3a5dd491182b7097b38"}, {0x30, 0x104, 0x7, "63a97e4b85c4b9f04983eec8919731befd925d66ae855577d8818b02"}, {0x38, 0x116, 0x800, "14e824775ecd7cb865e6692a3d68766ee426a7d98e853e9b4c7088b15ddaafd7940017d6f1"}, {0x90, 0x1, 0x800, "747f3f92499cad00f906994e68f6e75ce49e467e0adcab877e4626926d6b58d9e592b539c517d1cac92a71b5ad8f7a25f1cc051968b03ebc037691604c623f3307c35bb800f487e89bc9fa44a821b47290e56a4df85a6af909c494a6d9cf3235c75d499bf5d6e5bab6265d4c7dc2a7f150e02f34c2fe3c5ab7a23522b62e"}, {0x100, 0x1, 0x80000001, "c5c8214f005406dcbd0449214cb7214dd209e1e7d334a3ac8ac4314e8a9ba4f2e4a05343b796e37a33c54ea3dd7bdb2000d0adde2fbb9d6edf5fdbb7662e23519ba8137fca275b6eea9c86c5363ee5cce7713c7228aee626a130776045fbec5c02fc56d0d556bfb91f115719a3585d46422c6e280cf57fca59ad42bb7a0b2e4977e066c21e4aec5cc22995de4a7cfc01acaf1f213fb4e1636184cc6cd2961238515de71a2afbb8e237096c8368d7842d65a8c4044b3039490684dfc6551c41baaeea370b05ccc63abeec5cd6b5400e7670a3e6489d782399b195891ed16c57ce1323db36bdd1206b693f97df56"}, {0xf8, 0x115, 0x1, "7be2427a92b1d63887629042a84d5ba52bbd41ea556aafdfa400f82e47c349b75cc1b7faa92b3970ba7b121c1eeefb8032bd307bba2bc0d48f8ecb7ffeeb9e8e4da77a90a7c120638534c2b6cdca29ce53cdd2b940654466f14d344a9863fde66df077883d9d1f72dd2359af1b62039f23d9470ec172c8b2f5d73a11505200728e31be1a737c4dd6a9cc06e55f718fe3475cf0df01b80d6994f8fc35de9a9fd5ef8d901fbe922005f5766088453628d959c12f0085d2b9ff3c75b9d455fe51a29271bc4708cfd960368a3f579c994c47103aee89bc198df256e0f9de958a794c06cd07880ad7af"}, {0xb8, 0x29, 0x1c40000, "4fb37d60808e340fa363d6a42f5668a91f817b2234267fd04a64ed944bf2b84fb54dcae8aff382db541e01e3be36713e0578dae9a919e3b9532e21aab91165a335fe056055e14e53b559c9cdb3076175e2e732db0b8d27ef3b7ebe826a78cc0279c398a8ebf13d96128178cc8cb5cb9cb2312cb96f834aed69d9a3713a99d4f5bf6c44e70440835006b029e70b96995c17ba96952a7ec8e7367ba5547f61f7ef576dd77979e5"}, {0x70, 0xff, 0x18000, "043d0c7c0006f60dc08b135556fc77eded66b3d2b1f31d4e7b8a398f4680be150239cc8aa9acbe0ac2a3c8d5eb602c20a262f96864911816a1bd7daa04c848d7693646bbfcdf77d50e3063e6d287d3b0f458e4fbda8287e577eee42844cbb8"}], 0x620}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c80)="30c8859adf11b2bf3f2e4de624e73971af0a936b72741248d59070fbb41fbbf84fa28fdded4095ebb24d7ce87dcff1b75bddece0b733d8e2d1fb0311293c8b9f1f7421c30964935db77f506ec8e1b7e6bed6b76100fcfd2aa33b012629ea943e983b3d3fbab6e11f7a7b563224e8b64694a4c69b5a6ce4c40e6679e85703232f7ed0396e5a62c6c25931a64962142869667684231fe427231853dda29a3047b03fe963cb9560780d8b96cdac3988a5dffdec63fe371451f375", 0xb9}, {&(0x7f0000000d40)="4616cf35b5934028c398fa010e32b3ec3c", 0x11}, {&(0x7f0000000d80)="aa1e4c3c80be3c523837d6eda94859daf4746073929d7e631131ddd0666c24569cb566639f502178f38cc92654e02931025ce0a7a6ee6afbfecbf5fdbfb09d9a0ad25bf657271981989f64d8257b84d2bdf71ace5afb312cd6c7e650f493b445729ba95de4754b6c9afaf540c2189d963a7247059c29697e3185796492b8719b42834bc5f25fcc3c7d38fb73a3ef61873122c44cacf3b54ce0f105e9d51c6d7093b73d21fdf0282024f3553fdb3dcb7099c3c670556bd187fa0c6bd93d385277e4d89a062161c33ba441638254f03c18a5e435068e98b1299ddbec858d", 0xdd}], 0x3}}, {{&(0x7f0000000ec0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f40)="bdd39248d78fd539d0e846b2e2b33c1687991f3c65bc2734593157", 0x1b}, {&(0x7f0000000f80)="4817ba12041326c4a1bbe2b62caaa60e4f668f5e74eaf23707ab3ae4ae3f70361bdce26c2a4ca975f277f5a61ef0e17a2fda27921d4f51d86ae13634eab913cd2ec94a594a581595febf2d1379aeb941c7d18ee016ebd498d84b0400f974ad301c97b09094bd47aadac0ca48d2404bee4d25bdf31f1d20ea35e9c56e3536b98b55ac2d71a164c81e2ad7a51f0c6acb1f1f5bdc611192c48e36c1bf3c8adc51ecba089015bc1323942b6193dcda6da1dcd30fcdf5274d86a37ea42d4ea383fd1d9416c8d772eb069ca3", 0xc9}, {&(0x7f0000001080)}], 0x3, &(0x7f0000001100)=[{0x48, 0x105, 0x2, "038bc354659e01157022c90619ffff1ce6396aa69016efe66fd10367370f72ea411d95f7ac2ccb0a4039b618f075d3178afb1b8b88"}, {0x60, 0x104, 0x5, "e385e206cf808748a87fae3f9d5d4dbdcc6823476f440d1d6fa382c16a17b0a8ad07c8e91c8d46f2c045a95c47b08f799b03dc38421c6d000a78e6270468a55115bdfc7f4cb184a6eb10"}, {0x88, 0x0, 0x2, "ca68112b527e9788bb062c4924ab492ae2433b5f0972422e4feef67cfec7902353c06c002cb74a054ac77c73bfbf7552f026b7abcfa3459bdfaf1e08ac93e831f2eb1251c2a1e14ebdd68757bc8079a1ad0076d463e19eecac632f99948b40a80dab7f28fc62af4c87641af536cb8e0338f13db4b6"}, {0xc8, 0xff, 0x1d, "d7a4456a87d732dd935dbe5720fd0c0e598f9ae556cb243b419d2afd7fc75612a590031805084293b09bf08b7cf5794e36c0cdeb42661b9958c95eb09ed87c360ca3aa6c0cd634ed8c015dbf7c14179437072c0795382c76140a41a785e27eef0f9bff40830848dec899ac6db7aef53533510be6b617c58beb3b2b2c460df8732929f2bfd30d7a6e9f52c6c254f2645978a782626d5a79f5e653d6bf16223ed000341cd9394c69c06c3d475468a9c7583e7a80ce5a81945f"}, {0x100, 0x10e, 0x10001, "9675d37bf59af3a084deed32ec60c082df3891de5293cf01974144e97f40c2c3b1075bdfcc814f83ca75051642e239b3510fddbe28c8e21461a23422445c08d3d6c2307cd626ccabe96ab26543b4f5322490674899a68052828290e8e9c73076b965981a628e24ce7c24f5a4b6288d21ad1cd11a059ca18c2fe7a938caf2b47d17a673f2944625a4e5a264408b7241ac827cf8fdf3a6015cdb624d823bc81d1cee050a30de4c1ab491c6ff13e7bcc8ca4bc341fff7b90e7f8441a911c1bc101d111357e90566d37510cbf0fe42a9b03a6853bcba0bfca0838fbd16acc8bdb59fd110dc3b5ffe037f6c1eeb27ed"}], 0x2f8}}, {{&(0x7f0000001400)=@isdn={0x22, 0xfe, 0x7, 0x6, 0xf7}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001480)="e41e7a7c21b31b5917d9a6a03c4f81e73bcaf9a8554418b33e1967f4980b9cb77a4bc1248725df4a3505e0564ad6487f1714edc9c583430ef0fe5759a53b9c87a289b4935adaf02bab1971a2df9bdfd25f941b5c9d7795769613724e3dd0f16200cc232f905fbe2b1214a612fb49fb23b00e2431a123df25f0d1faa43534fbd26d1b32209b757ea91cd1326c07f9b1f9cf970f5a3be4d1dcc984b5598b5bb2fd2259e871a712d5ad74e713404bce084a997ce7d9a5a4ead5cdd28e56f29ae7448a74fd90e0", 0xc5}], 0x1}}], 0x4, 0x8000) 00:23:59 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x8}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:59 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x11}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 712.305781][T27524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:59 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:23:59 executing program 4: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x2}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:23:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:23:59 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x60}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 712.491271][T27522] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:23:59 executing program 4: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x2}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:00 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x803}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x40000000) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYBLOB="9543b057899ff710e7d361d3d95baf6e325a17dde1527f16c9d31f81febbeb8b01fd05e31989978daa4f70142f", @ANYRES64, @ANYRES32=r1, @ANYRES64], 0x114, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) semget(0x1, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x100000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)) clock_nanosleep(0x4, 0x0, &(0x7f0000000140), &(0x7f0000000180)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) 00:24:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xd6a30592, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:00 executing program 4: semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x803}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x40000000) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYBLOB="9543b057899ff710e7d361d3d95baf6e325a17dde1527f16c9d31f81febbeb8b01fd05e31989978daa4f70142f", @ANYRES64, @ANYRES32=r1, @ANYRES64], 0x114, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) semget(0x1, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x100000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)) clock_nanosleep(0x4, 0x0, &(0x7f0000000140), &(0x7f0000000180)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) 00:24:00 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:00 executing program 2: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"b354b4d6582bf979f135ba4a4f915d66", 0x0, r4, {0x1ff, 0x233fc2b7}, {0x6, 0x8}, 0x6, [0x9, 0x6, 0x4, 0x400, 0x1, 0x1000, 0x1, 0x4, 0x7, 0x32c, 0x9, 0x81, 0x5, 0x0, 0x4]}) r5 = accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x60) sendmmsg(r5, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="5483b6378318aee355ad86e115b625ef18e67faa3bd1638e65ae16503da346a2c4d1cf59a25ff6fb87c716e9a7d823457b29b2c66f868de27e6204b1889e042f30d91b8015120966f51dfb5d6fd8f807e697665ba547329a6c524b0b11cd3b63a4d3c87a32b5098e7562ec30244613178dc3c577b327b15f7ef1", 0x7a}, {&(0x7f0000000540)="ef0550411fdd6f14584dbb27b08209db7a39fb28dd37600da64fb234348609ffaf3797e58cb903a46bfebceb92343afb0398758db950c9a102b19193f6db3f0c2f0a3389e6572cba48d39d445b08dd2ed482187088319e3f62f8d08448617401c31a8ea8c7a63b5a5f1feabd0f8e942d5262e2a71ec76012c617308a666a7428242f7eb97582069f43e119cd32f4e425d252ce44c23aaf0a3edffa26d0ddc7545a6d291c2f8b9ce48a3761579e94498b0c251e28b9fd6d0dc2535c9f57f2e0093e6a03f07ea0835c3f19376704fa92e0eb678e1f82f7f99f79c73d4360c19aad8616f492f6906e139b86bfd1f2ab5f4f0b092a384c7372", 0xf7}], 0x2, &(0x7f0000000640)=[{0xd8, 0x103, 0x81, "ce1fdc237cf7f3cb95b921d5e048ba21fd4d55c0f65bdc0fee669df8ec50dcb38f8c072041e8ee7fd59a5d1552132c76ec95ee4e4d1c9b07f6135f749affd6db0dab8f1ff9c035fd0ce4302e31d9f02461e0dbc845a8f937ca96b77201995f4d78a16c9fa85c5c97c25fefb7f79e0f8efb26b65ecf22aafef2c79460ff48649e108b759555b3d19a877ea9ac52936f2c97d70aa29c614f18f5d605d35f78768284271a75ca54eaf1964920356f26bf3d4265f975af83ed5f9954f6411531f65f78c7bf5089d13e7c"}, {0x30, 0x102, 0x7, "685ee8db927837c99465bc11d6b97a114e5c1debca42d750d3"}, {0x100, 0xff, 0x3, "6de842e90295aecefb07a516d1b849cd857ec33d4d62f6ea8aba0b3754acbfa2dffca55333bd5106ba643a360f56bcb614573a7ec65ea5de84b63759d7bfa28d9333fa90a3d5c1b925dba6a9a19f7cc3b009cc2b3c2677025dc44e8f355cee9eeaa30cf5fbe9807050b76039b92e96eff62a021245cfb39aded0bf5b1ff11fd4dce266977196879d83571332662573496256e4faf55f0aedb9982e3f123c07284b8e11a6b789dc3638ea9ce7dfaba8e7f86a2c46ca591e43e7aa14c1e620ebfa13b55ff35a64aedd37cdfb98a184e432be11828debb7d8e834f856713edff0daf03cb3a5dd491182b7097b38"}, {0x30, 0x104, 0x7, "63a97e4b85c4b9f04983eec8919731befd925d66ae855577d8818b02"}, {0x38, 0x116, 0x800, "14e824775ecd7cb865e6692a3d68766ee426a7d98e853e9b4c7088b15ddaafd7940017d6f1"}, {0x90, 0x1, 0x800, "747f3f92499cad00f906994e68f6e75ce49e467e0adcab877e4626926d6b58d9e592b539c517d1cac92a71b5ad8f7a25f1cc051968b03ebc037691604c623f3307c35bb800f487e89bc9fa44a821b47290e56a4df85a6af909c494a6d9cf3235c75d499bf5d6e5bab6265d4c7dc2a7f150e02f34c2fe3c5ab7a23522b62e"}, {0x100, 0x1, 0x80000001, "c5c8214f005406dcbd0449214cb7214dd209e1e7d334a3ac8ac4314e8a9ba4f2e4a05343b796e37a33c54ea3dd7bdb2000d0adde2fbb9d6edf5fdbb7662e23519ba8137fca275b6eea9c86c5363ee5cce7713c7228aee626a130776045fbec5c02fc56d0d556bfb91f115719a3585d46422c6e280cf57fca59ad42bb7a0b2e4977e066c21e4aec5cc22995de4a7cfc01acaf1f213fb4e1636184cc6cd2961238515de71a2afbb8e237096c8368d7842d65a8c4044b3039490684dfc6551c41baaeea370b05ccc63abeec5cd6b5400e7670a3e6489d782399b195891ed16c57ce1323db36bdd1206b693f97df56"}, {0xf8, 0x115, 0x1, "7be2427a92b1d63887629042a84d5ba52bbd41ea556aafdfa400f82e47c349b75cc1b7faa92b3970ba7b121c1eeefb8032bd307bba2bc0d48f8ecb7ffeeb9e8e4da77a90a7c120638534c2b6cdca29ce53cdd2b940654466f14d344a9863fde66df077883d9d1f72dd2359af1b62039f23d9470ec172c8b2f5d73a11505200728e31be1a737c4dd6a9cc06e55f718fe3475cf0df01b80d6994f8fc35de9a9fd5ef8d901fbe922005f5766088453628d959c12f0085d2b9ff3c75b9d455fe51a29271bc4708cfd960368a3f579c994c47103aee89bc198df256e0f9de958a794c06cd07880ad7af"}, {0xb8, 0x29, 0x1c40000, "4fb37d60808e340fa363d6a42f5668a91f817b2234267fd04a64ed944bf2b84fb54dcae8aff382db541e01e3be36713e0578dae9a919e3b9532e21aab91165a335fe056055e14e53b559c9cdb3076175e2e732db0b8d27ef3b7ebe826a78cc0279c398a8ebf13d96128178cc8cb5cb9cb2312cb96f834aed69d9a3713a99d4f5bf6c44e70440835006b029e70b96995c17ba96952a7ec8e7367ba5547f61f7ef576dd77979e5"}, {0x70, 0xff, 0x18000, "043d0c7c0006f60dc08b135556fc77eded66b3d2b1f31d4e7b8a398f4680be150239cc8aa9acbe0ac2a3c8d5eb602c20a262f96864911816a1bd7daa04c848d7693646bbfcdf77d50e3063e6d287d3b0f458e4fbda8287e577eee42844cbb8"}], 0x620}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c80)="30c8859adf11b2bf3f2e4de624e73971af0a936b72741248d59070fbb41fbbf84fa28fdded4095ebb24d7ce87dcff1b75bddece0b733d8e2d1fb0311293c8b9f1f7421c30964935db77f506ec8e1b7e6bed6b76100fcfd2aa33b012629ea943e983b3d3fbab6e11f7a7b563224e8b64694a4c69b5a6ce4c40e6679e85703232f7ed0396e5a62c6c25931a64962142869667684231fe427231853dda29a3047b03fe963cb9560780d8b96cdac3988a5dffdec63fe371451f375", 0xb9}, {&(0x7f0000000d40)="4616cf35b5934028c398fa010e32b3ec3c", 0x11}, {&(0x7f0000000d80)="aa1e4c3c80be3c523837d6eda94859daf4746073929d7e631131ddd0666c24569cb566639f502178f38cc92654e02931025ce0a7a6ee6afbfecbf5fdbfb09d9a0ad25bf657271981989f64d8257b84d2bdf71ace5afb312cd6c7e650f493b445729ba95de4754b6c9afaf540c2189d963a7247059c29697e3185796492b8719b42834bc5f25fcc3c7d38fb73a3ef61873122c44cacf3b54ce0f105e9d51c6d7093b73d21fdf0282024f3553fdb3dcb7099c3c670556bd187fa0c6bd93d385277e4d89a062161c33ba441638254f03c18a5e435068e98b1299ddbec858d", 0xdd}], 0x3}}, {{&(0x7f0000000ec0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f40)="bdd39248d78fd539d0e846b2e2b33c1687991f3c65bc2734593157", 0x1b}, {&(0x7f0000000f80)="4817ba12041326c4a1bbe2b62caaa60e4f668f5e74eaf23707ab3ae4ae3f70361bdce26c2a4ca975f277f5a61ef0e17a2fda27921d4f51d86ae13634eab913cd2ec94a594a581595febf2d1379aeb941c7d18ee016ebd498d84b0400f974ad301c97b09094bd47aadac0ca48d2404bee4d25bdf31f1d20ea35e9c56e3536b98b55ac2d71a164c81e2ad7a51f0c6acb1f1f5bdc611192c48e36c1bf3c8adc51ecba089015bc1323942b6193dcda6da1dcd30fcdf5274d86a37ea42d4ea383fd1d9416c8d772eb069ca3", 0xc9}, {&(0x7f0000001080)}], 0x3, &(0x7f0000001100)=[{0x48, 0x105, 0x2, "038bc354659e01157022c90619ffff1ce6396aa69016efe66fd10367370f72ea411d95f7ac2ccb0a4039b618f075d3178afb1b8b88"}, {0x60, 0x104, 0x5, "e385e206cf808748a87fae3f9d5d4dbdcc6823476f440d1d6fa382c16a17b0a8ad07c8e91c8d46f2c045a95c47b08f799b03dc38421c6d000a78e6270468a55115bdfc7f4cb184a6eb10"}, {0x88, 0x0, 0x2, "ca68112b527e9788bb062c4924ab492ae2433b5f0972422e4feef67cfec7902353c06c002cb74a054ac77c73bfbf7552f026b7abcfa3459bdfaf1e08ac93e831f2eb1251c2a1e14ebdd68757bc8079a1ad0076d463e19eecac632f99948b40a80dab7f28fc62af4c87641af536cb8e0338f13db4b6"}, {0xc8, 0xff, 0x1d, "d7a4456a87d732dd935dbe5720fd0c0e598f9ae556cb243b419d2afd7fc75612a590031805084293b09bf08b7cf5794e36c0cdeb42661b9958c95eb09ed87c360ca3aa6c0cd634ed8c015dbf7c14179437072c0795382c76140a41a785e27eef0f9bff40830848dec899ac6db7aef53533510be6b617c58beb3b2b2c460df8732929f2bfd30d7a6e9f52c6c254f2645978a782626d5a79f5e653d6bf16223ed000341cd9394c69c06c3d475468a9c7583e7a80ce5a81945f"}, {0x100, 0x10e, 0x10001, "9675d37bf59af3a084deed32ec60c082df3891de5293cf01974144e97f40c2c3b1075bdfcc814f83ca75051642e239b3510fddbe28c8e21461a23422445c08d3d6c2307cd626ccabe96ab26543b4f5322490674899a68052828290e8e9c73076b965981a628e24ce7c24f5a4b6288d21ad1cd11a059ca18c2fe7a938caf2b47d17a673f2944625a4e5a264408b7241ac827cf8fdf3a6015cdb624d823bc81d1cee050a30de4c1ab491c6ff13e7bcc8ca4bc341fff7b90e7f8441a911c1bc101d111357e90566d37510cbf0fe42a9b03a6853bcba0bfca0838fbd16acc8bdb59fd110dc3b5ffe037f6c1eeb27ed"}], 0x2f8}}, {{&(0x7f0000001400)=@isdn={0x22, 0xfe, 0x7, 0x6, 0xf7}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001480)="e41e7a7c21b31b5917d9a6a03c4f81e73bcaf9a8554418b33e1967f4980b9cb77a4bc1248725df4a3505e0564ad6487f1714edc9c583430ef0fe5759a53b9c87a289b4935adaf02bab1971a2df9bdfd25f941b5c9d7795769613724e3dd0f16200cc232f905fbe2b1214a612fb49fb23b00e2431a123df25f0d1faa43534fbd26d1b32209b757ea91cd1326c07f9b1f9cf970f5a3be4d1dcc984b5598b5bb2fd2259e871a712d5ad74e713404bce084a997ce7d9a5a4ead5cdd28e56f29ae7448a74fd90e0", 0xc5}], 0x1}}], 0x4, 0x8000) 00:24:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) [ 713.750502][T27588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:01 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x2}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xefffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 714.216049][T27588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:01 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) [ 714.658025][T27629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:01 executing program 2: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"b354b4d6582bf979f135ba4a4f915d66", 0x0, r4, {0x1ff, 0x233fc2b7}, {0x6, 0x8}, 0x6, [0x9, 0x6, 0x4, 0x400, 0x1, 0x1000, 0x1, 0x4, 0x7, 0x32c, 0x9, 0x81, 0x5, 0x0, 0x4]}) accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x60) 00:24:01 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x3}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 714.768374][T27632] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:20 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x8000400) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x803}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x40000000) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYBLOB="9543b057899ff710e7d361d3d95baf6e325a17dde1527f16c9d31f81febbeb8b01fd05e31989978daa4f70142f", @ANYRES64, @ANYRES32=r1, @ANYRES64], 0x114, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) semget(0x1, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) unshare(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x100000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)) clock_nanosleep(0x4, 0x0, &(0x7f0000000140), &(0x7f0000000180)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) 00:24:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:20 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:20 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x4}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:20 executing program 2: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"b354b4d6582bf979f135ba4a4f915d66", 0x0, r4, {0x1ff, 0x233fc2b7}, {0x6, 0x8}, 0x6, [0x9, 0x6, 0x4, 0x400, 0x1, 0x1000, 0x1, 0x4, 0x7, 0x32c, 0x9, 0x81, 0x5, 0x0, 0x4]}) accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x60) 00:24:20 executing program 4: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"b354b4d6582bf979f135ba4a4f915d66", 0x0, r4, {0x1ff, 0x233fc2b7}, {0x6, 0x8}, 0x6, [0x9, 0x6, 0x4, 0x400, 0x1, 0x1000, 0x1, 0x4, 0x7, 0x32c, 0x9, 0x81, 0x5, 0x0, 0x4]}) accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x60) [ 733.116583][T27668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:20 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x7}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:20 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) [ 733.493513][T27668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:20 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x8}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:20 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:21 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, 0x0) [ 734.098194][T27734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 734.232479][T27731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 746.964744][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.041008][T22045] Bluetooth: hci3: command 0x0406 tx timeout 00:24:38 executing program 1: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x7}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:38 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x11}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:38 executing program 4: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"b354b4d6582bf979f135ba4a4f915d66", 0x0, r4, {0x1ff, 0x233fc2b7}, {0x6, 0x8}, 0x6, [0x9, 0x6, 0x4, 0x400, 0x1, 0x1000, 0x1, 0x4, 0x7, 0x32c, 0x9, 0x81, 0x5, 0x0, 0x4]}) accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x60) 00:24:38 executing program 2: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"b354b4d6582bf979f135ba4a4f915d66", 0x0, r4, {0x1ff, 0x233fc2b7}, {0x6, 0x8}, 0x6, [0x9, 0x6, 0x4, 0x400, 0x1, 0x1000, 0x1, 0x4, 0x7, 0x32c, 0x9, 0x81, 0x5, 0x0, 0x4]}) accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x60) 00:24:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, 0x0) 00:24:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:38 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x60}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 751.027160][T27793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, 0x0) 00:24:38 executing program 1: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x7}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:38 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1={0xfc, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xffffffef, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)) 00:24:38 executing program 1: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x7}, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 751.332071][T27822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:38 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1={0xfc, 0x2}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:39 executing program 4: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"b354b4d6582bf979f135ba4a4f915d66", 0x0, r4, {0x1ff, 0x233fc2b7}, {0x6, 0x8}, 0x6, [0x9, 0x6, 0x4, 0x400, 0x1, 0x1000, 0x1, 0x4, 0x7, 0x32c, 0x9, 0x81, 0x5, 0x0, 0x4]}) accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x60) 00:24:39 executing program 2: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"b354b4d6582bf979f135ba4a4f915d66", 0x0, r4, {0x1ff, 0x233fc2b7}, {0x6, 0x8}, 0x6, [0x9, 0x6, 0x4, 0x400, 0x1, 0x1000, 0x1, 0x4, 0x7, 0x32c, 0x9, 0x81, 0x5, 0x0, 0x4]}) 00:24:39 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"b354b4d6582bf979f135ba4a4f915d66", 0x0, r4, {0x1ff, 0x233fc2b7}, {0x6, 0x8}, 0x6, [0x9, 0x6, 0x4, 0x400, 0x1, 0x1000, 0x1, 0x4, 0x7, 0x32c, 0x9, 0x81, 0x5, 0x0, 0x4]}) accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x60) 00:24:39 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)) 00:24:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:39 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1={0xfc, 0x10}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:39 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)) [ 751.955210][T27857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:39 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 752.051114][T27857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:39 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) (fail_nth: 1) 00:24:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x10, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:39 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1={0xfc, 0x1, '\x00', 0x2}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 752.262120][T27885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 752.294965][T27886] FAULT_INJECTION: forcing a failure. [ 752.294965][T27886] name failslab, interval 1, probability 0, space 0, times 0 [ 752.307941][T27886] CPU: 1 PID: 27886 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 752.316369][T27886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.326436][T27886] Call Trace: [ 752.329735][T27886] [ 752.332676][T27886] dump_stack_lvl+0x201/0x2d8 [ 752.337378][T27886] ? show_regs_print_info+0x12/0x12 [ 752.342595][T27886] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 752.348344][T27886] ? __might_sleep+0xe0/0xe0 [ 752.352946][T27886] ? rcu_read_lock_sched_held+0x89/0x130 [ 752.358583][T27886] should_fail+0x384/0x4b0 [ 752.362997][T27886] ? tomoyo_realpath_from_path+0xd8/0x610 [ 752.368704][T27886] should_failslab+0x5/0x20 [ 752.373210][T27886] __kmalloc+0x94/0x380 [ 752.377354][T27886] ? kfree+0x2f/0x330 [ 752.381328][T27886] tomoyo_realpath_from_path+0xd8/0x610 [ 752.386891][T27886] tomoyo_path_number_perm+0x219/0x7c0 [ 752.392348][T27886] ? rcu_read_lock_sched_held+0x89/0x130 [ 752.397980][T27886] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 752.403479][T27886] ? __fget_files+0x35a/0x390 [ 752.408244][T27886] security_file_ioctl+0x55/0xb0 [ 752.413188][T27886] __se_sys_ioctl+0x48/0x170 [ 752.417768][T27886] do_syscall_64+0x44/0xd0 [ 752.422173][T27886] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 752.428057][T27886] RIP: 0033:0x7f2e009e4ae9 [ 752.432984][T27886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 752.452662][T27886] RSP: 002b:00007f2dfdf5a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.462715][T27886] RAX: ffffffffffffffda RBX: 00007f2e00af7f60 RCX: 00007f2e009e4ae9 [ 752.470768][T27886] RDX: 0000000020001980 RSI: 00000000c0505350 RDI: 0000000000000003 [ 752.478729][T27886] RBP: 00007f2dfdf5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 752.486773][T27886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.494732][T27886] R13: 00007fff81e190bf R14: 00007f2dfdf5a300 R15: 0000000000022000 [ 752.502710][T27886] 00:24:39 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1={0xfc, 0x1, '\x00', 0x3}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 752.506878][T27886] ERROR: Out of memory at tomoyo_realpath_from_path. [ 752.523964][T27885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0xc0, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 752.758107][T27919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:40 executing program 2: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) 00:24:40 executing program 1: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"b354b4d6582bf979f135ba4a4f915d66", 0x0, r4, {0x1ff, 0x233fc2b7}, {0x6, 0x8}, 0x6, [0x9, 0x6, 0x4, 0x400, 0x1, 0x1000, 0x1, 0x4, 0x7, 0x32c, 0x9, 0x81, 0x5, 0x0, 0x4]}) accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f00000003c0)=0x60) 00:24:40 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[], [{@smackfsdef}, {@fsname={'fsname', 0x3d, 'overlay\x00'}}]}) 00:24:40 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) (fail_nth: 2) 00:24:40 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1={0xfc, 0x1, '\x00', 0x4}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 752.819485][T27919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0xec0, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 752.928363][T27940] FAULT_INJECTION: forcing a failure. [ 752.928363][T27940] name failslab, interval 1, probability 0, space 0, times 0 [ 752.941255][T27940] CPU: 0 PID: 27940 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 752.945559][T27941] overlayfs: unrecognized mount option "fsname=overlay" or missing value [ 752.949683][T27940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.949716][T27940] Call Trace: [ 752.949724][T27940] [ 752.949734][T27940] dump_stack_lvl+0x201/0x2d8 [ 752.949766][T27940] ? show_regs_print_info+0x12/0x12 [ 752.972925][T27944] overlayfs: unrecognized mount option "fsname=overlay" or missing value [ 752.974445][T27940] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 752.998944][T27940] ? __might_sleep+0xe0/0xe0 [ 753.003573][T27940] should_fail+0x384/0x4b0 [ 753.008020][T27940] ? tomoyo_encode2+0x25a/0x560 [ 753.009636][T27948] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 753.012889][T27940] should_failslab+0x5/0x20 [ 753.012919][T27940] __kmalloc+0x94/0x380 [ 753.012939][T27940] ? prepend_path+0xb70/0xb70 [ 753.035572][T27940] tomoyo_encode2+0x25a/0x560 [ 753.040287][T27940] tomoyo_realpath_from_path+0x5c3/0x610 [ 753.045961][T27940] tomoyo_path_number_perm+0x219/0x7c0 [ 753.051454][T27940] ? rcu_read_lock_sched_held+0x89/0x130 [ 753.057203][T27940] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 753.062751][T27940] ? __fget_files+0x35a/0x390 [ 753.067459][T27940] security_file_ioctl+0x55/0xb0 [ 753.072429][T27940] __se_sys_ioctl+0x48/0x170 00:24:40 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1={0xfc, 0x1, '\x00', 0x7}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 753.077046][T27940] do_syscall_64+0x44/0xd0 [ 753.081482][T27940] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 753.087398][T27940] RIP: 0033:0x7f2e009e4ae9 [ 753.091834][T27940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 753.113332][T27940] RSP: 002b:00007f2dfdf5a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:24:40 executing program 4: connect$netrom(0xffffffffffffffff, &(0x7f0000000480)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000000000000000000070000004302441c18000000000000000000000000000000000000000000000000000000e49040fc39b72984b05fef658e14763398c2297938d18b62d5933099db1754dfd8b8fdedd2a20295bbbc76d44d6579b72974ba56"], 0x30}}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r2, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x2f, 0x40, 0x4, 0x1, 0x40, @loopback, @dev={0xfe, 0x80, '\x00', 0x38}, 0x80, 0x7, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x0, 0x5, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8086, 0x8000, 0x400, 0xffffc634}}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x96c, 0x30, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{0x200, 0x1, [@m_nat={0x14c, 0xa, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x81, 0xffffffffffffffff, 0xdd, 0x9}, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}, 0xffff00}}]}, {0xfa, 0x6, "93edd2b9fa6ad5843c25285d04d242dc2d14d294a1a344172ce2c581a94c4a5e8c2b75d53e1ca2befe945939d82dc94a56f548f478e10f42c1c11687df2113b351fcc020367c5189cca73db00b757bee8927ab3a1cc17bc42ed1a0bba388ce6ad9a8c094ebeb2b8ff09cb956919700e092d74d73595a840fbd7b4673889ef241339b833a28b63288ff38c49deff49e86c99ded357a06f0799ca41f39d69b0d0aa9a22b3a7fc8181a0a6dc9fa5f3dd4c0ba17476bd6ec31892d6ad1dd2e8330f2f0942f82d03d700d2a3769679b562c2065e6a3109ae0f24001f3acbf33ece628cd92cbef9b2adb81f005b207e8a1edf7717bd81cbb3a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x6}}}}, @m_police={0xb0, 0x1c, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffff001, 0x20000000, 0x1, 0x80000001, 0x5, {0xde, 0x1, 0x8, 0x3, 0x0, 0x78fd}, {0x0, 0x0, 0x0, 0xfff, 0x4, 0x1}, 0x1, 0x3ff, 0x3}}]]}, {0x48, 0x6, "e4843743d51bcac7991583362e100dd5512fe15c716daa1fe07983571c7373c1c051d9299927d1ef57e0a3262eb2b511c855706675b077eb24662cfcd1f43ae06f3749be"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x758, 0x1, [@m_vlan={0x138, 0x10, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff932, 0x10000, 0x4, 0xfffffff8, 0xa6}, 0x1}}]}, {0xe5, 0x6, "3448841a1ba5021ee016fb5653697ceb15038b83e7d5ee7b954f6fda5b797af5b6aadd8f8763e342182f983d7a59c7d8a9c7471073669c4a69787abf34c9dc71ade7c51236cb164902789a12ed6ab536230598eb95d1dceafd16660d02d64ebde0c6abd0e69818e53ba1f44786ed132f654920440341e865db420b3216cb6c0ba25f5550f84cfdeb447eea3bb94d3aad680d2a8bf218688c21071abb517ce7ed68eb6097f6929b6a2848cb6b305be2cce8efd0da0a952f691cdc2d3be60fe9b7d1c353012423dea05deee7560170e1c0ebe904f374772964ce91e1738250e2e856"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x134, 0x16, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffacc3, 0xf9, 0x8, 0x7ff, 0x6}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x3, 0x7, 0x2c, 0xf71}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0xffffffffffffffff, 0xffff4b83, 0x8001}, 0x0, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x61b, 0x6, 0x4, 0x80000000, 0x3f}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x23, 0x0, 0x0, 0x0, 0x1000}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0x8, 0x0, 0x9}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8001, 0xffffffffffffffff, 0x7, 0x9}, 0x3}}]}, {0x26, 0x6, "15b0885381f1c4a40786e9b95f22bf9a9b4252918266bb34a17cc031c609ffe37e13"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x110, 0xe, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0xf9, 0xffffffffffffffff, 0x5}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x93b0, 0xe38, 0x5, 0xffffff42, 0x80000000}, 0xcb}}]}, {0xa5, 0x6, "a029a6176ae2ec08fcfe9146c0f6529c85e138df3def6b1de1214018c1b837db46297f33730f7b2a31f258566c804538a9341e4413657e4a923d3e432b324fc212dda74275c71fc2fcc379c2c04f0c443e04c380009a1d997095182f803e4297a867c680ae2d508db170ec45ff672c869f0d98a51b5ab02266567b44f337c1af8892f3b5dd7b0edb0484308f9cc4a1ee9076955db1a4707977b0ace63697df0977"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x12c, 0x1c, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x7, 0x1, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0xdf3c, 0x10000, 0x20000000, 0x5, 0x20}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x5, 0x6, 0x9, 0x6}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xaf, 0x6, "eb042ce88d9a8e3c7ed0c8a8bc53fc1398bfa0880f40532061e0f6ed6fe714acebc720c29aa29691ee750951ba5cd673c1c05c7859eeec39dbefa33a27138f7caac585e607c553118fc4852ead4dcae6e697f3e8fd595dfbea02cea3af26b4a6963d45210b1dac75b8c8c4824b174aefaa8d2561f20daf8c89f830d1f8779389feb5dc6b017daa231f9e5d962fca00693c9bb3dc67e27641a05c6bd329fc8bd06709da431a4eb9bc30d41b"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x2ac, 0x11, 0x0, 0x0, {{0x7}, {0x1f8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xab}, @TCA_IPT_TARG={0xbf, 0x6, {0x1, 'filter\x00', 0x0, 0x2, "5d9a314b67588acf61cb952b1c2eb2cbb8c2020a9d04d9ca01b5e7c5b1085b98e92e73564230f74c4191a3e19c901aa623142219226e9a220aa6dcb8dd3d7446994a38f8a473c1b3493178d5312b288cacbefce075e524edd4689300bfe3cb6db9baf7cc88034bb167891b223d91724bf2243160f752a7a5e317b025c8b101e5d7aabeacf53c4a25b18ba2f12f215b1937f028ef5f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x11c, 0x6, {0x7, 'nat\x00', 0x40, 0x6, "63c83231cd34fea9e780f48c79153c3f4a0af707c75e127551400849b27e843be70c4c16cb8c78f7a7ebe7fc450732f38cf40f7262df05ca888ddbb8485f4020c42f9934ac75f413aed9515461ff21a6c694ab14bfa6036316585ba5bfdfa4de01186f7f814946cb0eab7aebf6f9136878d161311120d695b037ac3fd64b139b05048d9ddb767734a11f665637245ef72be3a04a8a460e0fd3c44578cbb0c46a12e1b5f870d44b09d101e5727e49ee8db4ea4f5dfad1d99b88559a617a5d5b2ec44887e4d9bf7328e6937b2b7dac27e2c76c880ae12450a99c962d8d0513749b30ed594306310b497f8bef897f56033abecb"}}]}, {0x90, 0x6, "9a287f2dcb246f4396c8eff05de798df93092eb27b932335c1aac45733b485528271379c34db9ce139c208309bae292ea8ebbff31fe0a6ba3649a29cf382d2ea0635b60138070fd3431e5b5be5f61a217b3573324bb89f73d662a08fa1fbde11200c974a39e68d2c168d251d5e2f1b6c31f50130704761521d93d11cc0d07d513c031b46f74d4a5949af19b4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x96c}, 0x1, 0x0, 0x0, 0x800}, 0x800) [ 753.113366][T27940] RAX: ffffffffffffffda RBX: 00007f2e00af7f60 RCX: 00007f2e009e4ae9 [ 753.113380][T27940] RDX: 0000000020001980 RSI: 00000000c0505350 RDI: 0000000000000003 [ 753.113393][T27940] RBP: 00007f2dfdf5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.113406][T27940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.113418][T27940] R13: 00007fff81e190bf R14: 00007f2dfdf5a300 R15: 0000000000022000 [ 753.113457][T27940] [ 753.113962][T27940] ERROR: Out of memory at tomoyo_realpath_from_path. [ 753.197642][T27960] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:40 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1={0xfc, 0x1, '\x00', 0x8}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x33fe0, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:40 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x4a, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002000000c440a23a4bff4037bdea147af4d2015f00000000", 0x80, 0x400}, {&(0x7f0000010100)="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"/288, 0x120, 0x860}, {&(0x7f0000010300)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0xa80}, {&(0x7f0000010400)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0xb80}, {&(0x7f0000010500)='\x00\x00\x00\x00\n\x00'/32, 0x20, 0xc80}, {&(0x7f0000010600)="00000000000100"/32, 0x20, 0xec0}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002000000c440a23a4bff4037bdea147af4d2015f00000000", 0x80, 0x1400}, {&(0x7f0000010800)="000000000000000000000000000000000000000000000000000000001c0000006a706700000000006769660000000000706e670000000000617669000000000064697678000000006d703400000000006d703300000000003367700000000000776d760000000000776d6100000000006d706567000000006d6b7600000000006d6f76000000000061737800000000006173660000000000776d78000000000073766900000000007776780000000000776d0000000000006d706700000000006d70650000000000726d0000000000006f676700000000006a70656700000000766964656f00000061706b0000000000736f000000000000636f6c6400000000646200"/288, 0x120, 0x1860}, {&(0x7f0000010a00)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0x1a80}, {&(0x7f0000010b00)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0x1b80}, {&(0x7f0000010c00)='\x00\x00\x00\x00\n\x00'/32, 0x20, 0x1c80}, {&(0x7f0000010d00)="00000000000100"/32, 0x20, 0x1ec0}, {&(0x7f0000010e00)="27b0cc280000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/192, 0xc0, 0x400000}, {&(0x7f0000010f00)="00000000000000000000000000000000000000000000000000000000fd6927670000030000000003000000003c00"/64, 0x40, 0x400fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000000800"/64, 0x40, 0x4011e0}, {&(0x7f0000011100)="000000000000000000000002000000000400"/32, 0x20, 0x401240}, {&(0x7f0000011200)="000000000000000000000000000000000000000000000000000e000000040078", 0x20, 0x401280}, {&(0x7f0000011300)="0000000000000010000000001400"/32, 0x20, 0x4012e0}, {&(0x7f0000011400)="000000000000000000000000000000000000000000120000000510ec00000000", 0x20, 0x401320}, {&(0x7f0000011500)="00000014000000020c6000"/32, 0x20, 0x401380}, {&(0x7f0000011600)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x4013e0}, {&(0x7f0000011700)="03000000000000030000000000000400"/32, 0x20, 0x402000}, {&(0x7f0000011800)='\x00\x00T\x00'/32, 0x20, 0x402e00}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x402fe0}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x403fe0}, {&(0x7f0000011b00)="000000000000000000000000000000000000000000000000000000010000000027b0cc280000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/224, 0xe0, 0x404fe0}, {&(0x7f0000011c00)="00000000000000000000000000000000000000000000000000000000fd692767", 0x20, 0x405fe0}, {&(0x7f0000011d00)="27b0cc28fd69276700"/32, 0x20, 0x5ff000}, {&(0x7f0000011e00)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x5ff040}, {&(0x7f0000011f00)="28b0cc280000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/192, 0xc0, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000577e35830000030000000003000000003c00"/64, 0x40, 0x600fe0}, {&(0x7f0000012100)="000000000000000000000000000000000000000000000000000000060000000000000800"/64, 0x40, 0x6011e0}, {&(0x7f0000012200)="000000000000000000000002000000000400"/32, 0x20, 0x601240}, {&(0x7f0000012300)="000000000000000000000000000000000000000000000000000e000000040078", 0x20, 0x601280}, {&(0x7f0000012400)="0000000000000010000000001400"/32, 0x20, 0x6012e0}, {&(0x7f0000012500)="000000000000000000000000000000000000000000120000000510ec00000000", 0x20, 0x601320}, {&(0x7f0000012600)="00000014000000020c6000"/32, 0x20, 0x601380}, {&(0x7f0000012700)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x6013e0}, {&(0x7f0000012800)="03000000000000030000000000000400"/32, 0x20, 0x602000}, {&(0x7f0000012900)='\x00\x00p\x00'/32, 0x20, 0x602e00}, {&(0x7f0000012a00)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x602fe0}, {&(0x7f0000012b00)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x603fe0}, {&(0x7f0000012c00)="000000000000000000000000000000000000000000000000000000010000000028b0cc280000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/224, 0xe0, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000577e3583", 0x20, 0x605fe0}, {&(0x7f0000012e00)="28b0cc28577e358300"/32, 0x20, 0x7ff000}, {&(0x7f0000012f00)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x7ff040}, {&(0x7f0000013000)="0000000000000000000001000000010000000002000000010000000003000000013c00000004000000023c0000000500000000380000000600000001380000000700000002380000000800000005380000000900000004380000000000000000", 0x60, 0xc00000}, {&(0x7f0000013100)="0000000000000000000001000000010000000002000000010000000003000000013c00000004000000023c0000000500000000380000000600000001380000000700000002380000000800000003380000000900000004380000000000000000", 0x60, 0xe00000}, {&(0x7f0000013200)="0300000000000000000000000000000000000000000000000000000000000000000003000000010002000000000300000002000200"/64, 0x40, 0x3000000}, {&(0x7f0000013300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00', 0x20, 0x3000940}, {&(0x7f0000013400)="ff0000000000000000000000000000000000000000000000000000000000000000000300000001000200000000030000000200024a8113ed040000000500028dcece4507000000050001baeed06f0800000005000153bfc55008000000050001120052230900000009000100"/128, 0x80, 0x3001000}, {&(0x7f0000013500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00\x00\x00file2\x00\x00\x00file3\x00\x00\x00file.cold\x00'/96, 0x60, 0x3001940}, {&(0x7f0000013600)="ed81002b0000000000000000010000001a04000000000000010000000000000016bc645f0000000016bc645f0000000016bc645f000000008394d4038394d4038394d40342c389be000000000000000000000000040000000500000066696c653000"/128, 0x80, 0x3800000}, {&(0x7f0000013700)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00'/1120, 0x460, 0x3800160}, {&(0x7f0000013c00)="000000000000000005000000050000000100000025b0cc280000000001380000ffa1002b0000000000000000010000002600000000000000010000000000000016bc645f0000000016bc645f0000000016bc645f000000008394d4038394d4038394d40380c9ed3b000000000000000000000000040000000500000066696c653100"/160, 0xa0, 0x3800fe0}, {&(0x7f0000013d00)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/tmp/syz-imagegen529130558/file0/file0\x00'/96, 0x60, 0x3801160}, {&(0x7f0000013e00)="000000000000000006000000060000000100000025b0cc280000000002380000ed81002b0000000000000000010000000a00000000000000010000000000000016bc645f0000000016bc645f0000000016bc645f000000008394d4038394d4038394d4030d1d5042000000000000000000000000030000000500000066696c653100"/160, 0xa0, 0x3801fe0}, {&(0x7f0000013f00)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallers\x00\x00\x00\x00\x00\x00', 0x40, 0x3802160}, {&(0x7f0000014000)="0000000000000000000000001120f5f20100000000000000000000000000000000000000010606007861747472317861747472310106060078617474723278617474723200"/96, 0x60, 0x3802f00}, {&(0x7f0000014100)="000000000000000007000000070000000100000025b0cc280000000003380000ed8102210000000000000000020000002823000000000000040000000000000016bc645f0000000016bc645f0000000016bc645f000000008394d4038394d4038394d403b57b1688000000000000000000000000030000000500000066696c653300"/160, 0xa0, 0x3802fe0}, {&(0x7f0000014200)="0000000000000000240000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffff0000000000000000", 0x40, 0x3803160}, {&(0x7f0000014300)="000000000000000008000000080000000100000025b0cc280000000004380000ed81012b0000000000000000010000006400000000000000010000000000000016bc645f0000000016bc645f0000000016bc645f000000008394d4038394d4038394d40376ca9313000000000000000000000000030000000900000066696c652e636f6c6400"/160, 0xa0, 0x3803fe0}, {&(0x7f0000014400)='\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/160, 0xa0, 0x3804160}, {&(0x7f0000014500)="000000000000000009000000090000000100000025b0cc280000000005380000ed8102210000000000000000020000002823000000000000040000000000000016bc645f0000000016bc645f0000000016bc645f000000008394d4038394d4038394d403b57b1688000000000000000000000000030000000500000066696c653300"/160, 0xa0, 0x3804fe0}, {&(0x7f0000014600)="02300000030000002400000000000000000000000000000000000000000000000000000000000000000000000230000003300000043000"/64, 0x40, 0x3805160}, {&(0x7f0000014700)="000000000000000008000000080000000100000026b0cc281f04791506380000", 0x20, 0x3805fe0}, {&(0x7f0000014800)="ed4100205cf90100535f0100020000000010000000000000020000000000000015bc645f0000000015bc645f0000000015bc645f00000000000000000000000000000000000000000100"/96, 0x60, 0x3c00000}, {&(0x7f0000014900)="0000000000000000180000000000000000000000000000000000000000000000003000"/64, 0x40, 0x3c00160}, {&(0x7f0000014a00)="00000000000000000300000003000000000000000100000000000000013c0000ed4100205cf90100535f0100030000000010000000000000020000000000000015bc645f0000000016bc645f0000000016bc645f00000000000000008394d4038394d403000000000100"/128, 0x80, 0x3c00fe0}, {&(0x7f0000014b00)="0000000000000000180000000000000000000000000000000000000000000000013000"/64, 0x40, 0x3c01160}, {&(0x7f0000014c00)="000000000000000003000000030000000000000025b0cc2800000000023c0000ed4100250000000000000000020000007c0d000000000000010000000000000016bc645f0000000016bc645f0000000016bc645f000000008394d4038394d4038394d4039e11c8fa000000000000000000100000030000000500000066696c653000"/160, 0xa0, 0x3c01fe0}, {&(0x7f0000014d00)="0000000000000000240000000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000400000001000200000000030000000200024a8113ed050000000500018dcece450600000005000700000000", 0x80, 0x3c02160}, {&(0x7f0000014e00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00'/64, 0x40, 0x3c02960}, {&(0x7f0000014f00)="000000000000000004000000040000000000000025b0cc2800000000033c0000", 0x20, 0x3c02fe0}], 0x0, &(0x7f0000015000)=ANY=[@ANYBLOB]) 00:24:40 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) (fail_nth: 3) [ 753.565483][T27993] FAULT_INJECTION: forcing a failure. [ 753.565483][T27993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.578748][T27993] CPU: 1 PID: 27993 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 753.587185][T27993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.597259][T27993] Call Trace: [ 753.600557][T27993] [ 753.603504][T27993] dump_stack_lvl+0x201/0x2d8 [ 753.608210][T27993] ? show_regs_print_info+0x12/0x12 [ 753.613427][T27993] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 753.619167][T27993] ? __might_fault+0xb6/0x110 [ 753.623860][T27993] ? smack_log+0x11f/0x530 [ 753.628285][T27993] should_fail+0x384/0x4b0 [ 753.632700][T27993] _copy_from_user+0x2d/0x170 [ 753.637373][T27993] snd_seq_ioctl+0x1c4/0x410 [ 753.641962][T27993] ? snd_seq_poll+0x250/0x250 [ 753.646632][T27993] ? smack_file_ioctl+0x2f7/0x3a0 [ 753.651674][T27993] ? bpf_lsm_file_ioctl+0x5/0x10 [ 753.656604][T27993] ? security_file_ioctl+0x9d/0xb0 [ 753.661709][T27993] ? snd_seq_poll+0x250/0x250 [ 753.666380][T27993] __se_sys_ioctl+0xfb/0x170 [ 753.670969][T27993] do_syscall_64+0x44/0xd0 [ 753.675378][T27993] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 753.681264][T27993] RIP: 0033:0x7f2e009e4ae9 [ 753.685675][T27993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 753.705366][T27993] RSP: 002b:00007f2dfdf5a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 753.713799][T27993] RAX: ffffffffffffffda RBX: 00007f2e00af7f60 RCX: 00007f2e009e4ae9 [ 753.721771][T27993] RDX: 0000000020001980 RSI: 00000000c0505350 RDI: 0000000000000003 [ 753.729744][T27993] RBP: 00007f2dfdf5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.737707][T27993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.745757][T27993] R13: 00007fff81e190bf R14: 00007f2dfdf5a300 R15: 0000000000022000 [ 753.753745][T27993] 00:24:41 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) 00:24:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:24:41 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1={0xfc, 0x1, '\x00', 0x11}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x200002e4, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x1f4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "9cb500e7efddfe01", "984fa1857b765beb0f0eaa4c5bb01fac65e7a1288ea5fc7a009faced7a57106d", "0f7bc51e", "b59a2c1e7331eca1"}, 0x38) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) connect(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x1, 0x3, 0x2, {0xa, 0x4e22, 0x9, @local, 0x1ff}}}, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000100)='\xff\xff', 0x0, r1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x1, 0x7f, 0x81, 0x0, 0x91, 0x2, 0x1fb622c61226de32, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x2000000000000000}, 0x10012, 0x2, 0x3135, 0x7, 0x759, 0x9, 0x3e, 0x0, 0x40, 0x0, 0x10001}, 0x0, 0xc, 0xffffffffffffffff, 0x0) sched_getscheduler(0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0xce23, 0x18000000, @rand_addr=' \x01\x00', 0xc81}, 0x1c) prctl$PR_SCHED_CORE(0x10, 0x0, 0x0, 0x0, 0x0) r4 = fork() tkill(r4, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) 00:24:41 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1={0xfc, 0x1, '\x00', 0x60}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x7ffff000, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:41 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 754.263727][T22047] usb 2-1: new high-speed USB device number 11 using dummy_hcd 00:24:41 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0xfffffdef, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:41 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 754.654052][T22047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.665082][T22047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.675091][T22047] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 754.688113][T22047] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 754.697558][T22047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:24:42 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:42 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) [ 754.844343][T22047] usb 2-1: config 0 descriptor?? [ 755.530841][T22047] usb 2-1: string descriptor 0 read error: -22 [ 755.800827][T22047] uclogic 0003:5543:004D.0013: interface is invalid, ignoring [ 756.003380][T22047] usb 2-1: USB disconnect, device number 11 [ 756.770528][T22047] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 757.130964][T22047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.142251][T22047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.152088][T22047] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 757.164995][T22047] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 757.174107][T22047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.183867][T22047] usb 2-1: config 0 descriptor?? 00:24:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:24:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x10, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:44 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:44 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x2, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x1f4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "9cb500e7efddfe01", "984fa1857b765beb0f0eaa4c5bb01fac65e7a1288ea5fc7a009faced7a57106d", "0f7bc51e", "b59a2c1e7331eca1"}, 0x38) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) connect(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x1, 0x3, 0x2, {0xa, 0x4e22, 0x9, @local, 0x1ff}}}, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000100)='\xff\xff', 0x0, r1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x1, 0x7f, 0x81, 0x0, 0x91, 0x2, 0x1fb622c61226de32, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x2000000000000000}, 0x10012, 0x2, 0x3135, 0x7, 0x759, 0x9, 0x3e, 0x0, 0x40, 0x0, 0x10001}, 0x0, 0xc, 0xffffffffffffffff, 0x0) sched_getscheduler(0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0xce23, 0x18000000, @rand_addr=' \x01\x00', 0xc81}, 0x1c) prctl$PR_SCHED_CORE(0x10, 0x0, 0x0, 0x0, 0x0) r4 = fork() tkill(r4, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) 00:24:44 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) [ 757.368155][T28101] __nla_validate_parse: 8 callbacks suppressed [ 757.368171][T28101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 757.400564][T22047] usbhid 2-1:0.0: can't add hid device: -71 [ 757.406837][T22047] usbhid: probe of 2-1:0.0 failed with error -71 00:24:44 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x10, &(0x7f0000001980)={{0x0, 0x1}}) [ 757.511456][T22047] usb 2-1: USB disconnect, device number 12 00:24:44 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 757.559435][T28115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 757.663753][T28101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 757.673574][T28115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x77, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x10, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:45 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x4c00, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:45 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 757.931006][T28139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 757.951809][T22047] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 758.022014][T28141] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 758.081418][T28153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 758.138562][T28158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 758.310531][T22047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.321611][T22047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.331699][T22047] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 758.344752][T22047] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 758.353911][T22047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.363844][T22047] usb 2-1: config 0 descriptor?? [ 759.060518][T22047] usb 2-1: string descriptor 0 read error: -22 [ 759.320710][T22047] uclogic 0003:5543:004D.0014: interface is invalid, ignoring [ 759.546325][T22047] usb 2-1: USB disconnect, device number 13 00:24:47 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x4c01, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:24:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:47 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 00:24:47 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) [ 760.122291][T28208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x541b, &(0x7f0000001980)={{0x0, 0x1}}) [ 760.206381][T28225] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:47 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x2, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5421, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:47 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 760.450627][T22041] usb 2-1: new high-speed USB device number 14 using dummy_hcd 00:24:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5450, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:47 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 760.850643][T22041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.861737][T22041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.871590][T22041] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 760.884485][T22041] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 760.893852][T22041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.905660][T22041] usb 2-1: config 0 descriptor?? [ 761.600555][T22041] usb 2-1: string descriptor 0 read error: -22 [ 761.860543][T22041] uclogic 0003:5543:004D.0015: interface is invalid, ignoring [ 762.073236][T10966] usb 2-1: USB disconnect, device number 14 00:24:49 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:24:49 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5451, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:49 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:24:49 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) 00:24:49 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 00:24:49 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x8035}}}}}}}, 0x0) [ 762.675218][T28313] __nla_validate_parse: 4 callbacks suppressed [ 762.675236][T28313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:49 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5452, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:50 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8035}}}}}}}, 0x0) 00:24:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x9, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:50 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 00:24:50 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5460, &(0x7f0000001980)={{0x0, 0x1}}) [ 763.000493][T22047] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 763.009176][T28348] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 763.390464][T22047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.401461][T22047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.411395][T22047] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 763.424257][T22047] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 763.433334][T22047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.448142][T22047] usb 2-1: config 0 descriptor?? [ 764.130305][T22047] usb 2-1: string descriptor 0 read error: -22 [ 764.390265][T22047] uclogic 0003:5543:004D.0016: interface is invalid, ignoring [ 764.617327][T10967] usb 2-1: USB disconnect, device number 15 00:24:52 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:24:52 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8035}}}}}}}, 0x0) 00:24:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5501, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:52 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:24:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x83, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:52 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001080)={@empty, 0x286, 0x1, 0x3, 0x6, 0x4, 0x7}, 0x20) [ 765.222374][T28390] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x5509, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x300, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:52 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, 0x8035}}}}}}}, 0x0) 00:24:52 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) [ 765.402146][T28415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x6364, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:52 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) [ 765.490416][T28427] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 765.512047][T10967] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 765.900293][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.900330][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.900350][T10967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.900387][T10967] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 765.943304][T10967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.969740][T10967] usb 2-1: config 0 descriptor?? [ 766.660253][T10967] usb 2-1: string descriptor 0 read error: -22 [ 766.880174][T10967] uclogic 0003:5543:004D.0017: failed retrieving string descriptor #200: -71 [ 766.889013][T10967] uclogic 0003:5543:004D.0017: failed retrieving pen parameters: -71 [ 766.897196][T10967] uclogic 0003:5543:004D.0017: failed probing pen v2 parameters: -71 [ 766.905432][T10967] uclogic 0003:5543:004D.0017: failed probing parameters: -71 [ 766.913023][T10967] uclogic: probe of 0003:5543:004D.0017 failed with error -71 [ 766.925397][T10967] usb 2-1: USB disconnect, device number 16 00:24:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:24:54 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8035}}}}}}}, 0x0) 00:24:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x900, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:54 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x6611, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:54 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:24:54 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) [ 767.457534][T28464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:54 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8035}}}}}}}, 0x0) 00:24:54 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x8913, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:54 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:24:54 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) [ 767.575267][T28464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0xec0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:54 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x8914, &(0x7f0000001980)={{0x0, 0x1}}) [ 767.770061][T10966] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 767.803213][T28497] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 767.843141][T28497] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 768.130837][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.141843][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.151684][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 768.164824][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 768.174439][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.184385][T10966] usb 2-1: config 0 descriptor?? [ 768.895754][T10966] usb 2-1: string descriptor 0 read error: -22 [ 769.100312][T10966] uclogic 0003:5543:004D.0018: failed retrieving string descriptor #200: -71 [ 769.109149][T10966] uclogic 0003:5543:004D.0018: failed retrieving pen parameters: -71 [ 769.117386][T10966] uclogic 0003:5543:004D.0018: failed probing pen v2 parameters: -71 [ 769.125593][T10966] uclogic 0003:5543:004D.0018: failed probing parameters: -71 [ 769.133233][T10966] uclogic: probe of 0003:5543:004D.0018 failed with error -71 [ 769.151820][T10966] usb 2-1: USB disconnect, device number 17 00:24:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:24:56 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:24:56 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x806}}}}}}}, 0x0) 00:24:56 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:24:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x8100, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:56 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x8933, &(0x7f0000001980)={{0x0, 0x1}}) [ 769.692490][T28534] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:56 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x400448c9, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:56 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4305}}}}}}}, 0x0) 00:24:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000004340)={0x1, 0x6, 0x3ffdcf, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x40) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\x00') 00:24:57 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:24:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x8300, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:57 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x400448dd, &(0x7f0000001980)={{0x0, 0x1}}) [ 770.010384][T22047] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 770.026010][T28569] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 770.105247][T28569] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 770.389988][T22047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.401006][T22047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.411071][T22047] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 770.424020][T22047] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 770.433214][T22047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.444367][T22047] usb 2-1: config 0 descriptor?? [ 771.140091][T22047] usb 2-1: string descriptor 0 read error: -22 [ 771.360580][T22047] uclogic 0003:5543:004D.0019: failed retrieving string descriptor #200: -71 [ 771.370220][T22047] uclogic 0003:5543:004D.0019: failed retrieving pen parameters: -71 [ 771.378749][T22047] uclogic 0003:5543:004D.0019: failed probing pen v2 parameters: -71 [ 771.387426][T22047] uclogic 0003:5543:004D.0019: failed probing parameters: -71 [ 771.395015][T22047] uclogic: probe of 0003:5543:004D.0019 failed with error -71 [ 771.410817][T22047] usb 2-1: USB disconnect, device number 18 00:24:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:24:59 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) 00:24:59 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:24:59 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x48, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x97b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]]}, 0x48}}, 0x0) 00:24:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x400454ca, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0xc00e, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 771.960121][T28624] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:24:59 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}}}}}}}, 0x0) 00:24:59 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:24:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x4004550a, &(0x7f0000001980)={{0x0, 0x1}}) 00:24:59 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:24:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x34000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:24:59 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8847}}}}}}}, 0x0) [ 772.254313][T28656] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 772.296282][T22047] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 772.377106][T28656] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 772.679914][T22047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.690941][T22047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.700816][T22047] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 772.713766][T22047] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 772.723185][T22047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.735404][T22047] usb 2-1: config 0 descriptor?? [ 773.449809][T22047] usb 2-1: string descriptor 0 read error: -22 [ 773.889746][T22047] uclogic 0003:5543:004D.001A: failed retrieving string descriptor #100: -71 [ 773.898731][T22047] uclogic 0003:5543:004D.001A: failed retrieving pen parameters: -71 [ 773.907014][T22047] uclogic 0003:5543:004D.001A: failed probing pen v1 parameters: -71 [ 773.915193][T22047] uclogic 0003:5543:004D.001A: failed probing parameters: -71 [ 773.922732][T22047] uclogic: probe of 0003:5543:004D.001A failed with error -71 [ 773.935438][T22047] usb 2-1: USB disconnect, device number 19 00:25:01 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:25:01 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40049409, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:01 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:25:01 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8848}}}}}}}, 0x0) 00:25:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:01 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) [ 774.472133][T28708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:01 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8864}}}}}}}, 0x0) 00:25:01 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:25:01 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:25:01 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40085503, &(0x7f0000001980)={{0x0, 0x1}}) [ 774.622196][T28724] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x400300, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:01 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8906}}}}}}}, 0x0) 00:25:01 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:02 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:25:02 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40086602, &(0x7f0000001980)={{0x0, 0x1}}) [ 774.789632][T10960] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 774.848351][T28742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 774.923901][T28742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 775.149924][T10960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.160926][T10960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.170783][T10960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.183685][T10960] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 775.193022][T10960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.203340][T10960] usb 2-1: config 0 descriptor?? [ 775.899746][T10960] usb 2-1: string descriptor 0 read error: -22 [ 776.339607][T10960] uclogic 0003:5543:004D.001B: failed retrieving string descriptor #100: -71 [ 776.348564][T10960] uclogic 0003:5543:004D.001B: failed retrieving pen parameters: -71 [ 776.357168][T10960] uclogic 0003:5543:004D.001B: failed probing pen v1 parameters: -71 [ 776.365450][T10960] uclogic 0003:5543:004D.001B: failed probing parameters: -71 [ 776.373029][T10960] uclogic: probe of 0003:5543:004D.001B failed with error -71 [ 776.385644][T10960] usb 2-1: USB disconnect, device number 20 00:25:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, 0x0, 0x0) 00:25:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x1000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:04 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:25:04 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40186366, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:04 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:04 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x2}}}}}}}, 0x0) [ 776.942138][T28792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, 0x0, 0x0) 00:25:04 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x401c5820, &(0x7f0000001980)={{0x0, 0x1}}) [ 776.994970][T28792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:04 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x3}}}}}}}, 0x0) [ 777.157884][T28816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, 0x0, 0x0) [ 777.253636][T28816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 777.263528][T22043] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 777.669605][T22043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.680963][T22043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.691154][T22043] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 777.704120][T22043] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 777.713203][T22043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.738169][T22043] usb 2-1: config 0 descriptor?? [ 778.429802][T22043] usb 2-1: string descriptor 0 read error: -22 [ 778.869633][T22043] uclogic 0003:5543:004D.001C: failed retrieving string descriptor #100: -71 [ 778.878474][T22043] uclogic 0003:5543:004D.001C: failed retrieving pen parameters: -71 [ 778.886958][T22043] uclogic 0003:5543:004D.001C: failed probing pen v1 parameters: -71 [ 778.895113][T22043] uclogic 0003:5543:004D.001C: failed probing parameters: -71 [ 778.902837][T22043] uclogic: probe of 0003:5543:004D.001C failed with error -71 [ 778.929933][T22043] usb 2-1: USB disconnect, device number 21 00:25:06 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x4020940d, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:06 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x4}}}}}}}, 0x0) 00:25:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x3000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, 0x0}, 0x0) 00:25:06 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:06 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x7}}}}}}}, 0x0) [ 779.457406][T28863] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x402c5342, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, 0x0}, 0x0) 00:25:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x4000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, 0x0}, 0x0) 00:25:06 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x8}}}}}}}, 0x0) [ 779.683074][T28891] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 779.829700][T10966] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 780.229899][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.241558][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.251478][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 780.264361][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 780.273503][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.284058][T10966] usb 2-1: config 0 descriptor?? [ 781.259779][T10966] uclogic 0003:5543:004D.001D: failed retrieving Huion firmware version: -71 [ 781.268955][T10966] uclogic 0003:5543:004D.001D: failed probing parameters: -71 [ 781.276767][T10966] uclogic: probe of 0003:5543:004D.001D failed with error -71 [ 781.291433][T10966] usb 2-1: USB disconnect, device number 22 00:25:08 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)}, 0x0) 00:25:08 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x4030560b, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x9000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:08 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x11}}}}}}}, 0x0) 00:25:08 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) [ 781.814605][T28936] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:09 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x404c534a, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)}, 0x0) 00:25:09 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x60}}}}}}}, 0x0) [ 781.927066][T28950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x81000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:09 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x300}}}}}}}, 0x0) 00:25:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)}, 0x0) [ 782.158383][T28979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 782.177508][T10966] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 782.253461][T28979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 782.589421][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.600692][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.610555][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 782.623654][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 782.632995][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.643489][T10966] usb 2-1: config 0 descriptor?? [ 783.629388][T10966] uclogic 0003:5543:004D.001E: failed retrieving Huion firmware version: -71 [ 783.638353][T10966] uclogic 0003:5543:004D.001E: failed probing parameters: -71 [ 783.646023][T10966] uclogic: probe of 0003:5543:004D.001E failed with error -71 [ 783.657276][T10966] usb 2-1: USB disconnect, device number 23 00:25:11 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x700}}}}}}}, 0x0) 00:25:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505330, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:11 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{0x0}], 0x1}, 0x0) 00:25:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x83000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) [ 784.205210][T29021] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:11 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{0x0}], 0x1}, 0x0) 00:25:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40505331, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:11 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0xe80}}}}}}}, 0x0) [ 784.321896][T29021] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:11 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{0x0}], 0x1}, 0x0) 00:25:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x9205a3d6, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:11 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x1100}}}}}}}, 0x0) [ 784.499898][T10960] usb 2-1: new high-speed USB device number 24 using dummy_hcd 00:25:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x4058534c, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:11 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x0, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) [ 784.599611][T29065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 784.681426][T29078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:11 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x0, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) [ 784.889522][T10960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.900714][T10960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.910658][T10960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 784.923526][T10960] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 784.932689][T10960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.942992][T10960] usb 2-1: config 0 descriptor?? [ 785.929444][T10960] uclogic 0003:5543:004D.001F: failed retrieving Huion firmware version: -71 [ 785.938306][T10960] uclogic 0003:5543:004D.001F: failed probing parameters: -71 [ 785.945929][T10960] uclogic: probe of 0003:5543:004D.001F failed with error -71 [ 785.959633][T10960] usb 2-1: USB disconnect, device number 24 00:25:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:13 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40605346, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:13 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x6000}}}}}}}, 0x0) 00:25:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:13 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x0, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:25:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x9205a3d6, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 786.465091][T29127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:25:13 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x408c5333, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:13 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x800e}}}}}}}, 0x0) 00:25:13 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x0, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) [ 786.549382][T29126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:13 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 786.624797][T29143] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:13 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0xe1fd}}}}}}}, 0x0) 00:25:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0xc00e0000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 786.769574][T10967] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 786.835535][T29173] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 786.893906][T29173] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 787.129223][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.140261][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.150290][T10967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.163272][T10967] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 787.172446][T10967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.182786][T10967] usb 2-1: config 0 descriptor?? 00:25:16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:16 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40a85321, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:16 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x0, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:25:16 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0xfde1}}}}}}}, 0x0) 00:25:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0xd6a30592, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 789.520117][T10967] usbhid 2-1:0.0: can't add hid device: -71 [ 789.526187][T10967] usbhid: probe of 2-1:0.0 failed with error -71 00:25:16 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 789.565451][T29209] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 789.576560][T10967] usb 2-1: USB disconnect, device number 25 00:25:16 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x0, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) 00:25:16 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40a85323, &(0x7f0000001980)={{0x0, 0x1}}) [ 789.666224][T29220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:16 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0x2}}}}}}}, 0x0) 00:25:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0xefffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:16 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x10, 0x1d, 0x32b}, 0x10}], 0x1}, 0x0) [ 789.874871][T29239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 789.924624][T29239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 789.989252][T10967] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 790.379327][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.390255][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.400095][T10967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.413212][T10967] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 790.422353][T10967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.432669][T10967] usb 2-1: config 0 descriptor?? 00:25:19 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x10, 0x1d, 0x32b}, 0x10}], 0x1}, 0x0) 00:25:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:19 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0x3}}}}}}}, 0x0) 00:25:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 00:25:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40bc5311, &(0x7f0000001980)={{0x0, 0x1}}) [ 792.589188][T10967] usbhid 2-1:0.0: can't add hid device: -71 [ 792.595251][T10967] usbhid: probe of 2-1:0.0 failed with error -71 00:25:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x41015500, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:19 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0x4}}}}}}}, 0x0) 00:25:19 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x10, 0x1d, 0x32b}, 0x10}], 0x1}, 0x0) [ 792.642631][T29274] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 792.673094][T10967] usb 2-1: USB disconnect, device number 26 [ 792.736055][T29274] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80045300, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:20 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0x7}}}}}}}, 0x0) 00:25:20 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x144, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x133, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74"]}]}, 0x144}], 0x1}, 0x0) [ 792.926788][T29304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 792.991247][T29304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 793.118775][T10967] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 793.478918][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.489926][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.499781][T10967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 793.512703][T10967] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 793.521920][T10967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.532423][T10967] usb 2-1: config 0 descriptor?? 00:25:22 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:22 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x144, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x133, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74"]}]}, 0x144}], 0x1}, 0x0) 00:25:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:22 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80045301, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:22 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0x8}}}}}}}, 0x0) 00:25:22 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="10010000d24bf12030a191220d0563adbb1394e00927020000000000010902120001070000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "e8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000440)={0x0, 0x0, 0x1, '~'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 795.678836][T10967] usbhid 2-1:0.0: can't add hid device: -71 [ 795.684917][T10967] usbhid: probe of 2-1:0.0 failed with error -71 [ 795.706290][T29338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:22 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x144, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x133, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74"]}]}, 0x144}], 0x1}, 0x0) 00:25:22 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80085502, &(0x7f0000001980)={{0x0, 0x1}}) [ 795.762171][T10967] usb 2-1: USB disconnect, device number 27 00:25:23 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0x11}}}}}}}, 0x0) [ 795.835422][T29356] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:23 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x144, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x133, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic]}]}, 0x144}], 0x1}, 0x0) 00:25:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0xffffffef, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:23 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80086301, &(0x7f0000001980)={{0x0, 0x1}}) [ 796.057596][T29389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 796.147284][T29392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 796.198982][T10967] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 796.588783][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.599862][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.609725][T10967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.622703][T10967] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 796.632008][T10967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.642381][T10967] usb 2-1: config 0 descriptor?? 00:25:25 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:25 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0x60}}}}}}}, 0x0) 00:25:25 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x144, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x133, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic]}]}, 0x144}], 0x1}, 0x0) 00:25:25 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x80086601, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:25 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x4, 0x1, 0xff, 0x20, 0x0, 0xffffffff, 0x18000, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3f, 0x100}, 0x201, 0x3, 0x2abb, 0x5, 0x7fff, 0x1ff, 0x7f, 0x0, 0x10001, 0x0, 0x8c4e}, 0x0, 0x4, r1, 0x3) set_mempolicy(0x3, &(0x7f0000000040)=0x5, 0x6) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x0, 0x2, 0x1, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000100), 0xa}, 0x40, 0x1, 0x1ff, 0x6, 0x1, 0x7fff, 0x6, 0x0, 0x7, 0x0, 0x8}, r1, 0x6, 0xffffffffffffffff, 0x9) mlockall(0x1) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x0) [ 798.768800][T10967] usbhid 2-1:0.0: can't add hid device: -71 [ 798.775085][T10967] usbhid: probe of 2-1:0.0 failed with error -71 [ 798.804506][T29426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 798.818289][T10967] usb 2-1: USB disconnect, device number 28 00:25:26 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x801c581f, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:26 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x144, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x133, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic]}]}, 0x144}], 0x1}, 0x0) 00:25:26 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0x300}}}}}}}, 0x0) [ 798.967320][T29426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:26 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0045878, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:26 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1ac, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x19a, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280"]}]}, 0x1ac}], 0x1}, 0x0) [ 799.210036][T29460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 799.229359][T10967] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 799.588548][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.599851][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.609737][T10967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 799.622644][T10967] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 799.631807][T10967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.654282][T10967] usb 2-1: config 0 descriptor?? 00:25:28 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0045878, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:28 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:28 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0x700}}}}}}}, 0x0) 00:25:28 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1ac, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x19a, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280"]}]}, 0x1ac}], 0x1}, 0x0) 00:25:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:28 executing program 4: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x208}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x5, 0x53, {0x53, 0xf, "30a2baab71b35b0a74e16581b232470e482c2fad4234bae0c92473a88fab3ea67c6248dcca7817e4fcf5c8fc7057a31166775c34d21235ca9e1d1887a9c21756cd5d50e966dc3665fd168568e191b102ba"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f0000000140)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "86ffcac89506d9984e419233a41b4016"}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x76, 0x0, 0x6, "a9b8520d", "fbb30fca"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x52, 0x2d, 0x9, 0x5, 0x1}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x12, 0x58, "32801d514815286109bbec85ab498e112e2ec054425f1724619c702ca3465405e277bceadbe0fbe32f3410b1cb348f476035f9b1e51eacd79155e98cbd0f62794869ab46b809c26ec88f4407dd922eea85218f188a2bfd25"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x400, 0x4}}, &(0x7f00000003c0)={0x40, 0x7, 0x2}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0xd6}, &(0x7f0000000440)={0x40, 0xb, 0x2, '|]'}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0xfffe}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000500)={0x40, 0x17, 0x6}, &(0x7f0000000540)={0x40, 0x19, 0x2, "be9e"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x8a}, &(0x7f0000000600)={0x40, 0x1e, 0x1}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x7e}}) ppoll(&(0x7f00000006c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 801.841643][T10967] usbhid 2-1:0.0: can't add hid device: -71 [ 801.847936][T10967] usbhid: probe of 2-1:0.0 failed with error -71 [ 801.905043][T10967] usb 2-1: USB disconnect, device number 29 [ 801.918329][T29493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:29 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0085504, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:29 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0xe80}}}}}}}, 0x0) 00:25:29 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1ac, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x19a, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280"]}]}, 0x1ac}], 0x1}, 0x0) [ 802.033216][T29510] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:29 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1e0, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1ce, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a6"]}]}, 0x1e0}], 0x1}, 0x0) 00:25:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x3, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:29 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0x1100}}}}}}}, 0x0) 00:25:29 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0105303, &(0x7f0000001980)={{0x0, 0x1}}) [ 802.282650][T29531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 802.332929][T29531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 802.358560][T10967] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 802.738592][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.749577][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.759465][T10967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 802.772570][T10967] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 802.781781][T10967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.792151][T10967] usb 2-1: config 0 descriptor?? 00:25:32 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:32 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1e0, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1ce, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a6"]}]}, 0x1e0}], 0x1}, 0x0) 00:25:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:32 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0189436, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:32 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0x6000}}}}}}}, 0x0) 00:25:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x29, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0xffffff7f0e000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x1, 0x80000000, 0x10001, 0x1, 0x2}) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4000, &(0x7f0000000040)={0x2, 0xfffe, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000380)="02e677027eeeccca97ec521a6dc6d6e40fd3a67c45f603b29c30c21fe48503b9a7e1685effd885643011b20a1faff2c36075a289873cd3fd7e73a5f63a70b39bcb2c595fd32cf59939a6f1df685e11c537112b2a36d90fdcb4c98843959f904e898e324fec10db7110636b1755b466cc9ccf925b536fdaa651a45bd3073e01f1dbfffe063de507eb0493226f94f3044f1aa741486f012ad42e25cf471a4c7019f4b7f512f4bd6d0e44b05676d5df2586cf5a6195334603fc06000000ad4878b5ae5a2141b64e4cfb4f28c31798ad697924a985b8b4299fee401c18e1dcc134fa886e50ab93955536b68a54500b810127e1d471aad0", 0xf5, 0x24040084, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) [ 804.930108][T10967] usbhid 2-1:0.0: can't add hid device: -71 [ 804.936140][T10967] usbhid: probe of 2-1:0.0 failed with error -71 [ 804.985778][T29565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 805.011672][T10967] usb 2-1: USB disconnect, device number 30 [ 805.015946][T29566] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 00:25:32 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1e0, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1ce, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a6"]}]}, 0x1e0}], 0x1}, 0x0) 00:25:32 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0x800e}}}}}}}, 0x0) [ 805.077091][T29583] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x9, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:32 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc020660b, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:32 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0xe1fd}}}}}}}, 0x0) [ 805.346927][T29566] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 00:25:32 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1f8, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1e8, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66"]}]}, 0x1f8}], 0x1}, 0x0) [ 805.472141][T29612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 805.596161][T29631] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:32 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:32 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035, 0x0, 0xfde1}}}}}}}, 0x0) 00:25:32 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc02c5341, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x29, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0xffffff7f0e000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x1, 0x80000000, 0x10001, 0x1, 0x2}) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4000, &(0x7f0000000040)={0x2, 0xfffe, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000380)="02e677027eeeccca97ec521a6dc6d6e40fd3a67c45f603b29c30c21fe48503b9a7e1685effd885643011b20a1faff2c36075a289873cd3fd7e73a5f63a70b39bcb2c595fd32cf59939a6f1df685e11c537112b2a36d90fdcb4c98843959f904e898e324fec10db7110636b1755b466cc9ccf925b536fdaa651a45bd3073e01f1dbfffe063de507eb0493226f94f3044f1aa741486f012ad42e25cf471a4c7019f4b7f512f4bd6d0e44b05676d5df2586cf5a6195334603fc06000000ad4878b5ae5a2141b64e4cfb4f28c31798ad697924a985b8b4299fee401c18e1dcc134fa886e50ab93955536b68a54500b810127e1d471aad0", 0xf5, 0x24040084, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) 00:25:32 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1f8, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1e8, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66"]}]}, 0x1f8}], 0x1}, 0x0) 00:25:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x83, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 805.846426][T29647] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 00:25:33 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:25:33 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0305302, &(0x7f0000001980)={{0x0, 0x1}}) [ 805.893996][T29653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:33 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc04c5349, &(0x7f0000001980)={{0x0, 0x1}}) [ 806.231633][T29653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:33 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1f8, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1e8, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66"]}]}, 0x1f8}], 0x1}, 0x0) 00:25:33 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:25:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x300, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:33 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x29, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0xffffff7f0e000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x1, 0x80000000, 0x10001, 0x1, 0x2}) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4000, &(0x7f0000000040)={0x2, 0xfffe, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000380)="02e677027eeeccca97ec521a6dc6d6e40fd3a67c45f603b29c30c21fe48503b9a7e1685effd885643011b20a1faff2c36075a289873cd3fd7e73a5f63a70b39bcb2c595fd32cf59939a6f1df685e11c537112b2a36d90fdcb4c98843959f904e898e324fec10db7110636b1755b466cc9ccf925b536fdaa651a45bd3073e01f1dbfffe063de507eb0493226f94f3044f1aa741486f012ad42e25cf471a4c7019f4b7f512f4bd6d0e44b05676d5df2586cf5a6195334603fc06000000ad4878b5ae5a2141b64e4cfb4f28c31798ad697924a985b8b4299fee401c18e1dcc134fa886e50ab93955536b68a54500b810127e1d471aad0", 0xf5, 0x24040084, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) 00:25:33 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc050535e, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:33 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x208, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f5, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046"]}]}, 0x208}], 0x1}, 0x0) [ 806.495166][T29702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:33 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 806.558377][T29702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 806.588287][T29722] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 00:25:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x900, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:34 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:25:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc05053c1, &(0x7f0000001980)={{0x0, 0x1}}) [ 806.921893][T29736] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 806.957679][T29739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:34 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x208, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f5, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046"]}]}, 0x208}], 0x1}, 0x0) 00:25:34 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc02c5341, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:34 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:25:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0xec0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534b, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:34 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x208, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f5, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046"]}]}, 0x208}], 0x1}, 0x0) 00:25:34 executing program 4: perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x16) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) 00:25:34 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) 00:25:34 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x20c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1fb, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca"]}]}, 0x20c}], 0x1}, 0x0) 00:25:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc05c5340, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x8100, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:34 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x3}}}}}}}, 0x0) 00:25:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0605345, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:34 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x20c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1fb, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca"]}]}, 0x20c}], 0x1}, 0x0) 00:25:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x8300, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:35 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}, 0x0) 00:25:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000001980)={{0x0, 0x1}}) [ 807.965110][T29802] overlayfs: filesystem on './bus' not supported as upperdir 00:25:35 executing program 4: perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x16) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) 00:25:35 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x20c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1fb, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca"]}]}, 0x20c}], 0x1}, 0x0) 00:25:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0xc00e, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5334, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:35 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}, 0x0) 00:25:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5335, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x34000, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:35 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}, 0x0) 00:25:35 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1fe, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa42"]}]}, 0x210}], 0x1}, 0x0) [ 808.399705][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 00:25:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:35 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1fe, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa42"]}]}, 0x210}], 0x1}, 0x0) 00:25:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x40000, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:35 executing program 4: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) unshare(0x30040000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10012, r3, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047452, &(0x7f0000000000)) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000300)={{r1}, 0x0, 0x1e, @inherit={0x60, &(0x7f0000000280)={0x1, 0x3, 0x1ff, 0x3, {0x12, 0x5, 0x3, 0x81, 0x8}, [0x2, 0x8, 0xfffffffffffffffb]}}, @devid}) 00:25:35 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}}, 0x0) 00:25:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5336, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:35 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1fe, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa42"]}]}, 0x210}], 0x1}, 0x0) 00:25:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x400300, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:36 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x60}}}}}}}, 0x0) 00:25:36 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85320, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:36 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x200, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6"]}]}, 0x210}], 0x1}, 0x0) 00:25:36 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0a85322, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x1000000, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:36 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) 00:25:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0280c20000000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2bae249a"], 0x0) 00:25:36 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x200, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6"]}]}, 0x210}], 0x1}, 0x0) 00:25:36 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0bc5310, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:36 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:25:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x2000000, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 809.541273][T10960] usb 2-1: new high-speed USB device number 31 using dummy_hcd 00:25:36 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x200, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6"]}]}, 0x210}], 0x1}, 0x0) 00:25:36 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) 00:25:36 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0d05605, &(0x7f0000001980)={{0x0, 0x1}}) [ 809.738163][T10960] usb 2-1: device descriptor read/64, error 18 00:25:37 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x188, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x177, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x188}], 0x1}, 0x0) [ 810.008037][T10960] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 810.197927][T10960] usb 2-1: device descriptor read/64, error 18 [ 810.318236][T10960] usb usb2-port1: attempt power cycle [ 810.728321][T10960] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 810.818272][T10960] usb 2-1: Invalid ep0 maxpacket: 0 [ 810.967902][T10960] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 811.058275][T10960] usb 2-1: Invalid ep0 maxpacket: 0 [ 811.064012][T10960] usb usb2-port1: unable to enumerate USB device 00:25:39 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x3000000, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:39 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}}}}, 0x0) 00:25:39 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:25:39 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x188, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x177, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x188}], 0x1}, 0x0) 00:25:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0280c20000000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2bae249a"], 0x0) [ 812.283771][T30079] __nla_validate_parse: 18 callbacks suppressed [ 812.283788][T30079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:39 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x188, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x177, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x188}], 0x1}, 0x0) 00:25:39 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}, 0x0) 00:25:39 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x2, 0x1}}) [ 812.396449][T30092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:39 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x3, 0x1}}) 00:25:39 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}, 0x0) [ 812.618010][T10966] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 812.655020][T30123] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 812.747053][T30136] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 812.838234][T10966] usb 2-1: device descriptor read/64, error 18 [ 813.107809][T10966] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 813.297894][T10966] usb 2-1: device descriptor read/64, error 18 [ 813.418128][T10966] usb usb2-port1: attempt power cycle [ 813.827868][T10966] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 813.928095][T10966] usb 2-1: Invalid ep0 maxpacket: 0 [ 814.077823][T10966] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 814.167926][T10966] usb 2-1: Invalid ep0 maxpacket: 0 [ 814.173481][T10966] usb usb2-port1: unable to enumerate USB device 00:25:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:42 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x188, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x177, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic, @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x188}], 0x1}, 0x0) 00:25:42 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x4, 0x1}}) 00:25:42 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802}}}}}}}, 0x0) 00:25:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x9000000, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:42 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0280c20000000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2bae249a"], 0x0) [ 815.329043][T30163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:42 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x188, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x177, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic, @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x188}], 0x1}, 0x0) 00:25:42 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803}}}}}}}, 0x0) 00:25:42 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x5, 0x1}}) [ 815.432189][T30177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x81000000, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:42 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x6, 0x1}}) 00:25:42 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x188, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x177, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic, @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x188}], 0x1}, 0x0) [ 815.614224][T30196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 815.683140][T30196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 815.747964][T22041] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 815.947709][T22041] usb 2-1: device descriptor read/64, error 18 [ 816.226608][T22041] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 816.417711][T22041] usb 2-1: device descriptor read/64, error 18 [ 816.538392][T22041] usb usb2-port1: attempt power cycle [ 816.957675][T22041] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 817.047958][T22041] usb 2-1: Invalid ep0 maxpacket: 0 [ 817.217645][T22041] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 817.327960][T22041] usb 2-1: Invalid ep0 maxpacket: 0 [ 817.333753][T22041] usb usb2-port1: unable to enumerate USB device 00:25:45 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:45 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}}}}}}, 0x0) 00:25:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x83000000, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:45 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1cc, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1bc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x1cc}], 0x1}, 0x0) 00:25:45 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x7, 0x1}}) 00:25:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0280c20000000800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2bae249a"], 0x0) [ 818.509360][T30223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:45 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x8, 0x1}}) 00:25:45 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807}}}}}}}, 0x0) 00:25:45 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1cc, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1bc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x1cc}], 0x1}, 0x0) [ 818.604598][T30237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x9205a3d6, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:45 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x9, 0x1}}) 00:25:46 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1cc, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1bc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x1cc}], 0x1}, 0x0) [ 818.836018][T30254] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 818.880678][T10966] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 818.897268][T30254] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 819.268009][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 819.280935][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 819.290085][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.314287][T10966] usb 2-1: config 0 descriptor?? [ 819.360103][T10966] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 00:25:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:48 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808}}}}}}}, 0x0) 00:25:48 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0xa, 0x1}}) 00:25:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:48 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1f0, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1df, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x1f0}], 0x1}, 0x0) 00:25:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) [ 821.527928][T10960] usb 2-1: USB disconnect, device number 43 00:25:48 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1f0, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1df, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x1f0}], 0x1}, 0x0) [ 821.675846][T30296] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:48 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0xb, 0x1}}) 00:25:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0xc00e0000, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:48 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x811}}}}}}}, 0x0) [ 821.734964][T30296] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:49 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1f0, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1df, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x1f0}], 0x1}, 0x0) 00:25:49 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0xc, 0x1}}) [ 821.930256][T30323] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 821.985203][T30323] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 822.087576][T10960] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 822.487620][T10960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 822.500604][T10960] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 822.509803][T10960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.530356][T10960] usb 2-1: config 0 descriptor?? [ 822.589928][T10960] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 00:25:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:51 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x860}}}}}}}, 0x0) 00:25:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0xd6a30592, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:51 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x200, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f0, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d81", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x200}], 0x1}, 0x0) 00:25:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0xd, 0x1}}) 00:25:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) [ 824.637610][T22045] usb 2-1: USB disconnect, device number 44 00:25:52 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x200, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f0, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d81", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x200}], 0x1}, 0x0) 00:25:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0xe, 0x1}}) [ 824.798018][T30366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:52 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:25:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) 00:25:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0xefffffff, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0xf, 0x1}}) [ 825.149370][T30396] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 825.177576][T22045] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 825.219127][T30396] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 825.567426][T22045] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 825.580399][T22045] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 825.589494][T22045] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.600355][T22045] usb 2-1: config 0 descriptor?? [ 825.639662][T22045] usbhid 2-1:0.0: couldn't find an input interrupt endpoint 00:25:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:54 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x200, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f0, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d81", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x200}], 0x1}, 0x0) 00:25:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) 00:25:54 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x10, 0x1}}) 00:25:54 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:25:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 827.726610][T10966] usb 2-1: USB disconnect, device number 45 00:25:55 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x20c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f9, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x20c}], 0x1}, 0x0) [ 827.890697][T30439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:55 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:25:55 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) 00:25:55 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x11, 0x1}}) [ 828.010509][T30451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:55 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x20c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f9, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x20c}], 0x1}, 0x0) [ 828.246403][T30480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 828.289933][T10966] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 828.304745][T30480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 828.657200][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.668178][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.678221][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 828.691256][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 828.700499][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.710869][T10966] usb 2-1: config 0 descriptor?? [ 828.760310][T10966] usbhid 2-1:0.0: can't add hid device: -22 [ 828.766437][T10966] usbhid: probe of 2-1:0.0 failed with error -22 00:25:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:25:58 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) 00:25:58 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:25:58 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x20c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f9, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x20c}], 0x1}, 0x0) 00:25:58 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x12, 0x1}}) 00:25:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 830.815764][T10960] usb 2-1: USB disconnect, device number 46 [ 830.938852][T30520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:58 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1fd, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) 00:25:58 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:25:58 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) 00:25:58 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x18, 0x1}}) 00:25:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0xffffffef, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:25:58 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1fd, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) [ 831.322300][T30553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 831.360971][T30553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 831.397111][T10960] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 831.807027][T10960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.817988][T10960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.828620][T10960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 831.841539][T10960] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 831.851094][T10960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.861423][T10960] usb 2-1: config 0 descriptor?? [ 831.899478][T10960] usbhid 2-1:0.0: can't add hid device: -22 [ 831.905503][T10960] usbhid: probe of 2-1:0.0 failed with error -22 00:26:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:01 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) 00:26:01 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x25, 0x1}}) 00:26:01 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) 00:26:01 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1fd, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) 00:26:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 833.927202][T10966] usb 2-1: USB disconnect, device number 47 00:26:01 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) [ 834.088867][T30590] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:01 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1ff, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) 00:26:01 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) 00:26:01 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}}}}}}}, 0x0) 00:26:01 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x5c, 0x1}}) [ 834.241985][T30604] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:01 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1ff, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) [ 834.506820][T10966] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 834.887379][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.898366][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.908249][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 834.921344][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 834.930642][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.947453][T10966] usb 2-1: config 0 descriptor?? [ 834.999414][T10966] usbhid 2-1:0.0: can't add hid device: -22 [ 835.005525][T10966] usbhid: probe of 2-1:0.0 failed with error -22 00:26:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) 00:26:04 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}, 0x0) 00:26:04 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0xbf, 0x1}}) 00:26:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1ff, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) [ 837.046955][T10966] usb 2-1: USB disconnect, device number 48 [ 837.198054][T30659] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:04 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}, 0x0) 00:26:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x200, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) 00:26:04 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)) 00:26:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) [ 837.303255][T30674] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x2, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x200, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) [ 837.570862][T30691] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 837.587243][T10966] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 837.624635][T30691] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 837.946953][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.957914][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.967868][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.980877][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 837.990103][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.000859][T10966] usb 2-1: config 0 descriptor?? 00:26:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) 00:26:07 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}, 0x0) 00:26:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x200, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) 00:26:07 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x3}}) 00:26:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x3, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 840.216755][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 840.222882][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 840.270630][T10966] usb 2-1: USB disconnect, device number 49 00:26:07 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x4}}) [ 840.321337][T30728] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:07 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}}, 0x0) 00:26:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x20c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f9, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x20c}], 0x1}, 0x0) 00:26:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) [ 840.445112][T30744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:07 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x5}}) 00:26:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x4, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 840.690710][T30761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 840.727068][T10966] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 840.749539][T30773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 841.086650][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.097641][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.107519][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 841.120415][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 841.129635][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.140166][T10966] usb 2-1: config 0 descriptor?? 00:26:10 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:10 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x20c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f9, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x20c}], 0x1}, 0x0) 00:26:10 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {0x0, 0x0, 0x0, 0x0, 0x60}}}}}}}, 0x0) 00:26:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) 00:26:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x7}}) 00:26:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x9, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) [ 843.296879][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 843.302963][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 843.321299][T30793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:10 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0) 00:26:10 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x20c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f9, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x20c}], 0x1}, 0x0) [ 843.392423][T10966] usb 2-1: USB disconnect, device number 50 00:26:10 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x8}}) 00:26:10 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x12, 0x1}}) [ 843.491692][T30793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:10 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 843.826478][T10966] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 844.186964][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.198035][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.207982][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 844.221045][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 844.230296][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.241564][T10966] usb 2-1: config 0 descriptor?? 00:26:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x83, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:13 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x18}}) 00:26:13 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x17c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x16c, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x17c}], 0x1}, 0x0) 00:26:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) (fail_nth: 1) 00:26:13 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) [ 846.418255][T30845] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 846.437772][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 846.443876][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 846.495916][T10966] usb 2-1: USB disconnect, device number 51 00:26:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) 00:26:13 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}}}}, 0x0) 00:26:13 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}}) 00:26:13 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x17c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x16c, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x17c}], 0x1}, 0x0) 00:26:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x3, 0x4e22, @multicast2}, 0x10) [ 846.805462][T30885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 846.844941][T30885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 846.916405][T10966] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 847.286473][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.297443][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.307325][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 847.320383][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 847.329604][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.339928][T10966] usb 2-1: config 0 descriptor?? 00:26:16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:16 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x2}) 00:26:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x4, 0x4e22, @multicast2}, 0x10) 00:26:16 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x17c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x16c, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x17c}], 0x1}, 0x0) 00:26:16 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}, 0x0) 00:26:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x2, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 849.466646][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 849.472724][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 849.497411][T30916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:16 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x3}) [ 849.551589][T10966] usb 2-1: USB disconnect, device number 52 00:26:16 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x17c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x16c, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic, @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x17c}], 0x1}, 0x0) 00:26:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x5, 0x4e22, @multicast2}, 0x10) 00:26:16 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}, 0x0) [ 849.643078][T30929] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x3, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:16 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x4}) [ 849.880372][T30953] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 849.927470][T30953] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 849.976236][T10966] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 850.376592][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.387850][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.397721][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.410681][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 850.419844][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.430210][T10966] usb 2-1: config 0 descriptor?? 00:26:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:19 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x17c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x16c, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic, @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x17c}], 0x1}, 0x0) 00:26:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x6, 0x4e22, @multicast2}, 0x10) 00:26:19 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:26:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x5}) 00:26:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x4, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 852.575797][T30981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 852.587594][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 852.593621][T10966] usbhid: probe of 2-1:0.0 failed with error -71 00:26:19 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x17c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x16c, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic, @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x17c}], 0x1}, 0x0) [ 852.651398][T10966] usb 2-1: USB disconnect, device number 53 [ 852.656939][T30997] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x6}) 00:26:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x8, 0x4e22, @multicast2}, 0x10) 00:26:19 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x2}}}}}}}, 0x0) 00:26:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x9, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x7}) [ 852.914226][T31019] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 853.015499][T31019] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 853.176127][T10966] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 853.556074][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.571707][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.581628][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 853.594534][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 853.603779][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.614155][T10966] usb 2-1: config 0 descriptor?? 00:26:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0xa, 0x4e22, @multicast2}, 0x10) 00:26:22 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1c8, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1b7, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b898574555", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x1c8}], 0x1}, 0x0) 00:26:22 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x3}}}}}}}, 0x0) 00:26:22 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:22 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x8}) 00:26:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x83, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 855.677209][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 855.683275][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 855.714705][T31066] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 855.754465][T10966] usb 2-1: USB disconnect, device number 54 00:26:23 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x9}) 00:26:23 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x4}}}}}}}, 0x0) 00:26:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x18, 0x4e22, @multicast2}, 0x10) 00:26:23 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1c8, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1b7, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b898574555", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x1c8}], 0x1}, 0x0) [ 855.863180][T31078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x64, 0x4e22, @multicast2}, 0x10) 00:26:23 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xa}) 00:26:23 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x7}}}}}}}, 0x0) 00:26:23 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1c8, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1b7, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b898574555", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x1c8}], 0x1}, 0x0) [ 856.093003][T31101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 856.157615][T10966] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 856.201737][T31116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 856.515990][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.527210][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.537206][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 856.550133][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 856.559460][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.576931][T10966] usb 2-1: config 0 descriptor?? 00:26:25 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xa, @multicast2}, 0x10) 00:26:25 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x8}}}}}}}, 0x0) 00:26:25 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1ec, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1dc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x1ec}], 0x1}, 0x0) 00:26:25 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xb}) 00:26:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x2, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 858.735857][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 858.742051][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 858.783770][T31144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x64, @multicast2}, 0x10) 00:26:26 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xc}) [ 858.824357][T10966] usb 2-1: USB disconnect, device number 55 [ 858.866410][T31144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:26 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1ec, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1dc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x1ec}], 0x1}, 0x0) 00:26:26 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x11}}}}}}}, 0x0) 00:26:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x3, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:26 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x1ec, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1dc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x1ec}], 0x1}, 0x0) [ 859.071463][T31174] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 859.245853][T10966] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 859.606294][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.617304][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.627155][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 859.640082][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 859.649267][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.659531][T10966] usb 2-1: config 0 descriptor?? 00:26:28 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000003}, 0x10) 00:26:28 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xd}) 00:26:28 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x60}}}}}}}, 0x0) 00:26:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x4, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:28 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x200, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1ef, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd4990", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x200}], 0x1}, 0x0) [ 861.777286][T31207] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 861.785693][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 861.792689][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 861.860117][T10966] usb 2-1: USB disconnect, device number 56 00:26:29 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x200, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1ef, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd4990", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x200}], 0x1}, 0x0) 00:26:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000004}, 0x10) 00:26:29 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x300}}}}}}}, 0x0) [ 861.910217][T31220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:29 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xe}) 00:26:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x9, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:29 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x200, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1ef, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd4990", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x200}], 0x1}, 0x0) [ 862.105351][T31245] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 862.202066][T31257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 862.290005][T10966] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 862.655752][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.666771][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.676820][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 862.689933][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 862.699405][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.709730][T10966] usb 2-1: config 0 descriptor?? 00:26:31 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x700}}}}}}}, 0x0) 00:26:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000005}, 0x10) 00:26:31 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:31 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xf}) 00:26:31 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x208, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f8, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc3", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x208}], 0x1}, 0x0) 00:26:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x83, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 864.835797][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 864.841892][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 864.875483][T31290] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 864.918827][T10966] usb 2-1: USB disconnect, device number 57 00:26:32 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x208, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f8, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc3", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x208}], 0x1}, 0x0) 00:26:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000006}, 0x10) 00:26:32 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0xe80}}}}}}}, 0x0) 00:26:32 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x10}) [ 865.031422][T31307] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x300, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:32 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x208, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f8, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc3", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x208}], 0x1}, 0x0) 00:26:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000008}, 0x10) 00:26:32 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x1100}}}}}}}, 0x0) [ 865.212271][T31327] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 865.334672][T31338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 865.396056][T10966] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 865.755662][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.766716][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.776584][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 865.789545][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 865.798804][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.809088][T10966] usb 2-1: config 0 descriptor?? 00:26:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x11}) 00:26:35 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1fd, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) 00:26:35 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x6000}}}}}}}, 0x0) 00:26:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe000000a}, 0x10) 00:26:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x900, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 867.965403][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 867.971485][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 868.014874][T31366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 868.045768][T10966] usb 2-1: USB disconnect, device number 58 00:26:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000018}, 0x10) 00:26:35 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1fd, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) 00:26:35 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x800e}}}}}}}, 0x0) 00:26:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x12}) [ 868.199105][T31382] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:35 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0xe1fd}}}}}}}, 0x0) 00:26:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0xec0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 868.435230][T31416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 868.465295][T10966] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 868.494190][T31416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 868.825432][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.836945][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.846814][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 868.859736][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 868.868859][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.879266][T10966] usb 2-1: config 0 descriptor?? [ 869.838556][ T1197] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.857347][ T135] kworker/dying (135) used greatest stack depth: 19184 bytes left 00:26:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:38 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1fd, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) 00:26:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x18}) 00:26:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000064}, 0x10) 00:26:38 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0xfde1}}}}}}}, 0x0) 00:26:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x8100, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 871.058965][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 871.065271][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 871.105163][T31446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:38 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x1000000}}}}}}}, 0x0) [ 871.163971][T10966] usb 2-1: USB disconnect, device number 59 00:26:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x2) 00:26:38 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1ff, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) [ 871.262519][T31458] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x25}) 00:26:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x8300, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x29) [ 871.528121][T31484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 871.572411][T31484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 871.585309][T10966] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 871.945250][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.956312][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.966175][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 871.979084][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 871.988372][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.999429][T10966] usb 2-1: config 0 descriptor?? 00:26:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:41 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x2000000}}}}}}}, 0x0) 00:26:41 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x5c}) 00:26:41 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1ff, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) 00:26:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x200000d0) 00:26:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0xc00e, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 874.165243][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 874.171301][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 874.173824][T31514] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 874.217466][T10966] usb 2-1: USB disconnect, device number 60 00:26:41 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1ff, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) 00:26:41 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x3000000}}}}}}}, 0x0) 00:26:41 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xbf}) 00:26:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) [ 874.332110][T31529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:41 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x200, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bb", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) 00:26:41 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x300}) [ 874.625216][T10966] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 874.985541][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.996592][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.006441][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 875.019352][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 875.028610][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.038843][T10966] usb 2-1: config 0 descriptor?? 00:26:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x6, 0x4) 00:26:44 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x4000000}}}}}}}, 0x0) 00:26:44 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x500}) 00:26:44 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x200, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bb", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) [ 877.255874][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 877.261949][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 877.286997][T31580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:44 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x7000000}}}}}}}, 0x0) [ 877.321626][T10966] usb 2-1: USB disconnect, device number 61 00:26:44 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x600}) 00:26:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) 00:26:44 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x8000000}}}}}}}, 0x0) [ 877.410561][T31597] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:44 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x210, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x200, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bb", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x210}], 0x1}, 0x0) 00:26:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 877.673311][T31632] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 877.729405][T31632] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 877.776166][T10966] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 878.145238][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.156344][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.166334][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.179265][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 878.188449][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.199235][T10966] usb 2-1: config 0 descriptor?? 00:26:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x700}) 00:26:47 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x11000000}}}}}}}, 0x0) 00:26:47 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x20c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f9, 0x0, 0x0, 0x1, [@generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x20c}], 0x1}, 0x0) 00:26:47 executing program 4: prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) 00:26:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 880.316486][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 880.322511][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 880.353790][T31663] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 880.394514][T10966] usb 2-1: USB disconnect, device number 62 00:26:47 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x20c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f9, 0x0, 0x0, 0x1, [@generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x20c}], 0x1}, 0x0) 00:26:47 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x40000000}}}}}}}, 0x0) 00:26:47 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x900}) 00:26:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 880.483625][T31663] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:47 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ata_eh_link_autopsy_qc\x00'}, 0x10) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = dup(r0) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = dup(r2) ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r5 = dup(r4) ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) 00:26:47 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x60000000}}}}}}}, 0x0) [ 880.623691][T31697] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 880.688306][T31697] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 880.795671][T10966] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 881.165026][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.175985][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.185840][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 881.198849][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 881.208191][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.218504][T10966] usb 2-1: config 0 descriptor?? 00:26:50 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:50 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xa00}) 00:26:50 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x20c, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x1f9, 0x0, 0x0, 0x1, [@generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x20c}], 0x1}, 0x0) 00:26:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:50 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x800e0000}}}}}}}, 0x0) 00:26:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r0, &(0x7f0000000000)=0x1, r0, &(0x7f0000000040)=0xffffffffffff9eab, 0xff10b0b, 0x2) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) [ 883.425548][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 883.431569][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 883.457987][T31732] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 883.479484][T10966] usb 2-1: USB disconnect, device number 63 00:26:50 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xb00}) 00:26:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:50 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0xe1fd0000}}}}}}}, 0x0) 00:26:50 executing program 4: ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x7, 0x6ec, 0x81}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="94000000020601080000000000000000020100090900020073797a30000000000d0002e673797a310000000080060061ee04404e230002001f4deeb1187f9deb170000001800018014000240fe8800000000000000000000000001010500070089000000050005000700000005000502000000000900020073797a310000"], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x4080) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) [ 883.591831][T31744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x83}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 883.687227][T31763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:26:50 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xc00}) [ 883.804416][T31785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 883.974798][T10966] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 884.334788][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.345927][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.355764][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 884.368801][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 884.378110][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.388824][T10966] usb 2-1: config 0 descriptor?? 00:26:53 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:53 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0xffffff7f}}}}}}}, 0x0) 00:26:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 00:26:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x900, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x300}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xd00}) [ 886.527962][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 886.533986][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 886.573001][T31818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 886.595203][T10966] usb 2-1: USB disconnect, device number 64 00:26:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4(r1, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r3, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) [ 886.643022][T31831] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:53 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:26:53 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) (fail_nth: 1) 00:26:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xe00}) [ 886.757865][T31850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:54 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x2}}}}}}}}}, 0x0) [ 886.831391][T31862] FAULT_INJECTION: forcing a failure. [ 886.831391][T31862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.844918][T31862] CPU: 0 PID: 31862 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 886.853361][T31862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.863438][T31862] Call Trace: [ 886.866731][T31862] [ 886.869680][T31862] dump_stack_lvl+0x201/0x2d8 [ 886.874385][T31862] ? show_regs_print_info+0x12/0x12 00:26:54 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xf00}) [ 886.879609][T31862] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 886.885361][T31862] ? __might_fault+0xb6/0x110 [ 886.890082][T31862] should_fail+0x384/0x4b0 [ 886.894544][T31862] _copy_from_user+0x2d/0x170 [ 886.899257][T31862] sendmsg_copy_msghdr+0xbb/0x650 [ 886.904318][T31862] ? __copy_msghdr_from_user+0x620/0x620 [ 886.910084][T31862] __sys_sendmsg+0x250/0x370 [ 886.914752][T31862] ? ____sys_sendmsg+0x910/0x910 [ 886.919733][T31862] ? __context_tracking_exit+0x7a/0xd0 [ 886.925234][T31862] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 886.931242][T31862] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 886.937255][T31862] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 886.943261][T31862] ? lockdep_hardirqs_on+0x95/0x140 [ 886.948483][T31862] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 886.954596][T31862] do_syscall_64+0x44/0xd0 [ 886.959047][T31862] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 886.964973][T31862] RIP: 0033:0x7f1bf16ffae9 [ 886.969406][T31862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.989030][T31862] RSP: 002b:00007f1beec75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.997474][T31862] RAX: ffffffffffffffda RBX: 00007f1bf1812f60 RCX: 00007f1bf16ffae9 [ 887.005472][T31862] RDX: 0000000000000000 RSI: 000000002000b580 RDI: 0000000000000004 [ 887.013466][T31862] RBP: 00007f1beec751d0 R08: 0000000000000000 R09: 0000000000000000 [ 887.021457][T31862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.029448][T31862] R13: 00007fff0f7ea94f R14: 00007f1beec75300 R15: 0000000000022000 [ 887.037457][T31862] [ 887.304566][T10966] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 887.664842][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.675835][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.685651][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 887.698633][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 887.707811][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.718218][T10966] usb 2-1: config 0 descriptor?? 00:26:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:56 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x3}}}}}}}}}, 0x0) 00:26:56 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x1100}) 00:26:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x900}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:56 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) (fail_nth: 2) 00:26:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x5e, @private=0xa010102, 0x4e21, 0x4, 'lblcr\x00', 0x0, 0x5, 0x1e}, {@empty, 0x4e24, 0x2000, 0x1f, 0x0, 0x5}}, 0x44) [ 889.597058][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 889.603438][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 889.662695][T31885] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20001 [ 889.680247][T10966] usb 2-1: USB disconnect, device number 65 [ 889.683288][T31887] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 889.721037][T31888] FAULT_INJECTION: forcing a failure. [ 889.721037][T31888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.734378][T31888] CPU: 0 PID: 31888 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 889.742812][T31888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.752865][T31888] Call Trace: [ 889.756141][T31888] [ 889.759066][T31888] dump_stack_lvl+0x201/0x2d8 [ 889.763751][T31888] ? show_regs_print_info+0x12/0x12 [ 889.768956][T31888] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 889.774679][T31888] ? __might_fault+0xb6/0x110 [ 889.779348][T31888] ? __lock_acquire+0x2b00/0x2b00 [ 889.784369][T31888] should_fail+0x384/0x4b0 [ 889.788783][T31888] _copy_from_user+0x2d/0x170 [ 889.793455][T31888] iovec_from_user+0x13f/0x390 [ 889.798231][T31888] __import_iovec+0xc6/0x530 [ 889.802823][T31888] ? iovec_from_user+0x390/0x390 [ 889.807767][T31888] import_iovec+0xe6/0x120 [ 889.812186][T31888] sendmsg_copy_msghdr+0x4e0/0x650 [ 889.817294][T31888] ? __copy_msghdr_from_user+0x620/0x620 [ 889.822931][T31888] __sys_sendmsg+0x250/0x370 [ 889.827530][T31888] ? ____sys_sendmsg+0x910/0x910 [ 889.832516][T31888] ? __context_tracking_exit+0x7a/0xd0 [ 889.837998][T31888] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 889.843974][T31888] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 889.849961][T31888] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 889.855937][T31888] ? lockdep_hardirqs_on+0x95/0x140 [ 889.861135][T31888] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 889.867111][T31888] do_syscall_64+0x44/0xd0 [ 889.871537][T31888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 889.877427][T31888] RIP: 0033:0x7f1bf16ffae9 [ 889.881846][T31888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 889.901440][T31888] RSP: 002b:00007f1beec75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 889.909863][T31888] RAX: ffffffffffffffda RBX: 00007f1bf1812f60 RCX: 00007f1bf16ffae9 [ 889.917824][T31888] RDX: 0000000000000000 RSI: 000000002000b580 RDI: 0000000000000004 [ 889.925787][T31888] RBP: 00007f1beec751d0 R08: 0000000000000000 R09: 0000000000000000 [ 889.933748][T31888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.941721][T31888] R13: 00007fff0f7ea94f R14: 00007f1beec75300 R15: 0000000000022000 [ 889.949717][T31888] 00:26:57 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x1200}) 00:26:57 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x4}}}}}}}}}, 0x0) [ 889.995027][T31909] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20001 [ 890.059289][T31903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0xfffd, 0xff01}, @window={0x3, 0x2, 0x101}, @mss={0x2, 0x7ff}], 0x3) 00:26:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xec0}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:26:57 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x1800}) 00:26:57 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x7}}}}}}}}}, 0x0) [ 890.307966][T31924] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 890.374377][T10966] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 890.385984][T31936] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 890.734555][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.745672][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.755522][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 890.768477][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 890.777617][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.787760][T10966] usb 2-1: config 0 descriptor?? 00:26:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:26:59 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) (fail_nth: 3) 00:26:59 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r2, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000010) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) 00:26:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x2500}) 00:26:59 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x8}}}}}}}}}, 0x0) 00:26:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8100}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 892.644639][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 892.650756][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 892.689643][T10966] usb 2-1: USB disconnect, device number 66 [ 892.703726][T31960] FAULT_INJECTION: forcing a failure. [ 892.703726][T31960] name failslab, interval 1, probability 0, space 0, times 0 [ 892.703777][T31962] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 892.716804][T31960] CPU: 1 PID: 31960 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 00:26:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x5c00}) [ 892.734308][T31960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 892.744374][T31960] Call Trace: [ 892.747664][T31960] [ 892.750606][T31960] dump_stack_lvl+0x201/0x2d8 [ 892.755302][T31960] ? show_regs_print_info+0x12/0x12 [ 892.760518][T31960] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 892.766274][T31960] should_fail+0x384/0x4b0 [ 892.770720][T31960] ? __alloc_skb+0xd8/0x5a0 [ 892.775233][T31960] should_failslab+0x5/0x20 [ 892.779749][T31960] kmem_cache_alloc_node+0x75/0x370 [ 892.784968][T31960] __alloc_skb+0xd8/0x5a0 [ 892.789305][T31960] ? netlink_autobind+0x26c/0x2a0 [ 892.794349][T31960] netlink_sendmsg+0x75e/0xe40 [ 892.799127][T31960] ? memcpy+0x3c/0x60 [ 892.803138][T31960] ? netlink_getsockopt+0xa60/0xa60 [ 892.808353][T31960] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 892.813649][T31960] ? security_socket_sendmsg+0x9d/0xb0 [ 892.819130][T31960] ? netlink_getsockopt+0xa60/0xa60 [ 892.824343][T31960] ____sys_sendmsg+0x5b9/0x910 [ 892.829129][T31960] ? __sys_sendmsg_sock+0x30/0x30 [ 892.834184][T31960] __sys_sendmsg+0x280/0x370 00:27:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xbf00}) [ 892.838792][T31960] ? ____sys_sendmsg+0x910/0x910 [ 892.843763][T31960] ? __context_tracking_exit+0x7a/0xd0 [ 892.849252][T31960] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 892.855250][T31960] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 892.861257][T31960] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 892.867257][T31960] ? lockdep_hardirqs_on+0x95/0x140 [ 892.872471][T31960] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 892.878468][T31960] do_syscall_64+0x44/0xd0 [ 892.882901][T31960] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:27:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xff00}) [ 892.888805][T31960] RIP: 0033:0x7f1bf16ffae9 [ 892.893233][T31960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 892.912991][T31960] RSP: 002b:00007f1beec75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.921430][T31960] RAX: ffffffffffffffda RBX: 00007f1bf1812f60 RCX: 00007f1bf16ffae9 [ 892.929504][T31960] RDX: 0000000000000000 RSI: 000000002000b580 RDI: 0000000000000004 00:27:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x1000000}) [ 892.937503][T31960] RBP: 00007f1beec751d0 R08: 0000000000000000 R09: 0000000000000000 [ 892.945522][T31960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.953510][T31960] R13: 00007fff0f7ea94f R14: 00007f1beec75300 R15: 0000000000022000 [ 892.961524][T31960] 00:27:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8300}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:27:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendto$inet(r0, &(0x7f0000000240)="569a5ee9d61af95bb3db430aa53016f8266d63b941a697c1ce8d348b3e5754a9951fdd2c480a93edee86b269e318d4fdea4f5fe8b93f3a8dbc678101260ec327033c6d6f9ba6ab0c526a2aff3a624be47dc3ce794158985856b53e968cbcbe2349b725eb673fbb12a3e1ddec7c8b71c2313820789550b5878f86dcfd217f09c5e52b7fc0eed309c5b247a39b1d79319340344582983eb16f5c6e18a40061379ef8b371e66d86c3e544e80fa85ecd9d332681e4a9db569be3840abb41b22c1d23287586", 0xc3, 0x4001, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x208001, 0xff3c8976175a8ee1) sendto$inet(r2, &(0x7f0000000340)="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", 0x1000, 0x800, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'batadv_slave_0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0400f5ff0200000015000000d6855a49400f93e2bf46c8a11639847c594d804d7d2a482f4364c30b81c543a2cfef48bfbc5cff57b12d1eb4074cb286b46c5afb3fc5ac1162fb671d19e75eab3e0ea4188f606720ad8f967f7e78b4fd8e811d14"]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4(r3, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r5, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {0x5}, @broadcast, @device_a, @from_mac=@broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) sendto$inet(r4, &(0x7f0000000180)="4f5d2a0a355e8c48fce77862d06582082c6ceebdd82dbdac8662c443cdb96c1a02dc49fe5940433b51bc8ec5001b243f1d81a57d041ddd90c77845924a815143240d3c44e267af5a7421a78da3d41430ce261ef3cb57d8248a5a2c1e1d844b", 0x5f, 0x48090, &(0x7f0000001340)={0x2, 0x4e22, @private=0xa010102}, 0x10) [ 893.117367][T31996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 893.207065][T31998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 893.454179][T10966] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 893.854340][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.865494][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.875366][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 893.888315][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 893.897529][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.913470][T10966] usb 2-1: config 0 descriptor?? 00:27:02 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:27:02 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x2}}}}}}}}}, 0x0) 00:27:02 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x2000000}) 00:27:02 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) (fail_nth: 4) 00:27:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc00e}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:27:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) splice(r0, &(0x7f0000000000)=0x3487, r1, &(0x7f0000000240)=0x5, 0x400, 0xa) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x10010, 0xffffffffffffffff, 0x10000000) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000100)="4916242e361e594ca3729e8207035654f9928c2dbe2b6ae2e550c9ea50cb176efa2e36111010406dd1dec5f833a33693368f4d0b12d34b36b64e2f97e68025551230d58949f1396b83cb12aa6f4fda2dcd857055f7dec07cf80cd4b1332d3391fc11a7f428115ae161c36d34613c2911e825cb2037487c9e2c0a9ae13b356a5a1f8902702f2fb3d42835d0feaa93eaca897d26353f7a15826b097ae0580aad170ca3e1bb6f4d3208ffebfc598e773b06acacb835097de48ec1b37ae242dc52403c6dfe0aeff8e0808e0ccf6adfc027ed7d53853d6690", 0xd6, 0x2000c802, 0x1, {0x0, r4}}, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010100}, 0x10) [ 895.754428][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 895.760545][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 895.762025][T32032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.815332][T32033] FAULT_INJECTION: forcing a failure. [ 895.815332][T32033] name failslab, interval 1, probability 0, space 0, times 0 [ 895.828310][T32033] CPU: 0 PID: 32033 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 895.836761][T32033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 895.846922][T32033] Call Trace: [ 895.850215][T32033] [ 895.853165][T32033] dump_stack_lvl+0x201/0x2d8 [ 895.857869][T32033] ? show_regs_print_info+0x12/0x12 00:27:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) [ 895.863096][T32033] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 895.868845][T32033] ? __might_sleep+0xe0/0xe0 [ 895.873463][T32033] ? rcu_read_lock_sched_held+0x89/0x130 [ 895.879130][T32033] should_fail+0x384/0x4b0 [ 895.883575][T32033] ? netlink_sendmsg+0x75e/0xe40 [ 895.888532][T32033] should_failslab+0x5/0x20 [ 895.893059][T32033] __kmalloc_node_track_caller+0x95/0x400 [ 895.898798][T32033] ? kmem_cache_alloc_node+0x25e/0x370 [ 895.904271][T32033] ? __alloc_skb+0xd8/0x5a0 [ 895.908778][T32033] ? netlink_sendmsg+0x75e/0xe40 [ 895.913710][T32033] __alloc_skb+0x127/0x5a0 [ 895.918124][T32033] ? netlink_autobind+0x26c/0x2a0 [ 895.923148][T32033] netlink_sendmsg+0x75e/0xe40 [ 895.927906][T32033] ? memcpy+0x3c/0x60 [ 895.931894][T32033] ? netlink_getsockopt+0xa60/0xa60 [ 895.937097][T32033] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 895.942381][T32033] ? security_socket_sendmsg+0x9d/0xb0 [ 895.947832][T32033] ? netlink_getsockopt+0xa60/0xa60 [ 895.953025][T32033] ____sys_sendmsg+0x5b9/0x910 [ 895.957790][T32033] ? __sys_sendmsg_sock+0x30/0x30 [ 895.962833][T32033] __sys_sendmsg+0x280/0x370 [ 895.967414][T32033] ? ____sys_sendmsg+0x910/0x910 [ 895.972353][T32033] ? __context_tracking_exit+0x7a/0xd0 [ 895.977815][T32033] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 895.983786][T32033] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 895.989768][T32033] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 895.995736][T32033] ? lockdep_hardirqs_on+0x95/0x140 [ 896.000925][T32033] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 896.006896][T32033] do_syscall_64+0x44/0xd0 [ 896.011304][T32033] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 896.017192][T32033] RIP: 0033:0x7f1bf16ffae9 [ 896.021600][T32033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.041197][T32033] RSP: 002b:00007f1beec75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 896.049603][T32033] RAX: ffffffffffffffda RBX: 00007f1bf1812f60 RCX: 00007f1bf16ffae9 [ 896.057578][T32033] RDX: 0000000000000000 RSI: 000000002000b580 RDI: 0000000000000004 00:27:03 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) 00:27:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x81) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x1000, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) [ 896.065552][T32033] RBP: 00007f1beec751d0 R08: 0000000000000000 R09: 0000000000000000 [ 896.073517][T32033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.081483][T32033] R13: 00007fff0f7ea94f R14: 00007f1beec75300 R15: 0000000000022000 [ 896.089459][T32033] [ 896.100403][T32032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 896.121908][T10966] usb 2-1: USB disconnect, device number 67 00:27:03 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x3000000}) 00:27:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:27:03 executing program 4: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x1200, {0x20, 0x2, 0x3}, 0x100, r0, 0xffffffffffffffff, 0x4, 0x2, 0xfffffffffffff000, 0xfffffffffffffffb, 0x0, 0x6, 0x2, 0x8, 0x5, 0x4, 0x6, 0x100000000, 0xd, 0x101, 0x2}}, 0xa0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) [ 896.362149][T32071] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 896.422546][T32071] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 896.564152][T10966] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 896.934265][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.945207][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.955048][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 896.967959][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 896.977416][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.996013][T10966] usb 2-1: config 0 descriptor?? 00:27:05 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:27:05 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x2}}}}}}}}}, 0x0) 00:27:05 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x4000000}) 00:27:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) (fail_nth: 5) 00:27:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:27:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000100)={0xe52, 0x1c00000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) [ 898.815294][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 898.817143][T32099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 898.821317][T10966] usbhid: probe of 2-1:0.0 failed with error -71 [ 898.874426][T32105] FAULT_INJECTION: forcing a failure. [ 898.874426][T32105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.887676][T32105] CPU: 0 PID: 32105 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 898.896114][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.906180][T32105] Call Trace: [ 898.909476][T32105] [ 898.912426][T32105] dump_stack_lvl+0x201/0x2d8 [ 898.917131][T32105] ? show_regs_print_info+0x12/0x12 00:27:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x5000000}) [ 898.922354][T32105] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 898.928098][T32105] ? __might_fault+0xb6/0x110 [ 898.932790][T32105] ? __lock_acquire+0x2b00/0x2b00 [ 898.937836][T32105] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 898.943838][T32105] should_fail+0x384/0x4b0 [ 898.948290][T32105] _copy_from_iter+0x25b/0x1080 [ 898.953187][T32105] ? _copy_mc_to_iter+0x1540/0x1540 [ 898.958404][T32105] ? trace_kmalloc_node+0x2e/0xe0 [ 898.963447][T32105] ? __kmalloc_node_track_caller+0x27e/0x400 [ 898.969441][T32105] ? kmem_cache_alloc_node+0x25e/0x370 [ 898.974913][T32105] ? netlink_sendmsg+0x75e/0xe40 [ 898.979885][T32105] ? __virt_addr_valid+0x21b/0x2d0 [ 898.985022][T32105] ? __phys_addr_symbol+0x2b/0x70 [ 898.990116][T32105] ? __check_object_size+0x2f3/0x3f0 [ 898.995425][T32105] netlink_sendmsg+0x85a/0xe40 [ 899.000209][T32105] ? memcpy+0x3c/0x60 [ 899.004221][T32105] ? netlink_getsockopt+0xa60/0xa60 [ 899.009443][T32105] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 899.014743][T32105] ? security_socket_sendmsg+0x9d/0xb0 [ 899.020219][T32105] ? netlink_getsockopt+0xa60/0xa60 00:27:06 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x3}}}}}}}}}, 0x0) [ 899.025437][T32105] ____sys_sendmsg+0x5b9/0x910 [ 899.030235][T32105] ? __sys_sendmsg_sock+0x30/0x30 [ 899.035316][T32105] __sys_sendmsg+0x280/0x370 [ 899.040059][T32105] ? ____sys_sendmsg+0x910/0x910 [ 899.045035][T32105] ? __context_tracking_exit+0x7a/0xd0 [ 899.050536][T32105] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 899.056630][T32105] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 899.062643][T32105] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 899.068674][T32105] ? lockdep_hardirqs_on+0x95/0x140 [ 899.073897][T32105] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 899.079902][T32105] do_syscall_64+0x44/0xd0 [ 899.084344][T32105] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 899.090260][T32105] RIP: 0033:0x7f1bf16ffae9 [ 899.094700][T32105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 899.114321][T32105] RSP: 002b:00007f1beec75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.122762][T32105] RAX: ffffffffffffffda RBX: 00007f1bf1812f60 RCX: 00007f1bf16ffae9 [ 899.130753][T32105] RDX: 0000000000000000 RSI: 000000002000b580 RDI: 0000000000000004 [ 899.138738][T32105] RBP: 00007f1beec751d0 R08: 0000000000000000 R09: 0000000000000000 [ 899.146725][T32105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.154712][T32105] R13: 00007fff0f7ea94f R14: 00007f1beec75300 R15: 0000000000022000 [ 899.162723][T32105] [ 899.181744][T32099] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 899.279134][T10966] usb 2-1: USB disconnect, device number 68 00:27:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x6000000}) 00:27:06 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}}, 0x0) 00:27:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x5a, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r3, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8100}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f00000001c0)={0xfffffff8, 0x5, 0xed, 0x1, 0xfffff800}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6c, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0xfe57) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={r7, 0xd365, 0x8, 0x1}, 0x10) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) 00:27:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x0, 0x4}}}, 0x24}}, 0x0) [ 899.480055][T32153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 899.568984][T32164] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 899.714006][T10966] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 900.104023][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.115020][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.124888][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 900.137783][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 900.147129][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.157199][T10966] usb 2-1: config 0 descriptor?? 00:27:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:27:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) (fail_nth: 6) 00:27:09 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x7000000}) 00:27:09 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}}}}}}}, 0x0) 00:27:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:27:09 executing program 4: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x20, 0x9, 0x4, 0x2, 0x6, {0x0, 0x2710}, {0x2, 0x8, 0x3f, 0x5, 0x0, 0x2, "329b2ba7"}, 0x8, 0x4, @offset=0x4, 0xff, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000100)={{0x0, 0x7, 0x2, 0x2, 0x4, 0x0, 0x1000, 0x1, 0xffff, 0x5, 0x7, 0x5, 0x1, 0x80000000, 0x1}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x18101, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1d, &(0x7f00000001c0)=0x9, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) [ 901.893941][T10966] usbhid 2-1:0.0: can't add hid device: -71 [ 901.899971][T10966] usbhid: probe of 2-1:0.0 failed with error -71 00:27:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0xfffffffffffffeb1) [ 901.942307][T32198] FAULT_INJECTION: forcing a failure. [ 901.942307][T32198] name failslab, interval 1, probability 0, space 0, times 0 [ 901.955300][T32198] CPU: 0 PID: 32198 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 901.963744][T32198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.973821][T32198] Call Trace: [ 901.977148][T32198] [ 901.980104][T32198] dump_stack_lvl+0x201/0x2d8 [ 901.984810][T32198] ? show_regs_print_info+0x12/0x12 00:27:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4(r2, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r4, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@wo_ht={{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x24000050) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@mss={0x2, 0x1f}, @sack_perm, @timestamp], 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x1, 0xdfc5}, @mss={0x2, 0x2}], 0x2) r8 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) [ 901.990032][T32198] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 901.995784][T32198] ? __mutex_lock_common+0x1914/0x2590 [ 902.001283][T32198] should_fail+0x384/0x4b0 [ 902.005724][T32198] ? genl_start+0x140/0x480 [ 902.010246][T32198] should_failslab+0x5/0x20 [ 902.014766][T32198] kmem_cache_alloc_trace+0x71/0x330 [ 902.020086][T32198] genl_start+0x140/0x480 [ 902.024445][T32198] __netlink_dump_start+0x3d4/0x710 [ 902.029671][T32198] genl_rcv_msg+0xbe6/0x1480 [ 902.034290][T32198] ? genl_bind+0x360/0x360 [ 902.038734][T32198] ? genl_rcv_msg+0x1480/0x1480 [ 902.043598][T32198] ? genl_start+0x480/0x480 [ 902.048112][T32198] ? genl_lock_dumpit+0x90/0x90 [ 902.053007][T32198] ? trace_lock_acquire+0x190/0x190 [ 902.055973][T32205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 902.058228][T32198] ? rcu_read_lock_sched_held+0x89/0x130 [ 902.058281][T32198] ? nfc_genl_exit+0x20/0x20 [ 902.077849][T32198] ? nfc_genl_get_device+0x3b0/0x3b0 [ 902.083157][T32198] ? nfc_genl_dump_devices+0x730/0x730 00:27:09 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x8000000}) [ 902.088659][T32198] netlink_rcv_skb+0x200/0x470 [ 902.093539][T32198] ? genl_bind+0x360/0x360 [ 902.098003][T32198] ? netlink_ack+0xb70/0xb70 [ 902.102618][T32198] ? __down_read_common+0x1b0/0x450 [ 902.107846][T32198] ? up_read_non_owner+0x1c0/0x1c0 [ 902.112987][T32198] ? netlink_deliver_tap+0x130/0x880 [ 902.118311][T32198] genl_rcv+0x24/0x40 [ 902.122326][T32198] netlink_unicast+0x814/0x9f0 [ 902.127569][T32198] ? netlink_detachskb+0xa0/0xa0 [ 902.132531][T32198] ? __virt_addr_valid+0x21b/0x2d0 [ 902.137682][T32198] ? __phys_addr_symbol+0x2b/0x70 [ 902.142733][T32198] ? __check_object_size+0x2f3/0x3f0 [ 902.148041][T32198] ? bpf_lsm_netlink_send+0x5/0x10 [ 902.153185][T32198] netlink_sendmsg+0xa20/0xe40 [ 902.157979][T32198] ? memcpy+0x3c/0x60 [ 902.162033][T32198] ? netlink_getsockopt+0xa60/0xa60 [ 902.167484][T32198] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 902.172804][T32198] ? security_socket_sendmsg+0x9d/0xb0 [ 902.178294][T32198] ? netlink_getsockopt+0xa60/0xa60 [ 902.183631][T32198] ____sys_sendmsg+0x5b9/0x910 [ 902.188432][T32198] ? __sys_sendmsg_sock+0x30/0x30 00:27:09 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0x9000000}) [ 902.193612][T32198] __sys_sendmsg+0x280/0x370 [ 902.198238][T32198] ? ____sys_sendmsg+0x910/0x910 [ 902.203274][T32198] ? __context_tracking_exit+0x7a/0xd0 [ 902.208820][T32198] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 902.214828][T32198] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 902.220968][T32198] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 902.226983][T32198] ? lockdep_hardirqs_on+0x95/0x140 [ 902.232210][T32198] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 902.238224][T32198] do_syscall_64+0x44/0xd0 00:27:09 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x8}}}}}}}}}, 0x0) [ 902.242672][T32198] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 902.248592][T32198] RIP: 0033:0x7f1bf16ffae9 [ 902.253029][T32198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.272680][T32198] RSP: 002b:00007f1beec75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.281116][T32198] RAX: ffffffffffffffda RBX: 00007f1bf1812f60 RCX: 00007f1bf16ffae9 [ 902.289117][T32198] RDX: 0000000000000000 RSI: 000000002000b580 RDI: 0000000000000004 [ 902.297115][T32198] RBP: 00007f1beec751d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.305114][T32198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.313109][T32198] R13: 00007fff0f7ea94f R14: 00007f1beec75300 R15: 0000000000022000 [ 902.321137][T32198] [ 902.344208][T10966] usb 2-1: USB disconnect, device number 69 [ 902.346866][T32216] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:27:09 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x11}}}}}}}}}, 0x0) [ 902.713915][T10966] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 903.073930][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.085210][T10966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.095044][T10966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.108174][T10966] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 903.117537][T10966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.128203][T10966] usb 2-1: config 0 descriptor?? [ 904.103926][T10966] uclogic 0003:5543:004D.0020: failed retrieving Huion firmware version: -71 [ 904.112785][T10966] uclogic 0003:5543:004D.0020: failed probing parameters: -71 [ 904.120692][T10966] uclogic: probe of 0003:5543:004D.0020 failed with error -71 [ 904.138879][T10966] usb 2-1: USB disconnect, device number 70 00:27:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x25}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="837d69"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001b80)={0xfffffd0f, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @string={0x0, 0x3, "221f7439ad3b3435720559d07f81a8d2673b89978543c3a40926fda6d52265501b412f78def579c496549f6c5996d6675554c134a674886b8a85552e9f7c03975247e6ab76f6cace7d5d8cbcecc691e2a2d4fa878e0c0d2e0d06a5ad9e5bed1fd87bd35c7d7b9c572f3644bc4ece4389938bc2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 00:27:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x0, 0x4}}}, 0x24}}, 0x0) 00:27:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xa000000}) 00:27:11 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f000000b580)={0x0, 0x0, &(0x7f000000b500)=[{&(0x7f0000005b00)={0x214, 0x1d, 0x32b, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="e24df4f4d414e4f2a16c1a570c46b2e0ad4da7441ba170a5d7a0413ba893293b9ce90e490a38a1a7e7edd192fc7f60cf6ed86d0764c604cf3e933d8ce5a79a75c189a2893f14b8985745559e964b292ea295db482126581003f9b300fa0b9d9214d45c9ad053045694aa4c301ce11e0b43ac9690b000617f438a29aa440ad2a7fd49903a8493cf0f4ae4ccc34a9642ad3a96b8bbec", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="2e9c18c4e8f3346210c3969696daad91c80354fca5fc2425839364a496e308e0f7ac60ed93f09d39587f19360e9992bbf0dca54fc741db5d28901defb2c6be94f9da7efbaa619ce055a842b06dc684511fc236acbb61064e673c5b5c823ea5f7fc0deeaef3f8c88a5d6e52177783383e45b5e185415d3e6d8179427fb360c6459f22c8f2e45e497f3f74", @generic="aeeda8b76b3fdaf314d123be541a2e49d8ee970b81f816dab5c94ecb4d2d8c78eaf1b232f4bb1108c7a10427ecb4f9dfb24e9f5844c390735f94e63301fae2265abd20b58637eb27939d06ad3e4a20f192e88ae1628bb17b5312f12bf1b1a3f1b5dafd36f5c280694b132b3b97476ad6b663a6f1df8f5dbdff96c539aa639b77672ef034f889481ab8337642b919306153060ae62a23f4c99ab3a68ee809a2440aa5c2208b99534a4aaff76a434ddbb7ef46960e66f834517d831636e745b7419046d493c17f40ca58fa4278d6dc"]}]}, 0x214}], 0x1}, 0x0) (fail_nth: 7) 00:27:11 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x60}}}}}}}}}, 0x0) 00:27:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) sendmsg$inet(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000000040)="ceeefae17a7d61e85dc991a8757f2fdab0bcdd53d59004f25f341c0ec31cdb4ae468aa77ae27dcf13c9b1961eb1023fe713c0fd7b5b938312d77b1d52f3faaaf19283967abb2525cc64bb8841b2a1980514ac4593b04a9bfd2c92e7f00b9d2", 0x5f}, {&(0x7f0000001100)="396b713f98c8f7be0b92acbf2a6b049e6dd92438049d182f3fd98d6b935fbf4b20abe203d011f3d561dea9b569ac933bb80d80984adb4ee97caa1a4eca9dc8ea3c508e5c082d155bae", 0x49}, {&(0x7f0000001180)="bf0d7f5ebf29d6b060e83f4a4e1230fa5f250fed89f8a4350966489b556f7f808597067668d1417c9e1006a7089eaff577e41e30b634a127917fd8a8230c97ec9646023fada5efb180095a96bb51b99b347c57007e3138868fbe9969331ebfcbf4a3ac1bde0a7b2c27282666f1f2afb6374f48fb3158090d4d38ca3bcf0829ec176e816bc2af6539c76547baa8c19d76521c3b14dbc9be09d8abf5dac0821d952a365dcaad40aafeec4b390e0f2128ddda71ef7b32552f99ea714289b164e3f4f90c", 0xc2}, {&(0x7f0000001280)="20dd526cc40812ef168fccd91c0c62eb234c017bd31963a369b6c48ae433e59d15fd1df2b3364c5d255a3a7a77ebc3c23d6052422c46c7b5a9e0e49a3d2f5bd6bffbccdaac09d0bf002246748530b603e79fb7d097cface6a6392a031b07e2c90a9f65f0a66ce1611ee7a509466fc60d246d9d8afd7cd71adcf0ca5f622f612f5b1d8f787e1d1b6abe9ab960391234cc4c48ad1c725e66a08086afee15a11f3cf32a1a6eaa45b5f54736cbc0a71b181eace973526cb2265c1a23181ec7acf8b76ff3288eb8c8", 0xc6}, {&(0x7f0000001380)="6fd511c4f04b46c29a996139d6e58f56161dccf322a6a7281b419ee2282140f7a7cef5f82457ac28be0be64915cbb685a158b78a2dccce08e6338b4aa65e987580bf3edd743d927548b943a95f2273db26b2cb4a591c39a0dd8432a84aca39d2a96173a30c6c4d48c7507ab8feefd0795073baccc1b01cfd", 0x78}], 0x6}, 0x50) 00:27:11 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) dup(r0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000100)={{}, "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"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) [ 904.657110][T32279] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 904.682760][T32278] FAULT_INJECTION: forcing a failure. [ 904.682760][T32278] name failslab, interval 1, probability 0, space 0, times 0 [ 904.695706][T32278] CPU: 1 PID: 32278 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 00:27:11 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}}}}}}}, 0x0) [ 904.704144][T32278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.714212][T32278] Call Trace: [ 904.717498][T32278] [ 904.720436][T32278] dump_stack_lvl+0x201/0x2d8 [ 904.725130][T32278] ? show_regs_print_info+0x12/0x12 [ 904.730353][T32278] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 904.736100][T32278] ? netlink_unicast+0x814/0x9f0 [ 904.741068][T32278] should_fail+0x384/0x4b0 [ 904.745529][T32278] ? __alloc_skb+0xd8/0x5a0 [ 904.750044][T32278] should_failslab+0x5/0x20 [ 904.754598][T32278] kmem_cache_alloc_node+0x75/0x370 [ 904.759813][T32278] ? __netlink_dump_start+0x535/0x710 [ 904.765233][T32278] __alloc_skb+0xd8/0x5a0 [ 904.769692][T32278] netlink_dump+0x2d3/0xc30 [ 904.774215][T32278] ? __mutex_unlock_slowpath+0x244/0x7d0 [ 904.779882][T32278] ? netlink_lookup+0x1b0/0x1b0 [ 904.784743][T32278] ? genl_start+0x19d/0x480 [ 904.789294][T32278] ? genl_start+0x2db/0x480 [ 904.793835][T32278] __netlink_dump_start+0x53d/0x710 [ 904.799064][T32278] genl_rcv_msg+0xbe6/0x1480 [ 904.803689][T32278] ? genl_bind+0x360/0x360 [ 904.808131][T32278] ? genl_rcv_msg+0x1480/0x1480 [ 904.813023][T32278] ? genl_start+0x480/0x480 [ 904.817542][T32278] ? genl_lock_dumpit+0x90/0x90 [ 904.822437][T32278] ? trace_lock_acquire+0x190/0x190 [ 904.827652][T32278] ? rcu_read_lock_sched_held+0x89/0x130 [ 904.833301][T32278] ? nfc_genl_exit+0x20/0x20 [ 904.837952][T32278] ? nfc_genl_get_device+0x3b0/0x3b0 [ 904.843248][T32278] ? nfc_genl_dump_devices+0x730/0x730 [ 904.848742][T32278] netlink_rcv_skb+0x200/0x470 [ 904.853531][T32278] ? genl_bind+0x360/0x360 00:27:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xb000000}) [ 904.857972][T32278] ? netlink_ack+0xb70/0xb70 [ 904.862575][T32278] ? __down_read_common+0x1b0/0x450 [ 904.867797][T32278] ? up_read_non_owner+0x1c0/0x1c0 [ 904.873200][T32278] ? netlink_deliver_tap+0x130/0x880 [ 904.878523][T32278] genl_rcv+0x24/0x40 [ 904.882527][T32278] netlink_unicast+0x814/0x9f0 [ 904.887328][T32278] ? netlink_detachskb+0xa0/0xa0 [ 904.892455][T32278] ? __virt_addr_valid+0x21b/0x2d0 [ 904.897593][T32278] ? __phys_addr_symbol+0x2b/0x70 [ 904.902636][T32278] ? __check_object_size+0x2f3/0x3f0 00:27:12 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x2}}}}}}}}}, 0x0) [ 904.907939][T32278] ? bpf_lsm_netlink_send+0x5/0x10 [ 904.913072][T32278] netlink_sendmsg+0xa20/0xe40 [ 904.917860][T32278] ? memcpy+0x3c/0x60 [ 904.921886][T32278] ? netlink_getsockopt+0xa60/0xa60 [ 904.927112][T32278] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 904.932415][T32278] ? security_socket_sendmsg+0x9d/0xb0 [ 904.937894][T32278] ? netlink_getsockopt+0xa60/0xa60 [ 904.943114][T32278] ____sys_sendmsg+0x5b9/0x910 [ 904.947915][T32278] ? __sys_sendmsg_sock+0x30/0x30 [ 904.952985][T32278] __sys_sendmsg+0x280/0x370 [ 904.957603][T32278] ? ____sys_sendmsg+0x910/0x910 [ 904.962578][T32278] ? __context_tracking_exit+0x7a/0xd0 [ 904.968074][T32278] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 904.974073][T32278] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 904.980089][T32278] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 904.986095][T32278] ? lockdep_hardirqs_on+0x95/0x140 [ 904.991320][T32278] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 904.997324][T32278] do_syscall_64+0x44/0xd0 [ 905.001787][T32278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 905.003988][T10967] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 905.007720][T32278] RIP: 0033:0x7f1bf16ffae9 [ 905.007747][T32278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.007763][T32278] RSP: 002b:00007f1beec75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.047721][T32278] RAX: ffffffffffffffda RBX: 00007f1bf1812f60 RCX: 00007f1bf16ffae9 00:27:12 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8035}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x3}}}}}}}}}, 0x0) [ 905.055711][T32278] RDX: 0000000000000000 RSI: 000000002000b580 RDI: 0000000000000004 [ 905.063699][T32278] RBP: 00007f1beec751d0 R08: 0000000000000000 R09: 0000000000000000 [ 905.071688][T32278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.079768][T32278] R13: 00007fff0f7ea94f R14: 00007f1beec75300 R15: 0000000000022000 [ 905.087783][T32278] 00:27:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000001980)={{0x0, 0x1}, 0xc000000}) [ 905.177630][T32279] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 905.343838][T22041] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 905.355592][T22041] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 905.364013][T22041] CPU: 1 PID: 22041 Comm: kworker/1:14 Not tainted 5.15.0-syzkaller #0 [ 905.372261][T22041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.382302][T22041] Workqueue: events netlink_sock_destruct_work [ 905.388450][T22041] RIP: 0010:klist_iter_exit+0x27/0xf0 [ 905.393808][T22041] Code: 44 00 00 55 41 57 41 56 41 55 41 54 53 49 89 ff 48 bd 00 00 00 00 00 fc ff df e8 44 8f 4a fd 49 83 c7 08 4d 89 fd 49 c1 ed 03 <41> 80 7c 2d 00 00 74 08 4c 89 ff e8 e9 54 96 fd 4d 8b 37 4d 85 f6 [ 905.413661][T22041] RSP: 0018:ffffc90004d1fb88 EFLAGS: 00010202 [ 905.419721][T22041] RAX: ffffffff8439b9bc RBX: 0000000000000000 RCX: ffff888084df0000 [ 905.427703][T22041] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 905.435653][T22041] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffff520009a3f39 [ 905.443607][T22041] R10: fffff520009a3f39 R11: 0000000000000000 R12: dffffc0000000000 [ 905.451559][T22041] R13: 0000000000000001 R14: ffff88803630c590 R15: 0000000000000008 [ 905.459525][T22041] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 905.468440][T22041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.475020][T22041] CR2: 00007f2e00ac7718 CR3: 000000001bf5c000 CR4: 00000000003506e0 [ 905.483069][T22041] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 905.491046][T22041] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 905.499003][T22041] Call Trace: [ 905.502266][T22041] [ 905.505194][T22041] nfc_genl_dump_devices_done+0x37/0x50 [ 905.510743][T22041] genl_lock_done+0x82/0xd0 [ 905.515230][T22041] ? genl_lock_dumpit+0x90/0x90 [ 905.520061][T22041] netlink_sock_destruct+0x79/0x250 [ 905.525255][T22041] ? rcu_lock_release+0x20/0x20 [ 905.530088][T22041] __sk_destruct+0x4f/0x820 [ 905.534578][T22041] process_one_work+0x853/0x1140 [ 905.539506][T22041] ? worker_detach_from_pool+0x260/0x260 [ 905.545122][T22041] ? _raw_spin_lock_irqsave+0x120/0x120 [ 905.550663][T22041] ? kthread_data+0x4d/0xc0 [ 905.555209][T22041] ? wq_worker_running+0x8b/0x140 [ 905.560216][T22041] worker_thread+0xac1/0x1320 [ 905.564888][T22041] kthread+0x468/0x490 [ 905.568940][T22041] ? rcu_lock_release+0x20/0x20 [ 905.573775][T22041] ? kthread_blkcg+0xd0/0xd0 [ 905.578351][T22041] ret_from_fork+0x1f/0x30 [ 905.582804][T22041] [ 905.585813][T22041] Modules linked in: [ 905.589782][T22041] ---[ end trace a79e2d26d084c2a0 ]--- [ 905.593744][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.595281][T22041] RIP: 0010:klist_iter_exit+0x27/0xf0 [ 905.606247][T10967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.611498][T22041] Code: 44 00 00 55 41 57 41 56 41 55 41 54 53 49 89 ff 48 bd 00 00 00 00 00 fc ff df e8 44 8f 4a fd 49 83 c7 08 4d 89 fd 49 c1 ed 03 <41> 80 7c 2d 00 00 74 08 4c 89 ff e8 e9 54 96 fd 4d 8b 37 4d 85 f6 [ 905.621247][T10967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 905.640828][T22041] RSP: 0018:ffffc90004d1fb88 EFLAGS: 00010202 [ 905.640847][T22041] RAX: ffffffff8439b9bc RBX: 0000000000000000 RCX: ffff888084df0000 [ 905.653698][T10967] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 905.659645][T22041] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 905.667625][T10967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.676628][T22041] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffff520009a3f39 [ 905.676643][T22041] R10: fffff520009a3f39 R11: 0000000000000000 R12: dffffc0000000000 [ 905.676655][T22041] R13: 0000000000000001 R14: ffff88803630c590 R15: 0000000000000008 [ 905.676666][T22041] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 905.676680][T22041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.676693][T22041] CR2: 00007f2e00ac7718 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 905.676707][T22041] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 905.676716][T22041] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 905.676728][T22041] Kernel panic - not syncing: Fatal exception [ 905.676995][T22041] Kernel Offset: disabled [ 905.766669][T22041] Rebooting in 86400 seconds..