c"], 0x60}}], 0x1, 0x0) 14:53:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3}]}) 14:53:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x3, &(0x7f0000000040)={@rand_addr, @multicast1}, &(0x7f0000000080)=0xc) 14:53:12 executing program 5: syz_clone(0x494c1480, 0x0, 0x13, 0x0, 0x0, 0x0) 14:53:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000400)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="40000000000000000100000007000000441cb1517f000001000000006401010100001000000000000000000344149b20000000060000000100000004000087771c"], 0x60}}], 0x1, 0x0) 14:53:12 executing program 2: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00'}) 14:53:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}}, 0x0) 14:53:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:53:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x2001}]}, 0x1c}}, 0x0) 14:53:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:13 executing program 0: capset(&(0x7f0000001240)={0x19980330}, &(0x7f00000013c0)) syz_clone(0x2044000, 0x0, 0x0, 0x0, 0x0, 0x0) 14:53:13 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x2, 0x0) 14:53:13 executing program 4: capset(&(0x7f0000001240)={0x19980330}, &(0x7f00000013c0)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:53:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}], 0x20}}], 0x1, 0x0) 14:53:13 executing program 2: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, &(0x7f0000000240)={'wg1\x00'}) 14:53:13 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8923, &(0x7f0000000240)={'wg1\x00'}) 14:53:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) [ 350.675829][ T5999] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 14:53:13 executing program 4: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, 0x0, &(0x7f00000000c0)={0x0, 0xea60}) 14:53:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="150000000000000000e701"], 0x14}}, 0x0) 14:53:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @broadcast}}}], 0x20}}], 0x1, 0x0) 14:53:14 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x401c5820, 0x0) 14:53:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:14 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x541b, 0x0) 14:53:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 14:53:14 executing program 1: socket$inet(0x14, 0x0, 0x0) 14:53:14 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x1000) 14:53:14 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8915, &(0x7f0000000240)={'wg1\x00'}) 14:53:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:15 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 14:53:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="c41d5bc2a10f0faf41cd3b660800de1421950fb39800000000000000004410eaf019", 0x22, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:15 executing program 2: socketpair(0x2, 0x3, 0x5, &(0x7f0000000000)) 14:53:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000023c0)={'ip6tnl0\x00', &(0x7f0000002340)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev}}) 14:53:15 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:15 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8947, &(0x7f0000000240)={'wg1\x00'}) 14:53:15 executing program 1: syz_clone(0x24000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:53:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b666558", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:16 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8904, 0x0) 14:53:16 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:16 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8941, &(0x7f0000000240)={'wg1\x00'}) 14:53:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x4b47, 0x0) 14:53:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000086830000000000050000e7080003001603"], 0x1c}}, 0x0) 14:53:16 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 14:53:16 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:16 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5451, 0x0) 14:53:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4, 0x2}]}, 0x18}}, 0x0) 14:53:17 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b6688a8", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 14:53:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5411, 0x0) 14:53:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b668847", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) 14:53:17 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b660806", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:17 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000280)) 14:53:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:17 executing program 2: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8953, 0x0) 14:53:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x15, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:53:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 14:53:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x28}}, 0x0) 14:53:18 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000280)) 14:53:18 executing program 2: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x40049409, 0x0) 14:53:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x15, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 14:53:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 14:53:18 executing program 4: clock_gettime(0x6c0a9701e4fbe263, 0x0) 14:53:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x1c}}, 0x0) 14:53:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8982, 0x0) 14:53:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:53:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000022c0)={0x1a08, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x26c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x82, 0x5, "e81494418d8d8e1e1a922b2121460e4466e0e89754bc100694bed37acf7bd7016e285a0f883ab091ac650d64f7a0d17e6db55b8113ed45a384ddb9e4c2b2a41a3ba1d9fb09b60054953029f6f93c8eab64991dc664d8982f3d8155c31d4e34932a559d5cee9a2edd8fa387d1a46ed75cabae1297bc7fe48657d8985b4c85"}, @ETHTOOL_A_BITSET_VALUE={0x102, 0x4, "116c6f4a372be4582ab9c40886c26b484c2de7ff7d8ae5e0c2e3f6a91194de02e16d1c70180643ce49eb1dbe349c368f9d25c715a397ed0b8a8eab3c1363f992553c703382f6b91cd6cd0bd4e5410907b5ea61da99b592806dba464e910e5ebf7370077ad2b2d6901f73e10eccfb4d73ffa2a884faa67647694a045a3162e8bf9f9a3bffcbfb404733454c7ebdb9992aed42c53fa1b177c121fe21f515830e283b9540425c78a21a5b43f89ff38adef5c633e39b53e95813b51dbdd03b57650c024ecb3cc2774bcb6695428bd6704c765bffbfc7e058ea0792667921c09f3ef0bbb14c0135ee6f9f4d5214c7f30d13eaa17ab409b88f33819b922597f1b0"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xcb, 0x4, "d3beade950fe6456acfebc2546dfa864df3378298c0618ffd35361a3fcdc9833f8bdb25174d5cb822def819785b9cb446d09f17d1e40169fa6500ba02c286cc8442f2582e3434ebcbf13c94c9ba9a36320c6d7a905e711f2c97bef4d4dfe3458099556954de5ca744fc7e8d8c0e100168ff04c3cbd6d4920eff0c2284da60ca9ca8a0ff0e249e058435efd533e3b8309ebc0d6352ae5ae26b96fe377302f0f461ddf03d8d9cd86755e166cc75cb56bb5f510071a61e52120aa058a08375553e1df70132aa06ab1"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1748, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x1318, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+\\\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "935a64ced88d2e3af74f6a8ab1a2c1c9f2c16570a1778763c4ead5b59770a7cacc3e27c20fb0c474e6b625e85cb358f2f031013a9f99ca97a7efde6129c3bf71aa0776d438198bac331024ecfaf4b6be54a8c5b78e60670d8e23e4806e94ccdeef8fb098e654a0be3dea68c1c0d8abefa5f762cc265796ef63759e6d6fc26aa2e500"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(W\\{%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-)*[$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/,#\'[\xae/{![\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "ab46ba38a17308db03a4a6640829ce57f3690d196821019c6c4c8561a6ae5a5da95ab1fadf27abd117024a987c25c64999804a460130f17b70cd666f0168ed373a5d0aeec534cca0d1ca912fd3496ac259cc432c709f6524ed29d4c7e6da47ace636907b75cd503160e82dea"}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x3b8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe2, 0x5, "f53ab6f8f8b872cb9a54515f1906a2a5df39317f10d8bb60a634dd665f39d5b1c9d8d0118ba3596a29ad0fe64cb0e52700f2f768baf4a471b6da85c36f282c33cc8c8d15d95d21e6bd277006c3df4aa835a197858c0335c724ef1231e74436a97ce62a83d3b7214bda76c0fae6766add85812c83fe5e5ab9adc85d2b01e0856012a31e01c4992fe9ae23c368901125391b8391439a105c3e79ee335a959b039bbad64823a6cb7e9177b5a1704405163b10184ae1f5d0a97f7f177eb799c00cba2b52d60dfccf3da7872c1a9fda2732b9600a50ce05600a95e5f7e91d39f6"}, @ETHTOOL_A_BITSET_MASK={0xfd, 0x5, "974413921bada31cbdcca0bced1dbf2fe34975dd5d9422347d405e295d1b29bea9d87d5beb46f26194aec5c816756b4fa7be00d3cb03e4a06cdd54ff498ce34f85a86e0a811edd605abc2f6a77ba31782230c4bdd7d4f3ca1fee23fb0204969ecdc21d72c9aa4393ddd74a2ed038d91201000b7b4466812200a307f5794ca4e11d0829fb10be705c78e9752725edb491f2d5200e8315d3cbe8acaa377d574bbeb2d1a7c47b0794a057717fea84ffcdf3c8aa737795e306de766b7b6bbe2de69288210b9169359c732d372704f28e993e9d103a6da59257edcee78706023af94b09ab77a215a64f744dd041e2820d7fa3f162f487e002fe9023"}, @ETHTOOL_A_BITSET_VALUE={0xec, 0x4, "42b13f7acc86154cf27d1e98c194ff3591d839616768e134bd106244b2e599aaaa4f0791fa62fb66e09a6dc4f24ad95e7aec355f486f3bcf24a248da23d8e0a7efd1e66d2d3de13b0712fe64c1f0307616b9f2123e51b08b0ce80eee70ff07eafacf7df7d82b748990d19677d2d2ed21a9a76be45d1e4bfdb640688731d1cbea4ba6d095c69b29a349e62fabcbb5bad869cf30ed24cf964d9a3ffff5fe3f344c4049bc93fc207bced4ab2975bf06b256435e9e01cb03c983a54c771114a650ea91319e069b1d342dae13170200f8c263adb677333d79ae6b45001362abd8aab0e41813d034541cfc"}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "7594b2f9"}, @ETHTOOL_A_BITSET_VALUE={0x7d, 0x4, "e8f2a61d91e86d47f324b1886374044af55175b6800a930a27bc9f73d4612218e8ad5366bc675f7ec6098ddad2ab6df86fce28ac25a8b542292a668548942208210cec43d2ee191706011950ff23976d8984ac98a82838ea3cd4c9cf8a67347ecbaee0f160593444083166952efb1e5148fa05ce1d54497dc8"}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1a08}}, 0x0) 14:53:19 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000001600)=@abs, 0x6e) 14:53:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000000000007000000440407"], 0x18}}], 0x1, 0x0) 14:53:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240), 0x7ffffffff000) 14:53:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:19 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) bind$unix(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_clone(0x14000000, &(0x7f000000c3c0), 0x0, &(0x7f0000007580), 0x0, &(0x7f000000c480)) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 14:53:19 executing program 2: pselect6(0x40, &(0x7f0000000240)={0x5}, 0x0, 0x0, &(0x7f0000000300), 0x0) 14:53:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@local, @loopback, r2}, 0xc) 14:53:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0xc020660b, 0x0) 14:53:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @vsock={0x28, 0x0, 0x0, @my=0x0}, @sco={0x1f, @fixed}, 0xb4}) 14:53:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:20 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect(r0, &(0x7f0000000100)=@in={0x2, 0x0, @multicast2}, 0x80) 14:53:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b66892f", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:20 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89e0, &(0x7f0000000240)={'wg1\x00'}) 14:53:20 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x60001003, 0x0, 0x0) 14:53:20 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000180)={0x0, 0x2}) 14:53:20 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:20 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x5411, &(0x7f0000000240)={'wg1\x00'}) 14:53:21 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8910, &(0x7f0000000240)={'wg1\x00'}) 14:53:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000400)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="40000000000000000000000007000000441cb1517f000001000000006401010100001000000000000000000344149b20000000060000000100000004000087771c"], 0x60}}], 0x1, 0x0) 14:53:21 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) 14:53:21 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b6688ca", 0x36, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x5}]}, 0x1c}}, 0x0) 14:53:21 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x80086601, 0x0) 14:53:21 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:21 executing program 2: r0 = socket$inet(0x2, 0x3, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 14:53:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 14:53:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) 14:53:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b664305", 0x36, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:22 executing program 1: syz_clone(0x32845400, 0x0, 0xfffffffffffffdfc, 0x0, 0x0, 0x0) 14:53:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 14:53:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:22 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x40086602, 0x0) 14:53:22 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) 14:53:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private1}}) 14:53:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)={0x15b4, r1, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_FEATURES_WANTED={0x114, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x102, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x107c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "9c86262beed1e339949f1cc929bf8bd1cd9a0b7096c16310d07227ed0f14586223c48213c4470dce42e2cf07ec5f4ac7daaa47df3d4ceab15934e38807ce6d417cdfc4aafda1dc500857b1600e8f07913738147c8229b1c05e807a7b4663e7163bf018c7dbb9af921403814e0bea807a0549cfc7670a0e8157f2ef73296c6edcd3e2c8fabc84b7a6218582268aa0f27fd754542ef188aaaaa53899a5cc592780e46a98bf40fcee56e3bd47c089e8e4ecc4c53bf677c960fd06a2561bae63463af25a9496b84aa0b656a5ef68004f6d8bcf07139c58423880a810a90cf1d43fab34dcb79bdb144f557b6f9d860e36b55e5ec8c410943bb69d9b904d00df5b486fe98cc64c3628a6c66a94b17e0e53fc10216611361cd01ac491d8fd1a1c67fa0edab85ae1a5c0a711368ae10b643f4368a940a486eb9e159444a1f93bcf4915b67dd0ba4ff99e320cd203396e903e23c0235b4fd8d59d0c8d2a0c41cf3a689b819d85d9bf5b84d2e8530a4d335c066c515656156d4acb06cc2e39558caf7ab174a527b6e05ab357401514bdfa691f1de80b3c549466c016b358c1cd31d531cf982cdbb5bd4074f76e73d47dc79f73f4ca46977e5e61bf26515d7dbe78b1d06b9129679555547751ce8407b4ccf41f805b52bcb3604db581dfde62ba8aabcc60ee2151104b479e91c41b91b6bc54c854c9117bf3268319f83949da55898e62c782dca2ee189bc6bf2b0535a72b8d4f0a35fa8ec7f2abd7dfa565c7f4d4c22d5abff4983c6f2c4ebc6b5ad57d35b02538b6ff9eea6949ea494c32cc4bcbc28d450297633f9357bfc556195ca994a33d1c128c7dca258876e8d6cd8de93ec494b6bf474a873ea9b8d7a12c47d56b8ec539691ba9f66f81be94a25a7af85c47b5698f15d86ad9b4589949affd4042ecfa428b1eed06f32d4565b174f89cc4c9d76099c7cfe6513542101e0b0a22dbc1dcc207d0415738e7f13555efee50c42a878a30bb5f5e591711513a55deccca63314b71dbf82efc6062f8a8c1747bde3963fb543e1ab76fe4055ba2656188452a9e4b3843767f01d4f14837fcb43782157b483934a93a3422726fdcf6909bdf71734e8c48189966e2fcc4c5ce5c50558ed389fd8f8f257f3c4c8e364a5530f42330b92ac7073495b264ce647b04e26e09f0d16c93b639c67d9840c4bbcf53590278eba4ca5b74d3cf0d5c60e6675d89f0ecac069e52ca014d2e3d536b7f0cf891c0a4d8265880a40fc37c69792961f1d389d41422768a9b2f28d0cb2d3c865d9b8a1e12d0ba5f5677c9ecdeeba839108b02b1bf5bd93c00925f5137b5ad672d03ec9884f517a7bbef42d03b2b4dda5d445c5d608ca901b3bdb9da89603c21adcb97d8e086d0cca9241ede7f73aa6b7c4514a5f09891d989b0b8a30ebc7e6fe5fe564b079092af1d30fbb9b46432925d76f9367813f934bf76cb60bb0b7a7bd6f60a468fd1b2089cf349c3cd5ab5084cb0dd0577f3dd6eedde33ca49cd832845750f2fdcba42ef7234be2b6d9805dfdbc1831fda7bd7527c334329e9f632c136365ebae2e886ddbddf76d1899f1159e2bbcafac847b974109a8e3962968d92ebd8fa21a694654576d82dd4a21a6053cf25ec80987163c8acf2cc2fd73ef65f11170c3fd3b30de0d38679740298780848eae18cb5750f4eb6153d20063b953cdc4da8143e3d25fec4777a361fc59fec2bc1baacdfce7d565174c7e3fd8300b969237dc6790982198271525c3404589868623427eeb9f0aa8101be688d7db4ed5876879fc4dd9f8406ce15691707594238bc5ff013d676e4e45f411ac4be860d533a380007b96a321bb1ac2050aa5c3ea65d803b01ee2f0b20ad448418ab277f6c7efc4ee07022dace50d7db8bbd486261a971636df771b2d477906090ce214a09790cbc6251fbd9266e7b7a269e2eb4d7b27f98ee8c22bb002f4f53c8193bf1cb55095643e1e020560c5e5408bee7e321be62f8b036b9e582c266631ff84a5577ffdf1648a0a5f87a11c130abdb20646901e879d28aedd35e6cc63e30d2ebd10ac0d6865711eae21dc4729e066d981e2cc8f9aeb39107274cf3b4cda19ed1977eec6692d3374f216515f1305c27e4f18cf2f792e8f0941e49aa411d89718ab534f28146f7a81846214aee9d5436b7c4795a2747fb9d1a9f16651f4d1fc56e86452454e3e52b7e32d4262f7c451298e452b098988db1bb1defd58b35808dcb09093d3660c1d1bad8303f8bc4f8c317a3c58023ece77249ab8a87f3e5980a2c2d60b8f478f3ffa68ee2cf3044c4c2607ec003b085cf5b85bb50f1cf3786a01904abe1f80e69a094beae49f21dae7d2288a2a85a814a214fcefe8ad7a8218be72d5830ed3eb2f3252c1a40edd3fc24d72616fa1fb9921ff2222cbe3bab27dd9c579bc7bbca615968aab3d43d50de422bcd8cd4bb9fcd1086fa7dacfdd434940084f727eaa04319d67eff7ac857e802f2a0bd6a6dff0336fffb133144c96f5386f6089932cb45f5d068a5c21f44b50279d3a0157f37bc06f7cf5c5f6bf4d8e9729312216f6585209bde16919b3f13beb29948ffd133b16381d0a79b0a2cff45cb0107cf7612a210ca3e8f4131c039d926346c3d64241ab27c3bdaefa71941acb06f194c20e7ca86f64f79a0f00becf14d65eabfa8084f6ae38aee24e9f5034bd0b4b9f904b73f3a8da16cfc121fe2e3dec0622b1dfafc98acb46cf2ce0bc9d5fd8e069ef73bf16dfb1d1ed66563656aed49d6ca945a3524a6f9a4aaa07ea11d6ee0a022b7810b8df81990a8386149559273091a5faa57831468d90228066a1a33f623962bfe80ae31dd07db0106931b78224259209ad6fdff584066dde74f335769a09c81b59fa92f790dd562efa490b8eff8f112045632c82ed46c015017a0d38493779cd648a6e91593cefd716271089f5c0ccf23f78d47e8d2cb5f3ddee4553085ae92a46b0084e7e599cc6753e43758f4ff625f02362f13e8d15fbb32c48e5a27ee835bcd32f99e86c88cfc4ff8712aca41941b85e4250db599ed0fd15b77928a3ea28e33ce9db7b11ea02e089c2f226552929169fa587d76f83292adadede7fd998cdfccb771dcf3f8b6c6cfe079c30f2a8bdfad3b1886a512bbfd6d92984d01cb42875adbb289c8d5ef6541029c2fe451a886dd9048480a5fe0bf01635a3d550229c84aeb42c2b2cc20d7838ca2d69f7d17761fcf7c3067de8323917a48d1533098d28efc2919982d39d90c265a6d64bf5613d492cb5b3748808acd41e753b7b4bc735ebedd7b0312bce092426e60584f1669e7cfa166c291a3310663f5ffc747ad133ccd0b47629b22483fd085139af2ad96db6bfc98182a623cbadada40f126caa854d29fd4d6081614bdab972f70a6254062c40256fdf1bd64e5c28c844b3aa7193c21c33c9f51d900ce83f4bf925b7254f1b49e4553bc4aa073d49d37f2db6434a23438e7bfa8b96c6cd3e15a2561bda69148f34ccc9b12f8738050930f2f115665a48b9226951da8eebaf7820caad391f23e66a1adb2caf3b012b75528e809e7c06a31b5451d7fc2a3e023bd6972fc2561f69faeb580d7e9ac811ba97497b809e31bed9a06cd41e98e7fc31f9be78bcef634f6cec439acdbf77a07fa901b4161a0ccab5c0370aacadf5fb5f16e165e13f77326b67e2b1826fac63991f6844d971719ada842c397374d7e863759e7e183103c264bad4083717b973926af1ba84d3f0ae50a6d7b1906cc72c9d331042a20db1d007340d8582db5912f2aa60c7d6ee64cda9625fa6320d6ee62e9901b5d9ea684099607fe8fb7e523b37a6e25ffde54769b83de20239e85aa2d9137553b666bd14721b91e64eb30fa2e0848a9bd8ad98be67a14589761f1e4aa1bd4a44b973a8bb1402b14a5ee03664d81c1af38065f90f618bf4de0d38fe0341ca8ba7972e219e8a8ad77af2c6f90c72056f651c9ddd3d393a76c46a7c926452ad300766545fba192adc1caaf7c26cdc5eadd6fe5aaa9bebfa3b49eedde93a9eb4b38a11ef1e915b6bbe330ab2d3a9d0bf397dfa8fe3935d9829e039cb39c9cd90f0efa6d6793491486c6e729b19650d968f1ba70803a55be79e71a8f98d5049de5052f7cdf0b661c53ee05e748b4c68087ed7789deb8990485fcb8eb6f24f18879bd76653d87b39c28c82c6984cbed29303d2e9a6cb1cb6c322a47cf876b364e6d1cbbdb49510fb4ae405cdd7860ea1eb701fd8f390aa51e2acf332297c72a9eaf6de9204fdce2e36bd2bd7d247e69f6557cbe87b8fec8519204157372f726e0dd34032abbfed549d40aee54a72c1727f80cef1ca61b00a75167e31cff51ebed82149ce311d01fa02eb964b9271ab9545ae556dc09d08dc828cb6ab96a73a9d96fbe6f6123104a6b716ea74eff95e8d2d454206289239e5ad33ba6d48b50f8067ef0bd419f9ee8eb595a87af1dce461170c818dd88542e50e1c8af75a875b5ebc0f3bfb0a576081af825c3110a9fd094b92667d0498b676a8dfdb8e546fea63597e6016efc056e172f9d23b2b2a9b5e80dc7548e7eea30f660c00079e80a03461112c13ed692fd79acb59bc266c191e66a1569fbe52e5c7c2fc747295042331c23e222d9ad3a7ee6f682fce9b3c7f2d0ab2ddccf6d297207ddcff2946b8667f911b31a640bc195d05021bcfb9725729505dd1258a05782b369f8a873fed4be4e7d33735bedee3cbac5b55214162e5a3396409e766ff74a34f8c61a559ed1358df9a67c9167bb11b9ddceba6d20b8f56b89a8c4cff21a290ab95241362f34b1918c4dc7027b71cc4cd28368156553714efcd0b99b1473328f57a00151d662f91911e62d5dd92ae7dc12ac782c9c763ba0c92fd86a5a6336abce9612a2a4b38b1ccd5b4559b95e41234ebea9e51fe4099acd778f00a732def1b63239d64f4f82c5f60734bb21c8ffb6bc47e9b20f38e36b38cb8342782b517661c74433986a5f77ec999248064c4baf6b35af8fdd17c3bb099a6b0191463e04e2af6e6c0da5506c8d2192195720c69bd00939775f59b09837404d8716d72ec7fa97f04466ce73dfb1c1b85baaaf0c30f3c6d621d3e9f376507bc3ac65930c6689f9d8e9db40cc0aa17f61ee5251dbb607b6433fd307c88b0ab72d348f2f0ca3bef2422c654798d29f8cd280cdc764fe14a7a6e863475ca99d7c6a6d1d7c181db3b59f68675040f46299b3cb6b34136148bc5a286c8fb754fe68c3372e67f30fa77c66e29f454faa5e3891fc7aa5cea71a75e512378d865f70edbdce7d57b9145ef492343617ea878b8bb82f9e901d384b3ee257a49560f28d0ee5bd105018e17f6cbd9227c523a45ef87c28b88146499b24d84ed368ff189e5369dbd36eb6d9ad231af58e844c5ba10b086806005e6ea106612015c38d5d33e2af11048717265bd0832181639fc1abf87e23191450db7c955a5705f8b4ddf51abd9e8a062c3bf83aef266407051659735470e6e47903e985e28cb1ce1178377d4fce18c559b986fa4aaec53b01d93e251c39f624ff5dc57aeed951d7dc9eafb2e473d8507acdf6bc1ba5bc2195d9dd11d7575b5a36ded305c9b696c284d734011023c3b6680c276311f8faa21db1fa7bf92af33f21d1de61e9879a95b1d85223088417a4af87fa5bab1446e91e12ad38ef394049a38b98c70af788a866e7574426cda2d11f74d94d90b9ba9eaf72d9bb6cbee7f72c2a8df79859086366edd43762d68cef2d14e0aec67d025f84cc73e4ac223a15910597560939d9971e1ad2310bb09ae5f215a0dbdcb17098888364689ed1d9"}]}, @ETHTOOL_A_FEATURES_WANTED={0x398, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe2, 0x5, "f53ab6f8f8b872cb9a54515f1906a2a5df39317f10d8bb60a634dd665f39d5b1c9d8d0118ba3596a29ad0fe64cb0e52700f2f768baf4a471b6da85c36f282c33cc8c8d15d95d21e6bd277006c3df4aa835a197858c0335c724ef1231e74436a97ce62a83d3b7214bda76c0fae6766add85812c83fe5e5ab9adc85d2b01e0856012a31e01c4992fe9ae23c368901125391b8391439a105c3e79ee335a959b039bbad64823a6cb7e9177b5a1704405163b10184ae1f5d0a97f7f177eb799c00cba2b52d60dfccf3da7872c1a9fda2732b9600a50ce05600a95e5f7e91d39f6"}, @ETHTOOL_A_BITSET_MASK={0xdf, 0x5, "974413921bada31cbdcca0bced1dbf2fe34975dd5d9422347d405e295d1b29bea9d87d5beb46f26194aec5c816756b4fa7be00d3cb03e4a06cdd54ff498ce34f85a86e0a811edd605abc2f6a77ba31782230c4bdd7d4f3ca1fee23fb0204969ecdc21d72c9aa4393ddd74a2ed038d91201000b7b4466812200a307f5794ca4e11d0829fb10be705c78e9752725edb491f2d5200e8315d3cbe8acaa377d574bbeb2d1a7c47b0794a057717fea84ffcdf3c8aa737795e306de766b7b6bbe2de69288210b9169359c732d372704f28e993e9d103a6da59257edcee787"}, @ETHTOOL_A_BITSET_VALUE={0xec, 0x4, "42b13f7acc86154cf27d1e98c194ff3591d839616768e134bd106244b2e599aaaa4f0791fa62fb66e09a6dc4f24ad95e7aec355f486f3bcf24a248da23d8e0a7efd1e66d2d3de13b0712fe64c1f0307616b9f2123e51b08b0ce80eee70ff07eafacf7df7d82b748990d19677d2d2ed21a9a76be45d1e4bfdb640688731d1cbea4ba6d095c69b29a349e62fabcbb5bad869cf30ed24cf964d9a3ffff5fe3f344c4049bc93fc207bced4ab2975bf06b256435e9e01cb03c983a54c771114a650ea91319e069b1d342dae13170200f8c263adb677333d79ae6b45001362abd8aab0e41813d034541cfc"}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "7594b2f9"}, @ETHTOOL_A_BITSET_VALUE={0x7d, 0x4, "e8f2a61d91e86d47f324b1886374044af55175b6800a930a27bc9f73d4612218e8ad5366bc675f7ec6098ddad2ab6df86fce28ac25a8b542292a668548942208210cec43d2ee191706011950ff23976d8984ac98a82838ea3cd4c9cf8a67347ecbaee0f160593444083166952efb1e5148fa05ce1d54497dc8"}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x15b4}}, 0x0) 14:53:22 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010025bd7000fcdbdf2514000000080003"], 0x1c}}, 0x0) 14:53:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:22 executing program 2: r0 = socket$inet(0x2, 0x3, 0x9) connect(r0, &(0x7f0000000140)=@in={0x2, 0x0, @private=0xa010102}, 0x80) 14:53:23 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8946, &(0x7f0000000240)={'wg1\x00'}) 14:53:23 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @remote}, 0x14) [ 360.157380][ T6203] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 14:53:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x7}]}}}], 0x18}}], 0x1, 0x0) 14:53:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, 0x0) 14:53:23 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) connect(r0, &(0x7f0000000100)=@sco, 0x80) 14:53:23 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8924, &(0x7f0000000240)={'wg1\x00'}) 14:53:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b6686dd", 0x36, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:24 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8942, &(0x7f0000000240)={'wg1\x00'}) 14:53:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x15, r1, 0x1, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x2}]}, 0x1c}}, 0x0) 14:53:24 executing program 2: syz_clone(0x228400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 361.313898][ T6234] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 14:53:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b668864", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:24 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:24 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) connect(r0, &(0x7f0000000140)=@in={0x2, 0x0, @private}, 0x80) 14:53:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x42, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780), 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000001d00), 0x0, 0x0, 0x1) 14:53:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x28) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080), &(0x7f0000000040)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='veth1_to_bridge\x00') dup2(r4, r3) 14:53:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 14:53:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 14:53:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:25 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8929, &(0x7f0000000240)={'wg1\x00'}) 14:53:25 executing program 5: syz_clone(0x57040000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 362.217022][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 14:53:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x28) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080), &(0x7f0000000040)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='veth1_to_bridge\x00') dup2(r4, r3) 14:53:25 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000280)=""/121, 0x79}], 0x2}, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="eb6e", 0x2}], 0x1}, 0x0) 14:53:25 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000280)=""/121, 0x79}], 0x2, &(0x7f0000000380)=""/109, 0x6d}, 0x2) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="eb", 0x1}], 0x1}, 0x0) 14:53:25 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb", 0x1}], 0x300}, 0x4c081) 14:53:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0f", 0x7, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff92}]}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0xd4, &(0x7f0000000280)=""/212, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:53:26 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001240)="e1514b1e64208fb16ec632bc670a4fe920a1929555c0a5652193a65e2f4a38d45623dfc743b89526e61e82596a9d2d905bfd50ae739d02b3ae32b132da1d328d9b54e60d0c95ff7c1aa77032962fb1080f851dab3dab9280f37af821614eca62f324bf6b1df13c22b2379689bd02b64230a9de05cd903909fdffffff5a5c530bc91d", 0x82}, {&(0x7f00000000c0)="f3e84095114b3e3cbaf213b5df4847387971468746d64ad238d0bef4b46d9a088f9e7fe3bcbb60a5af52c18118580b4cdc25e8aa5c3bf5250e7b5576a35596f7a85b2ecdbb1ab2b453b7b3d512fdc1ae2d552b0395e587e5d8dcc5dcb5bced2b", 0x60}, {&(0x7f0000000240)="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", 0xde0}], 0x3}, 0x4c085) 14:53:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0f", 0x7, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:26 executing program 1: socketpair(0x22, 0x0, 0x0, &(0x7f0000000200)) [ 363.144032][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 14:53:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x28) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080), &(0x7f0000000040)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='veth1_to_bridge\x00') dup2(r4, r3) 14:53:26 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc4}, &(0x7f0000000480)={0x0, "50cb7b16538e967c7ea2d45917553a7ce7db61af804693473d2aa063837f1ebdcd3b3d2ae766cbd142ff5915686522495b12a28626da822214fc1f070163268e"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000540)=@chain) 14:53:26 executing program 5: syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') 14:53:26 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) 14:53:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x560d, 0x0) 14:53:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0f", 0x7, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) [ 363.761847][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 14:53:26 executing program 0: syz_mount_image$pvfs2(0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="19", 0x1, 0x10001}], 0x0, 0x0) 14:53:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x28) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080), &(0x7f0000000040)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='veth1_to_bridge\x00') dup2(r4, r3) 14:53:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x5428, 0x0) 14:53:27 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b", 0xb, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 14:53:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x44}}, 0x0) [ 364.389423][ T6299] loop0: detected capacity change from 0 to 256 [ 364.499541][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 14:53:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 14:53:27 executing program 5: mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ff2000/0xe000)=nil, 0xe000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 14:53:27 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblc\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) 14:53:27 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b", 0xb, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:27 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @multicast1}}}}}, 0x0) 14:53:28 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:53:28 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xee, 0x2, 0xae, 0x40, 0x4bb, 0xa0e, 0xfeae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x53, 0x4a, 0x1d, 0x0, [], [{{0x9, 0x5, 0x0, 0x1, 0x400}}]}}]}}]}}, 0x0) [ 365.286521][ T6316] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:0 14:53:28 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000100)=0x88) 14:53:28 executing program 4: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000280)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 14:53:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b", 0xb, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:28 executing program 1: openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000780), 0xffffffffffffffff) [ 365.582395][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd 14:53:28 executing program 5: r0 = epoll_create1(0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 365.812945][ T3571] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 365.852630][ T25] usb 3-1: Using ep0 maxpacket: 8 14:53:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f", 0xd, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) [ 366.006484][ T25] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 366.015294][ T25] usb 3-1: config 25 has no interface number 0 [ 366.021739][ T25] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 366.036119][ T25] usb 3-1: config 25 interface 210 has no altsetting 0 14:53:29 executing program 1: r0 = fsopen(&(0x7f0000000080)='nfs4\x00', 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='cgroup\x00', 0x0, r1) [ 366.243321][ T3571] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 366.273611][ T25] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 366.283441][ T25] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 366.291643][ T25] usb 3-1: Product: syz 14:53:29 executing program 5: dup(0xffffffffffffffff) r0 = syz_io_uring_setup(0x4dae, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x6, &(0x7f0000000140)=""/14, 0xe}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x63}}], 0x1, 0x0) io_uring_enter(r0, 0x2fe, 0x0, 0x0, 0x0, 0x0) [ 366.437789][ T3571] usb 1-1: New USB device found, idVendor=04bb, idProduct=0a0e, bcdDevice=fe.ae [ 366.447381][ T3571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.455873][ T3571] usb 1-1: Product: syz [ 366.460222][ T3571] usb 1-1: Manufacturer: syz [ 366.465340][ T3571] usb 1-1: SerialNumber: syz 14:53:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x6, &(0x7f0000000000)=@raw=[@map_fd, @func, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val], &(0x7f0000000040)='GPL\x00', 0x5, 0xf8, &(0x7f0000000240)=""/248, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:53:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f", 0xd, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) [ 366.600998][ T3571] usb 1-1: config 0 descriptor?? [ 366.669227][ T3571] pl2303 1-1:0.0: required endpoints missing [ 366.853319][ T3571] usb 1-1: USB disconnect, device number 2 [ 366.999565][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 367.202482][ T25] gspca_stk1135: reg_w 0x2 err -71 [ 367.208843][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 367.216162][ T25] gspca_stk1135: Sensor write failed [ 367.221644][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 367.234104][ T25] gspca_stk1135: Sensor write failed [ 367.239960][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 367.246539][ T25] gspca_stk1135: Sensor read failed [ 367.251937][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 367.258683][ T25] gspca_stk1135: Sensor read failed [ 367.264112][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 367.270918][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 367.277524][ T25] gspca_stk1135: Sensor read failed [ 367.282969][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 367.289453][ T25] gspca_stk1135: Sensor read failed [ 367.294944][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 367.301499][ T25] gspca_stk1135: Sensor write failed [ 367.307087][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 367.313618][ T25] gspca_stk1135: Sensor write failed [ 367.319224][ T25] stk1135: probe of 3-1:25.210 failed with error -71 [ 367.569588][ T25] usb 3-1: USB disconnect, device number 7 14:53:30 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:53:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) 14:53:30 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/127, 0x7f, 0x0) 14:53:30 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x48000000}]}}, &(0x7f00000003c0)=""/252, 0x26, 0xfc, 0x1}, 0x20) 14:53:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f", 0xd, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000180)="f9") [ 367.999149][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 368.007353][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:53:31 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r3}, 0x10) 14:53:31 executing program 4: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) ppoll(&(0x7f0000001300)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[], 0x2000011a) 14:53:31 executing program 5: syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @broadcast, @val, {@ipv4}}, 0x0) [ 368.450734][ T6353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:53:31 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0xe, 0x0, 0x0, 0x0) 14:53:31 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022010}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002860714800", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xb0, 0x0, 0x0, [{{0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcefc62d5ac361ec}}, {0x0, 0x0, 0x5, 0x0, 'fuse\x00'}}]}, 0x0, 0x0}) [ 368.572486][ T124] usb 3-1: new high-speed USB device number 8 using dummy_hcd 14:53:31 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) r2 = dup2(r1, r1) r3 = dup2(r2, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) r4 = socket$inet6_sctp(0x1c, 0x1, 0x84) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) r6 = dup2(r5, r5) r7 = dup2(r6, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000040)={r8, 0x0, 0x0, 0x4c, 0xf001}, 0x14) [ 368.813835][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 368.932903][ T124] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 368.941417][ T124] usb 3-1: config 25 has no interface number 0 [ 368.948007][ T124] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 368.961750][ T124] usb 3-1: config 25 interface 210 has no altsetting 0 [ 369.224432][ T124] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 369.234340][ T124] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 369.242728][ T124] usb 3-1: Product: syz [ 369.940791][ T124] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 370.142547][ T124] gspca_stk1135: reg_w 0x2 err -71 [ 370.148907][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 370.155655][ T124] gspca_stk1135: Sensor write failed [ 370.161126][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 370.167788][ T124] gspca_stk1135: Sensor write failed [ 370.173372][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 370.179844][ T124] gspca_stk1135: Sensor read failed [ 370.185365][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 370.191840][ T124] gspca_stk1135: Sensor read failed [ 370.203038][ T124] gspca_stk1135: Detected sensor type unknown (0x0) [ 370.209841][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 370.216885][ T124] gspca_stk1135: Sensor read failed [ 370.222324][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 370.228800][ T124] gspca_stk1135: Sensor read failed [ 370.234323][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 370.240797][ T124] gspca_stk1135: Sensor write failed [ 370.246413][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 370.252973][ T124] gspca_stk1135: Sensor write failed [ 370.258576][ T124] stk1135: probe of 3-1:25.210 failed with error -71 [ 370.286850][ T124] usb 3-1: USB disconnect, device number 8 14:53:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0xe, 0x0, 0x0, 0x0) 14:53:33 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:53:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:53:33 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) 14:53:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x1f, 0x697, 0x0, 0x1}, 0x48) 14:53:33 executing program 5: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 14:53:34 executing program 1: syz_emit_ethernet(0xe8030000, 0x0, 0x0) 14:53:34 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001980)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}]}}]}, 0x58}}, 0x0) 14:53:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0xe, 0x0, 0x0, 0x0) 14:53:34 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) [ 371.852928][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 371.886319][ T6398] sch_tbf: peakrate 4096 is lower than or equals to rate 4096 ! 14:53:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d40), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 372.133668][ T25] usb 3-1: Using ep0 maxpacket: 8 14:53:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) [ 372.263673][ T25] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 372.272364][ T25] usb 3-1: config 25 has no interface number 0 [ 372.278729][ T25] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 372.292753][ T25] usb 3-1: config 25 interface 210 has no altsetting 0 [ 372.523754][ T25] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 372.533277][ T25] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 372.541466][ T25] usb 3-1: Product: syz [ 373.329373][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 373.553579][ T25] gspca_stk1135: reg_w 0x2 err -71 [ 373.559935][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 373.566522][ T25] gspca_stk1135: Sensor write failed [ 373.572052][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 373.578520][ T25] gspca_stk1135: Sensor write failed [ 373.584097][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 373.590571][ T25] gspca_stk1135: Sensor read failed [ 373.596061][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 373.602584][ T25] gspca_stk1135: Sensor read failed [ 373.607904][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 373.614815][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 373.621290][ T25] gspca_stk1135: Sensor read failed [ 373.626775][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 373.633306][ T25] gspca_stk1135: Sensor read failed [ 373.638733][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 373.645383][ T25] gspca_stk1135: Sensor write failed [ 373.650859][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 373.657397][ T25] gspca_stk1135: Sensor write failed [ 373.663067][ T25] stk1135: probe of 3-1:25.210 failed with error -71 [ 373.739247][ T25] usb 3-1: USB disconnect, device number 9 14:53:37 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:53:37 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) 14:53:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) 14:53:37 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=never,e']) 14:53:37 executing program 5: syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x8000, &(0x7f0000000000)) [ 374.361582][ T6417] tmpfs: Unknown parameter 'e' 14:53:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d40), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) 14:53:37 executing program 1: socket$inet(0x2, 0xa, 0x6b2) 14:53:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) sendto$packet(r0, &(0x7f0000000000)="c41d5bc2a10f0faf41cd3b662f4f", 0x5ee, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 14:53:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev={0xac, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:53:37 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) [ 375.032541][ T124] usb 3-1: new high-speed USB device number 10 using dummy_hcd 14:53:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) [ 375.228159][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 375.322999][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 375.444249][ T124] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 375.452827][ T124] usb 3-1: config 25 has no interface number 0 [ 375.459213][ T124] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 375.472892][ T124] usb 3-1: config 25 interface 210 has no altsetting 0 [ 375.754598][ T124] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 375.763996][ T124] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 375.772322][ T124] usb 3-1: Product: syz [ 376.519662][ T124] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 376.723261][ T124] gspca_stk1135: reg_w 0x2 err -71 [ 376.729647][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 376.736261][ T124] gspca_stk1135: Sensor write failed [ 376.741738][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 376.748335][ T124] gspca_stk1135: Sensor write failed [ 376.753863][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 376.760342][ T124] gspca_stk1135: Sensor read failed [ 376.765866][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 376.772423][ T124] gspca_stk1135: Sensor read failed [ 376.777758][ T124] gspca_stk1135: Detected sensor type unknown (0x0) [ 376.784681][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 376.791150][ T124] gspca_stk1135: Sensor read failed [ 376.796668][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 376.803210][ T124] gspca_stk1135: Sensor read failed [ 376.808585][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 376.815203][ T124] gspca_stk1135: Sensor write failed [ 376.820756][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 376.827318][ T124] gspca_stk1135: Sensor write failed [ 376.832991][ T124] stk1135: probe of 3-1:25.210 failed with error -71 [ 376.896722][ T124] usb 3-1: USB disconnect, device number 10 14:53:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x894a, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 14:53:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8910, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 14:53:40 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) 14:53:40 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x95e2024b8c8707ce, 0x0) 14:53:40 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8971, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 14:53:40 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 14:53:40 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) 14:53:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x64, &(0x7f00000001c0)=0x7, 0x4) 14:53:40 executing program 3: syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[], [{@seclabel}, {@appraise, 0x22}]}) 14:53:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x6, 0x0, 0x0, 0x7fff}, 0x48) 14:53:41 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x8000000) 14:53:41 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) [ 378.412983][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd 14:53:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='uni_xlate=1,shortname=win95,utf8=0,shortname=winnt,discard,']) 14:53:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x0, 0x0, 0x0, 0x400}, 0x48) 14:53:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8}, 0x48) 14:53:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8995, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) [ 378.673169][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 378.803380][ T25] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 378.811876][ T25] usb 3-1: config 25 has no interface number 0 [ 378.818351][ T25] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 378.832129][ T25] usb 3-1: config 25 interface 210 has no altsetting 0 [ 378.983210][ T25] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 378.992615][ T25] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 379.004368][ T25] usb 3-1: Product: syz [ 379.225828][ T6463] FAT-fs (loop0): bogus number of reserved sectors [ 379.233691][ T6463] FAT-fs (loop0): Can't find a valid FAT filesystem 14:53:42 executing program 4: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) [ 379.809292][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 379.839913][ T25] gspca_stk1135: reg_w 0x2 err -71 [ 379.846480][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 379.853348][ T25] gspca_stk1135: Sensor write failed [ 379.858811][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 379.865368][ T25] gspca_stk1135: Sensor write failed [ 379.870832][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 379.877438][ T25] gspca_stk1135: Sensor read failed [ 379.882961][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 379.889447][ T25] gspca_stk1135: Sensor read failed [ 379.894887][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 379.901685][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 379.908326][ T25] gspca_stk1135: Sensor read failed [ 379.913805][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 379.920294][ T25] gspca_stk1135: Sensor read failed [ 379.931428][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 379.938347][ T25] gspca_stk1135: Sensor write failed [ 379.943870][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 379.950337][ T25] gspca_stk1135: Sensor write failed [ 379.956000][ T25] stk1135: probe of 3-1:25.210 failed with error -71 [ 380.062920][ T25] usb 3-1: USB disconnect, device number 11 14:53:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 14:53:43 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8927, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 14:53:43 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8992, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 14:53:43 executing program 0: socketpair(0x23, 0x0, 0x2, &(0x7f0000000180)) 14:53:43 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f0000001340)=""/206}, 0x3d) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x582, 0x7b, 0x0, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000980)={r0, r1}, 0xc) 14:53:43 executing program 4: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) 14:53:43 executing program 5: set_mempolicy(0x3, &(0x7f0000000080)=0x9, 0xfff) 14:53:43 executing program 0: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0xfe57e5502db821a, &(0x7f0000000740)) 14:53:43 executing program 1: socketpair(0x3c, 0x0, 0x0, &(0x7f0000000280)) 14:53:43 executing program 4: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) 14:53:43 executing program 3: syz_open_dev$loop(&(0x7f00000000c0), 0x80000001, 0x0) [ 381.062829][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd 14:53:44 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8993, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) [ 381.312358][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 381.432933][ T25] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 381.441451][ T25] usb 3-1: config 25 has no interface number 0 [ 381.448691][ T25] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 381.462334][ T25] usb 3-1: config 25 interface 210 has no altsetting 0 [ 381.553105][ T25] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 381.566037][ T25] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 381.574707][ T25] usb 3-1: Product: syz [ 382.213854][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 382.232469][ T25] gspca_stk1135: reg_w 0x2 err -71 [ 382.238743][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 382.246489][ T25] gspca_stk1135: Sensor write failed [ 382.252078][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 382.258550][ T25] gspca_stk1135: Sensor write failed [ 382.264119][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 382.270590][ T25] gspca_stk1135: Sensor read failed [ 382.276119][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 382.282642][ T25] gspca_stk1135: Sensor read failed [ 382.287968][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 382.294894][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 382.301422][ T25] gspca_stk1135: Sensor read failed [ 382.306904][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 382.313425][ T25] gspca_stk1135: Sensor read failed [ 382.318757][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 382.325283][ T25] gspca_stk1135: Sensor write failed [ 382.330737][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 382.337248][ T25] gspca_stk1135: Sensor write failed [ 382.342906][ T25] stk1135: probe of 3-1:25.210 failed with error -71 [ 382.366653][ T25] usb 3-1: USB disconnect, device number 12 14:53:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 14:53:45 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) recvmsg$can_bcm(r0, 0x0, 0x0) 14:53:45 executing program 5: syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[], [], 0x22}) 14:53:45 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) 14:53:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000700)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 14:53:45 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=never']) 14:53:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000b80dbf7baf99d74700000000ac14140080000000000000000000000000000000000000000a000030"], 0xb8}}, 0x0) 14:53:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x891e, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 14:53:46 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) 14:53:46 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000100)=0xffffffff, 0x4) 14:53:46 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='huge']) [ 383.278189][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:53:46 executing program 4: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) [ 383.423493][ T6516] tmpfs: Bad value for 'huge' [ 383.482760][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 383.732609][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 383.866970][ T25] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 383.875558][ T25] usb 3-1: config 25 has no interface number 0 [ 383.881932][ T25] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 383.895723][ T25] usb 3-1: config 25 interface 210 has no altsetting 0 [ 383.993513][ T25] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 384.003623][ T25] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 384.011828][ T25] usb 3-1: Product: syz [ 384.669067][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 384.703040][ T25] gspca_stk1135: reg_w 0x2 err -71 [ 384.709464][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 384.716057][ T25] gspca_stk1135: Sensor write failed [ 384.721489][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 384.728047][ T25] gspca_stk1135: Sensor write failed [ 384.739992][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 384.746955][ T25] gspca_stk1135: Sensor read failed [ 384.752455][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 384.758900][ T25] gspca_stk1135: Sensor read failed [ 384.764308][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 384.771094][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 384.777634][ T25] gspca_stk1135: Sensor read failed [ 384.783065][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 384.789505][ T25] gspca_stk1135: Sensor read failed [ 384.794952][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 384.801391][ T25] gspca_stk1135: Sensor write failed [ 384.806969][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 384.813510][ T25] gspca_stk1135: Sensor write failed [ 384.819025][ T25] stk1135: probe of 3-1:25.210 failed with error -71 [ 384.846932][ T25] usb 3-1: USB disconnect, device number 13 14:53:48 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:53:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x40086602, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 14:53:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev={0xac, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:53:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 14:53:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x2}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:53:48 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) 14:53:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x2, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 14:53:48 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7b"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 385.305308][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 385.320413][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:53:48 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) 14:53:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x891f, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 14:53:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000300)={&(0x7f0000000180), 0x7, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x0) 14:53:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) [ 385.730804][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.032516][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 386.275256][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 386.410044][ T25] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 386.418647][ T25] usb 3-1: config 25 has no interface number 0 [ 386.425172][ T25] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 386.438823][ T25] usb 3-1: config 25 interface 210 has no altsetting 0 [ 386.543745][ T25] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 386.553284][ T25] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 386.561453][ T25] usb 3-1: Product: syz [ 387.218931][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 387.246749][ T25] gspca_stk1135: reg_w 0x2 err -71 [ 387.253296][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 387.259746][ T25] gspca_stk1135: Sensor write failed [ 387.265319][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 387.271767][ T25] gspca_stk1135: Sensor write failed [ 387.277304][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 387.283848][ T25] gspca_stk1135: Sensor read failed [ 387.289208][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 387.301867][ T25] gspca_stk1135: Sensor read failed [ 387.307337][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 387.314205][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 387.320666][ T25] gspca_stk1135: Sensor read failed [ 387.326118][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 387.332638][ T25] gspca_stk1135: Sensor read failed [ 387.337976][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 387.344518][ T25] gspca_stk1135: Sensor write failed [ 387.349945][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 387.356462][ T25] gspca_stk1135: Sensor write failed [ 387.362088][ T25] stk1135: probe of 3-1:25.210 failed with error -71 [ 387.395190][ T25] usb 3-1: USB disconnect, device number 14 14:53:50 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:53:50 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000180)) 14:53:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8930, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 14:53:50 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) 14:53:50 executing program 1: syz_mount_image$iso9660(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000840)={[{@session}]}) 14:53:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x64, &(0x7f00000001c0), 0x4) 14:53:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 14:53:51 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 14:53:51 executing program 5: timer_create(0x3, 0x0, &(0x7f00000003c0)) 14:53:51 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) [ 388.136052][ T6550] ISOFS: Unable to identify CD-ROM format. 14:53:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d40), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) 14:53:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89b0, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) [ 388.429477][ T28] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 388.702510][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 388.841672][ T28] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 388.850288][ T28] usb 3-1: config 25 has no interface number 0 [ 388.856828][ T28] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 388.870468][ T28] usb 3-1: config 25 interface 210 has no altsetting 0 [ 388.993128][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 389.002836][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 389.011041][ T28] usb 3-1: Product: syz [ 389.698895][ T28] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 389.727901][ T28] gspca_stk1135: reg_w 0x2 err -71 [ 389.735596][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 389.742273][ T28] gspca_stk1135: Sensor write failed [ 389.747748][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 389.759505][ T28] gspca_stk1135: Sensor write failed [ 389.765424][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 389.771894][ T28] gspca_stk1135: Sensor read failed [ 389.777434][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 389.783987][ T28] gspca_stk1135: Sensor read failed [ 389.789311][ T28] gspca_stk1135: Detected sensor type unknown (0x0) [ 389.796181][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 389.802707][ T28] gspca_stk1135: Sensor read failed [ 389.808084][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 389.814645][ T28] gspca_stk1135: Sensor read failed [ 389.819984][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 389.826517][ T28] gspca_stk1135: Sensor write failed [ 389.831938][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 389.838503][ T28] gspca_stk1135: Sensor write failed [ 389.844204][ T28] stk1135: probe of 3-1:25.210 failed with error -71 [ 389.870202][ T28] usb 3-1: USB disconnect, device number 15 14:53:53 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:53:53 executing program 3: syz_clone(0x1c824400, 0x0, 0x0, 0x0, 0x0, 0x0) 14:53:53 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 14:53:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000000c0)) 14:53:53 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d74700000000ac14140080"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:53:53 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) [ 390.270450][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 14:53:53 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:53:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x891d, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 14:53:53 executing program 5: syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[], [{@seclabel}], 0x22}) 14:53:53 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:53:53 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) [ 390.932312][ T124] usb 3-1: new high-speed USB device number 16 using dummy_hcd 14:53:54 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) [ 391.134085][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 391.202842][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 391.352918][ T124] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 391.361468][ T124] usb 3-1: config 25 has no interface number 0 [ 391.368088][ T124] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 391.382208][ T124] usb 3-1: config 25 interface 210 has no altsetting 0 [ 391.540882][ T124] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 391.550397][ T124] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 391.559320][ T124] usb 3-1: Product: syz [ 392.101571][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.111695][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.229310][ T124] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 392.258542][ T124] gspca_stk1135: reg_w 0x2 err -71 [ 392.265568][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 392.272180][ T124] gspca_stk1135: Sensor write failed [ 392.277631][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 392.284190][ T124] gspca_stk1135: Sensor write failed [ 392.289646][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 392.296157][ T124] gspca_stk1135: Sensor read failed [ 392.301488][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 392.308049][ T124] gspca_stk1135: Sensor read failed [ 392.319128][ T124] gspca_stk1135: Detected sensor type unknown (0x0) [ 392.326401][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 392.332930][ T124] gspca_stk1135: Sensor read failed [ 392.338298][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 392.344838][ T124] gspca_stk1135: Sensor read failed [ 392.350223][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 392.356795][ T124] gspca_stk1135: Sensor write failed [ 392.362319][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 392.368761][ T124] gspca_stk1135: Sensor write failed [ 392.374501][ T124] stk1135: probe of 3-1:25.210 failed with error -71 [ 392.392571][ T124] usb 3-1: USB disconnect, device number 16 14:53:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:53:55 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:53:55 executing program 1: syz_io_uring_setup(0x667a, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3e25, &(0x7f0000000100), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 14:53:55 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:53:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000008040)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000003c0)="82", 0x1}, {&(0x7f0000000440)="15", 0x1}, {&(0x7f00000004c0)="8c", 0x1}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80)=[@rights={{0x10}}], 0x10}}], 0x2, 0x20004844) 14:53:55 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, 0x0, 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) [ 392.830969][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:53:56 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, 0x0, 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) 14:53:56 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:53:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:53:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002900)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 393.382887][ T28] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 393.435951][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:53:56 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:53:56 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, 0x0, 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) [ 393.585355][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 393.692178][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 393.813038][ T28] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 393.821551][ T28] usb 3-1: config 25 has no interface number 0 [ 393.828042][ T28] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 393.841653][ T28] usb 3-1: config 25 interface 210 has no altsetting 0 [ 394.023316][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 394.034820][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 394.044211][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 394.052463][ T28] usb 3-1: Product: syz [ 394.459155][ T28] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 394.882616][ T28] gspca_stk1135: reg_w 0x0 err -71 [ 394.888984][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 394.895648][ T28] gspca_stk1135: Sensor write failed [ 394.901073][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 394.907650][ T28] gspca_stk1135: Sensor write failed [ 394.913203][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 394.919648][ T28] gspca_stk1135: Sensor read failed [ 394.925146][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 394.931591][ T28] gspca_stk1135: Sensor read failed [ 394.936986][ T28] gspca_stk1135: Detected sensor type unknown (0x0) [ 394.943868][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 394.950315][ T28] gspca_stk1135: Sensor read failed [ 394.955825][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 394.962372][ T28] gspca_stk1135: Sensor read failed [ 394.967705][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 394.982832][ T28] gspca_stk1135: Sensor write failed [ 394.988316][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 394.995756][ T28] gspca_stk1135: Sensor write failed [ 395.001333][ T28] stk1135: probe of 3-1:25.210 failed with error -71 [ 395.035324][ T28] usb 3-1: USB disconnect, device number 17 14:53:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:53:58 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:53:58 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xd9}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 14:53:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000780)) 14:53:58 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) 14:53:58 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:53:58 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:53:58 executing program 5: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002900)={0xa, 0x0, 0x0, @loopback}, 0x1c) 14:53:58 executing program 1: r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 14:53:59 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:53:59 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x0, 0x0, 0x0, &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:53:59 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) [ 396.212300][ T3571] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 396.472566][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 396.593277][ T3571] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 396.601779][ T3571] usb 3-1: config 25 has no interface number 0 [ 396.608800][ T3571] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 396.626222][ T3571] usb 3-1: config 25 interface 210 has no altsetting 0 [ 396.854112][ T3571] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 396.863751][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 396.872509][ T3571] usb 3-1: Product: syz [ 397.259090][ T3571] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 397.682474][ T3571] gspca_stk1135: reg_w 0x0 err -71 [ 397.688811][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 397.695420][ T3571] gspca_stk1135: Sensor write failed [ 397.700878][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 397.708070][ T3571] gspca_stk1135: Sensor write failed [ 397.713597][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 397.720039][ T3571] gspca_stk1135: Sensor read failed [ 397.725531][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 397.732065][ T3571] gspca_stk1135: Sensor read failed [ 397.737360][ T3571] gspca_stk1135: Detected sensor type unknown (0x0) [ 397.749830][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 397.756780][ T3571] gspca_stk1135: Sensor read failed [ 397.762269][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 397.768715][ T3571] gspca_stk1135: Sensor read failed [ 397.774350][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 397.780887][ T3571] gspca_stk1135: Sensor write failed [ 397.786465][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 397.793010][ T3571] gspca_stk1135: Sensor write failed [ 397.798525][ T3571] stk1135: probe of 3-1:25.210 failed with error -71 [ 397.833089][ T3571] usb 3-1: USB disconnect, device number 18 14:54:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:01 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x4100, 0x0) 14:54:01 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:01 executing program 5: setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000080)={@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, {0x0}, 0x0}, 0xa0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000800)) 14:54:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:01 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='max=-']) [ 398.322785][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 14:54:01 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, 0x0) 14:54:01 executing program 5: socketpair(0x0, 0x80000, 0x0, &(0x7f0000000800)) 14:54:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan3\x00'}) [ 398.923438][ T3571] usb 3-1: new high-speed USB device number 19 using dummy_hcd 14:54:02 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 399.078718][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.194125][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 399.313618][ T3571] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 399.322291][ T3571] usb 3-1: config 25 has no interface number 0 [ 399.328668][ T3571] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 399.342443][ T3571] usb 3-1: config 25 interface 210 has no altsetting 0 [ 399.563454][ T3571] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 399.572872][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 399.581163][ T3571] usb 3-1: Product: syz [ 400.001903][ T3571] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 400.423110][ T3571] gspca_stk1135: reg_w 0x0 err -71 [ 400.429466][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 400.436252][ T3571] gspca_stk1135: Sensor write failed [ 400.441724][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 400.448455][ T3571] gspca_stk1135: Sensor write failed [ 400.453986][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 400.460494][ T3571] gspca_stk1135: Sensor read failed [ 400.465976][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 400.472531][ T3571] gspca_stk1135: Sensor read failed [ 400.477923][ T3571] gspca_stk1135: Detected sensor type unknown (0x0) [ 400.484812][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 400.491252][ T3571] gspca_stk1135: Sensor read failed [ 400.496765][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 400.509480][ T3571] gspca_stk1135: Sensor read failed [ 400.515375][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 400.521821][ T3571] gspca_stk1135: Sensor write failed [ 400.527334][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 400.533861][ T3571] gspca_stk1135: Sensor write failed [ 400.539376][ T3571] stk1135: probe of 3-1:25.210 failed with error -71 [ 400.560596][ T3571] usb 3-1: USB disconnect, device number 19 14:54:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:04 executing program 1: setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000080)={@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, {0x0}, 0x0}, 0xa0) socketpair(0x10, 0x0, 0x0, &(0x7f0000000800)) 14:54:04 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, 0x0) 14:54:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 14:54:04 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 401.087352][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:04 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4800) 14:54:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 14:54:04 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, 0x0) 14:54:04 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:04 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:04 executing program 1: socketpair(0x10, 0x80000, 0x0, &(0x7f0000000800)) [ 401.601293][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 401.622552][ T124] usb 3-1: new high-speed USB device number 20 using dummy_hcd 14:54:04 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x20, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 14:54:04 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[]) 14:54:04 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:04 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 401.873059][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 401.992706][ T124] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 402.001213][ T124] usb 3-1: config 25 has no interface number 0 [ 402.007865][ T124] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 402.021610][ T124] usb 3-1: config 25 interface 210 has no altsetting 0 14:54:05 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000001480)) [ 402.202638][ T124] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 402.212859][ T124] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 402.221064][ T124] usb 3-1: Product: syz [ 402.230098][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 402.649324][ T124] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 403.090150][ T124] gspca_stk1135: reg_w 0x0 err -71 [ 403.096750][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 403.104718][ T124] gspca_stk1135: Sensor write failed [ 403.110197][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 403.116703][ T124] gspca_stk1135: Sensor write failed [ 403.122251][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 403.128727][ T124] gspca_stk1135: Sensor read failed [ 403.134233][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 403.140677][ T124] gspca_stk1135: Sensor read failed [ 403.146070][ T124] gspca_stk1135: Detected sensor type unknown (0x0) [ 403.152949][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 403.159413][ T124] gspca_stk1135: Sensor read failed [ 403.164915][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 403.171395][ T124] gspca_stk1135: Sensor read failed [ 403.176921][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 403.183450][ T124] gspca_stk1135: Sensor write failed [ 403.188912][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 403.195522][ T124] gspca_stk1135: Sensor write failed [ 403.201125][ T124] stk1135: probe of 3-1:25.210 failed with error -71 [ 403.225227][ T124] usb 3-1: USB disconnect, device number 20 14:54:06 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:06 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[]) 14:54:06 executing program 5: r0 = socket(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_cred(r1, 0xffff, 0x1022, 0x0, 0x0) 14:54:06 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:06 executing program 1: socketpair(0x10, 0x0, 0x0, &(0x7f0000000800)) 14:54:06 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:06 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000013c0)={0x0, 'lo\x00'}) [ 403.749584][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:06 executing program 5: socket$tipc(0x1e, 0x0, 0x0) 14:54:06 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[]) 14:54:07 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 404.148696][ T6739] 8021q: VLANs not supported on lo 14:54:07 executing program 1: r0 = socket(0x18, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x18, 0x1}, 0xc) 14:54:07 executing program 5: socketpair(0x2b, 0x0, 0x1, &(0x7f0000000180)) [ 404.352812][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 404.433088][ T124] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 404.672446][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 404.793131][ T124] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 404.801713][ T124] usb 3-1: config 25 has no interface number 0 [ 404.812373][ T124] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 404.826480][ T124] usb 3-1: config 25 interface 210 has no altsetting 0 [ 404.963400][ T124] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 404.973552][ T124] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 404.981764][ T124] usb 3-1: Product: syz [ 405.348914][ T124] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 405.772876][ T124] gspca_stk1135: reg_w 0x0 err -71 [ 405.779222][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 405.786958][ T124] gspca_stk1135: Sensor write failed [ 405.792571][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 405.799010][ T124] gspca_stk1135: Sensor write failed [ 405.804575][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 405.811017][ T124] gspca_stk1135: Sensor read failed [ 405.816552][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 405.823090][ T124] gspca_stk1135: Sensor read failed [ 405.828435][ T124] gspca_stk1135: Detected sensor type unknown (0x0) [ 405.835376][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 405.841823][ T124] gspca_stk1135: Sensor read failed [ 405.847310][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 405.853844][ T124] gspca_stk1135: Sensor read failed [ 405.859191][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 405.865772][ T124] gspca_stk1135: Sensor write failed [ 405.871198][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 405.877726][ T124] gspca_stk1135: Sensor write failed [ 405.883400][ T124] stk1135: probe of 3-1:25.210 failed with error -71 [ 405.919028][ T124] usb 3-1: USB disconnect, device number 21 14:54:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:09 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB]) 14:54:09 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:09 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:09 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0x0, 0xfffffc}, 0x8) 14:54:09 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet(r0, &(0x7f0000000040), 0xc) [ 406.326954][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:09 executing program 5: r0 = socket$inet6(0x18, 0x1, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0xa, 0x0, 0x0, &(0x7f0000000000)=[{0x10}], 0x10}, 0x0) 14:54:09 executing program 1: syz_emit_ethernet(0x15, &(0x7f00000000c0), 0x0) 14:54:09 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB]) 14:54:09 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x800, 0xff}, 0x48) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x10) [ 406.932318][ T3571] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 406.977055][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x5, 0xf8, &(0x7f0000000240)=""/248, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 407.173996][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 407.293114][ T3571] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 407.301644][ T3571] usb 3-1: config 25 has no interface number 0 [ 407.308759][ T3571] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 407.322502][ T3571] usb 3-1: config 25 interface 210 has no altsetting 0 [ 407.503949][ T3571] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 407.513432][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 407.521654][ T3571] usb 3-1: Product: syz [ 407.968757][ T3571] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 408.393178][ T3571] gspca_stk1135: reg_w 0x0 err -71 [ 408.399532][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 408.406239][ T3571] gspca_stk1135: Sensor write failed [ 408.411715][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 408.418932][ T3571] gspca_stk1135: Sensor write failed [ 408.424544][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 408.431022][ T3571] gspca_stk1135: Sensor read failed [ 408.436700][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 408.443198][ T3571] gspca_stk1135: Sensor read failed [ 408.448477][ T3571] gspca_stk1135: Detected sensor type unknown (0x0) [ 408.455369][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 408.461894][ T3571] gspca_stk1135: Sensor read failed [ 408.467485][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 408.474052][ T3571] gspca_stk1135: Sensor read failed [ 408.479352][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 408.486019][ T3571] gspca_stk1135: Sensor write failed [ 408.497279][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 408.504303][ T3571] gspca_stk1135: Sensor write failed [ 408.509914][ T3571] stk1135: probe of 3-1:25.210 failed with error -71 [ 408.530995][ T3571] usb 3-1: USB disconnect, device number 22 14:54:11 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB]) 14:54:11 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x14f000) 14:54:11 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f00000001c0)=""/185, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1806}, 0x80) 14:54:12 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 409.058452][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:12 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max']) 14:54:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x1a) 14:54:12 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:12 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:12 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f00000001c0)=""/185, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x180a}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 409.576919][ T6791] devpts: called with bogus options 14:54:12 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xe, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) [ 409.642914][ T124] usb 3-1: new high-speed USB device number 23 using dummy_hcd 14:54:12 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max']) 14:54:12 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 409.793241][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000002100)='cmdline\x00') read$FUSE(r0, 0x0, 0xa) [ 409.882585][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 410.023756][ T124] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 410.036034][ T124] usb 3-1: config 25 has no interface number 0 [ 410.042843][ T124] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 410.056468][ T124] usb 3-1: config 25 interface 210 has no altsetting 0 14:54:13 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:13 executing program 1: openat$binderfs(0xffffff9c, &(0x7f00000004c0)='./binderfs/binder1\x00', 0xcfa7028c6b4450c, 0x0) [ 410.134670][ T6803] devpts: called with bogus options [ 410.263066][ T124] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 410.272565][ T124] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 410.280779][ T124] usb 3-1: Product: syz [ 410.449643][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 410.714318][ T124] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 411.136594][ T124] gspca_stk1135: reg_w 0x0 err -71 [ 411.142956][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 411.149412][ T124] gspca_stk1135: Sensor write failed [ 411.154964][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 411.161437][ T124] gspca_stk1135: Sensor write failed [ 411.166902][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 411.173455][ T124] gspca_stk1135: Sensor read failed [ 411.178795][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 411.185331][ T124] gspca_stk1135: Sensor read failed [ 411.190689][ T124] gspca_stk1135: Detected sensor type unknown (0x0) [ 411.197533][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 411.204087][ T124] gspca_stk1135: Sensor read failed [ 411.209451][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 411.215978][ T124] gspca_stk1135: Sensor read failed [ 411.221336][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 411.227843][ T124] gspca_stk1135: Sensor write failed [ 411.233357][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 411.239820][ T124] gspca_stk1135: Sensor write failed [ 411.245470][ T124] stk1135: probe of 3-1:25.210 failed with error -71 [ 411.271731][ T124] usb 3-1: USB disconnect, device number 23 14:54:14 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:14 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max']) 14:54:14 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0xc0045878, 0x0) 14:54:14 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:14 executing program 1: futex(&(0x7f0000000080), 0x5, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180), 0x0) [ 411.744605][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 411.785386][ T6821] devpts: called with bogus options 14:54:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8903, &(0x7f0000000080)={'gretap0\x00', 0x0}) 14:54:15 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:15 executing program 5: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x80000001, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) 14:54:15 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=']) 14:54:15 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) [ 412.313265][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 412.412492][ T124] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 412.429802][ T6835] devpts: called with bogus options [ 412.672945][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 412.796861][ T124] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 412.805501][ T124] usb 3-1: config 25 has no interface number 0 [ 412.812522][ T124] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 412.826116][ T124] usb 3-1: config 25 interface 210 has no altsetting 0 [ 412.913117][ T124] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 412.922959][ T124] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 412.931194][ T124] usb 3-1: Product: syz [ 413.359007][ T124] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 413.774514][ T124] gspca_stk1135: reg_w 0x0 err -71 [ 413.780871][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 413.787474][ T124] gspca_stk1135: Sensor write failed [ 413.793004][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 413.799478][ T124] gspca_stk1135: Sensor write failed [ 413.805064][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 413.811528][ T124] gspca_stk1135: Sensor read failed [ 413.816990][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 413.823548][ T124] gspca_stk1135: Sensor read failed [ 413.828845][ T124] gspca_stk1135: Detected sensor type unknown (0x0) [ 413.835724][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 413.842257][ T124] gspca_stk1135: Sensor read failed [ 413.847629][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 413.854198][ T124] gspca_stk1135: Sensor read failed [ 413.859578][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 413.866120][ T124] gspca_stk1135: Sensor write failed [ 413.871667][ T124] gspca_stk1135: serial bus timeout: status=0x00 [ 413.878221][ T124] gspca_stk1135: Sensor write failed [ 413.883881][ T124] stk1135: probe of 3-1:25.210 failed with error -71 [ 413.904520][ T124] usb 3-1: USB disconnect, device number 24 14:54:17 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:17 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:17 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=']) 14:54:17 executing program 5: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x80000001, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) 14:54:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 14:54:17 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) [ 414.390838][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:17 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 414.502697][ T6846] devpts: called with bogus options 14:54:17 executing program 5: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x80000001, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) 14:54:17 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000200)=ANY=[@ANYBLOB='max=']) 14:54:17 executing program 5: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x80000001, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) 14:54:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) [ 415.097405][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 415.113113][ T3571] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 415.151437][ T6859] devpts: called with bogus options [ 415.361529][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 415.483865][ T3571] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 415.493406][ T3571] usb 3-1: config 25 has no interface number 0 [ 415.499781][ T3571] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 415.513643][ T3571] usb 3-1: config 25 interface 210 has no altsetting 0 [ 415.623349][ T3571] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 415.632869][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 415.641079][ T3571] usb 3-1: Product: syz [ 416.018560][ T3571] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 416.442476][ T3571] gspca_stk1135: reg_w 0x0 err -71 [ 416.448908][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 416.455643][ T3571] gspca_stk1135: Sensor write failed [ 416.461100][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 416.467683][ T3571] gspca_stk1135: Sensor write failed [ 416.473250][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 416.485563][ T3571] gspca_stk1135: Sensor read failed [ 416.490976][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 416.498001][ T3571] gspca_stk1135: Sensor read failed [ 416.503434][ T3571] gspca_stk1135: Detected sensor type unknown (0x0) [ 416.510623][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 416.517193][ T3571] gspca_stk1135: Sensor read failed [ 416.522649][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 416.529091][ T3571] gspca_stk1135: Sensor read failed [ 416.534546][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 416.540993][ T3571] gspca_stk1135: Sensor write failed [ 416.546514][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 416.553048][ T3571] gspca_stk1135: Sensor write failed [ 416.558569][ T3571] stk1135: probe of 3-1:25.210 failed with error -71 [ 416.584688][ T3571] usb 3-1: USB disconnect, device number 25 [ 416.597610][ T4427] udevd[4427]: setting mode of /dev/bus/usb/003/025 to 020664 failed: No such file or directory [ 416.609063][ T4427] udevd[4427]: setting owner of /dev/bus/usb/003/025 to uid=0, gid=0 failed: No such file or directory 14:54:20 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:20 executing program 0: madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:20 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:20 executing program 4: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000080)=0x80000001, 0xa, 0x0) 14:54:20 executing program 5: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f00007ff000/0x800000)=nil, 0x800000) 14:54:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') read$FUSE(r0, 0x0, 0x7) [ 417.035383][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:20 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x12, 0x0}, 0x80) 14:54:20 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:20 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') read$FUSE(r0, 0x0, 0x700) [ 417.526356][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:20 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000004140)='mounts\x00') read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 14:54:20 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3fc, 0x0, 0x1f4, 0x2c4, 0x2c4, 0x94, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'syzkaller1\x00', 'vlan1\x00'}, 0x0, 0x70, 0x8f}, @ECN={0x24}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'vlan1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'gretap0\x00', 'team_slave_1\x00'}, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@ah={{0x2c}}]}, @TTL={0x24}}, {{@ip={@multicast2, @loopback, 0x0, 0x0, '\x00', 'caif0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa4}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x458) 14:54:21 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:21 executing program 0: madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 418.049786][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f00000008c0)) 14:54:21 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 418.545060][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000002100)='cmdline\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0xffffffffffffff8d) 14:54:21 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) read$FUSE(r0, 0x0, 0x0) 14:54:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0xa}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:54:21 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:21 executing program 5: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 14:54:22 executing program 0: madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:22 executing program 1: prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x1000)=nil) 14:54:22 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) [ 419.266133][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r1, 0x109}, 0x14}}, 0x0) 14:54:22 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b8"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:54:22 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='environ\x00') read$FUSE(r0, 0x0, 0x0) [ 419.747499][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) 14:54:23 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b8"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:23 executing program 1: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x2003, 0x0) read$watch_queue(r0, 0x0, 0x0) 14:54:23 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 420.415588][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:23 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/vlan/config\x00') read$FUSE(r0, 0x0, 0x0) 14:54:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') read$FUSE(r0, 0x0, 0x0) 14:54:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='net/if_inet6\x00') read$FUSE(r0, 0x0, 0x0) 14:54:23 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b8"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:23 executing program 4: mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 14:54:23 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:54:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') read$FUSE(r0, 0x0, 0x700) [ 421.011342][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:24 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:24 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000002080)='net/ipv6_route\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 14:54:24 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:54:24 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x688843, 0x0) fcntl$getown(r0, 0x9) [ 421.527527][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:24 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:24 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 14:54:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={0x0}}, 0x0) 14:54:25 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) [ 422.032534][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:25 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:25 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:25 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:25 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0xfffffffffffffe52) 14:54:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') read$FUSE(r0, 0x0, 0x0) [ 422.585779][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:25 executing program 1: syz_mount_image$msdos(&(0x7f0000001880), &(0x7f00000018c0)='./file1\x00', 0x0, 0x0, &(0x7f0000002e40), 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB='nocase,nfs=nostale_ro,dmask=00000000000000000000001,dots,gid=']) 14:54:25 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d7"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:25 executing program 5: set_mempolicy(0x2, &(0x7f0000000040)=0x5, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) [ 422.990569][ T6982] FAT-fs (loop1): Unrecognized mount option "gid=" or missing value 14:54:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:26 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x5, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3d0, 0x0, 0x1f4, 0x2c4, 0x2c4, 0x94, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'syzkaller1\x00', 'vlan1\x00'}, 0x0, 0x70, 0x94}, @ECN={0x24}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'vlan1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'gretap0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@multicast2, @loopback, 0x0, 0x0, '\x00', 'caif0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa4}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x42c) [ 423.344993][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:26 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:54:26 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d7"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:26 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3fc, 0x0, 0x1f4, 0x2c4, 0x2c4, 0x94, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'syzkaller1\x00', 'vlan1\x00'}, 0x0, 0x70, 0x90}, @ECN={0x24}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'vlan1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'gretap0\x00', 'team_slave_1\x00'}, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@ah={{0x2c}}]}, @TTL={0x24}}, {{@ip={@multicast2, @loopback, 0x0, 0x0, '\x00', 'caif0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa4}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x458) 14:54:26 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000040)='GPL\x00', 0x6, 0xa9, &(0x7f0000000080)=""/169, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 423.693818][ T3571] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 423.882349][ T3571] usb 3-1: device descriptor read/64, error 18 [ 423.889823][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') read$FUSE(r0, 0x0, 0x300) 14:54:27 executing program 4: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x80000001, 0x2, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 14:54:27 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d7"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:27 executing program 1: munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) [ 424.152516][ T3571] usb 3-1: new high-speed USB device number 27 using dummy_hcd 14:54:27 executing program 5: set_mempolicy(0x3c4fa7d487d52237, 0x0, 0x0) [ 424.372408][ T3571] usb 3-1: device descriptor read/64, error 18 [ 424.493144][ T3571] usb usb3-port1: attempt power cycle [ 424.628507][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 424.917036][ T3571] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 425.103188][ T3571] usb 3-1: device descriptor read/8, error -61 [ 425.382300][ T3571] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 425.584247][ T3571] usb 3-1: device descriptor read/8, error -61 [ 425.706188][ T3571] usb usb3-port1: unable to enumerate USB device 14:54:29 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ldst, @exit, @ldst], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:54:29 executing program 5: sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x0) 14:54:29 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:29 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x12, 0x0, 0x0) 14:54:29 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:29 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:29 executing program 1: set_mempolicy(0x2, &(0x7f0000000040)=0x5, 0x40) 14:54:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:54:29 executing program 5: timer_create(0x9, &(0x7f0000000280)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x7ffff000}, 0x7}, 0x0) io_submit(0x0, 0x0, 0x0) 14:54:29 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') read$FUSE(r0, 0x0, 0x0) [ 427.162544][ T3571] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 427.412494][ T3571] usb 3-1: device descriptor read/64, error 18 [ 427.684120][ T3571] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 427.882250][ T3571] usb 3-1: device descriptor read/64, error 18 [ 428.004491][ T3571] usb usb3-port1: attempt power cycle [ 428.412758][ T3571] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 428.584990][ T3571] usb 3-1: device descriptor read/8, error -61 [ 428.852247][ T3571] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 429.026755][ T3571] usb 3-1: device descriptor read/8, error -61 [ 429.152661][ T3571] usb usb3-port1: unable to enumerate USB device 14:54:32 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:32 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x14, 0x0, 0x0) 14:54:32 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:32 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 14:54:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_elf64(r0, 0x0, 0x0) 14:54:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x244, 0xffffffff, 0xffffffff, 0x244, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_batadv\x00', 'ip6_vti0\x00', {}, {}, 0x0, 0x0, 0xd3a2f2a166f67fd4}, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @empty, [], [], 'wlan0\x00', 'caif0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f4) 14:54:33 executing program 1: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x0, 0x0, 0x0) 14:54:33 executing program 5: r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x8a20}) 14:54:33 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 14:54:33 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x41, 0x0, 0x0) 14:54:33 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:33 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x12, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3d0, 0x0, 0x1f4, 0x2c4, 0x2c4, 0x94, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'syzkaller1\x00', 'vlan1\x00'}, 0x0, 0x70, 0x94}, @ECN={0x24}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'vlan1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'gretap0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@multicast2, @loopback, 0x0, 0x0, '\x00', 'caif0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa4}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x42c) [ 430.632567][ T28] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 430.823045][ T28] usb 3-1: device descriptor read/64, error 18 [ 431.092927][ T28] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 431.292390][ T28] usb 3-1: device descriptor read/64, error 18 [ 431.433541][ T28] usb usb3-port1: attempt power cycle [ 431.862299][ T28] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 432.062501][ T28] usb 3-1: device descriptor read/8, error -61 [ 432.332203][ T28] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 432.562589][ T28] usb 3-1: device descriptor read/8, error -61 [ 432.682775][ T28] usb usb3-port1: unable to enumerate USB device 14:54:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:36 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1600bd74, 0x0, 0x0) 14:54:36 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 14:54:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') read$FUSE(r0, 0x0, 0x0) 14:54:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r0, 0x0, 0x0) 14:54:36 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$FUSE(r0, 0x0, 0x0) 14:54:36 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14:54:36 executing program 4: set_mempolicy(0x2, &(0x7f0000000040)=0x5, 0x40) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 14:54:36 executing program 1: setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000900)="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", 0x2fb) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x40000, &(0x7f0000000840), 0x0, &(0x7f00000008c0)={[{}]}) 14:54:37 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x10, 0x0, 0x0) [ 434.032372][ T28] usb 3-1: new high-speed USB device number 38 using dummy_hcd 14:54:37 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 434.235887][ T28] usb 3-1: device descriptor read/64, error 18 [ 434.532246][ T28] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 434.743029][ T28] usb 3-1: device descriptor read/64, error 18 [ 434.863057][ T28] usb usb3-port1: attempt power cycle [ 435.292773][ T28] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 435.484905][ T28] usb 3-1: device descriptor read/8, error -61 [ 435.752209][ T28] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 435.962535][ T28] usb 3-1: device descriptor read/8, error -61 [ 436.096718][ T28] usb usb3-port1: unable to enumerate USB device 14:54:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:39 executing program 4: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) 14:54:39 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14:54:39 executing program 5: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080), 0x0, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 14:54:39 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') read$FUSE(r0, 0x0, 0x63) 14:54:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xac) 14:54:40 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x7f00, 0x3, &(0x7f0000000080)=0x80000001, 0x2, 0x0) 14:54:40 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14:54:40 executing program 5: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x0, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 14:54:40 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 437.292685][ T7106] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 14:54:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 437.403600][ T3571] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 437.592885][ T3571] usb 3-1: device descriptor read/64, error 18 [ 437.862404][ T3571] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 438.063004][ T3571] usb 3-1: device descriptor read/64, error 18 [ 438.183428][ T3571] usb usb3-port1: attempt power cycle [ 438.605901][ T3571] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 438.782435][ T3571] usb 3-1: device descriptor read/8, error -61 [ 439.052185][ T3571] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 439.222432][ T3571] usb 3-1: device descriptor read/8, error -61 [ 439.342517][ T3571] usb usb3-port1: unable to enumerate USB device 14:54:43 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:54:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') read$FUSE(r0, 0x0, 0x0) 14:54:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, 0x0, 0x300) 14:54:43 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:43 executing program 4: mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 14:54:43 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x22, 0x0, 0x0) 14:54:43 executing program 4: getresuid(&(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)) 14:54:43 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:54:43 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:54:43 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 440.812274][ T3571] usb 3-1: new high-speed USB device number 46 using dummy_hcd 14:54:43 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xf, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3d0, 0x0, 0x1f4, 0x2c4, 0x2c4, 0x94, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'syzkaller1\x00', 'vlan1\x00'}, 0x0, 0x70, 0x94}, @ECN={0x24}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'vlan1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'gretap0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@multicast2, @loopback, 0x0, 0x0, '\x00', 'caif0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netdevsim0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa4}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x42c) [ 441.002601][ T3571] usb 3-1: device descriptor read/64, error 18 [ 441.292873][ T3571] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 441.493054][ T3571] usb 3-1: device descriptor read/64, error 18 [ 441.617980][ T3571] usb usb3-port1: attempt power cycle [ 442.042268][ T3571] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 442.213022][ T3571] usb 3-1: device descriptor read/8, error -61 [ 442.482256][ T3571] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 442.662543][ T3571] usb 3-1: device descriptor read/8, error -61 [ 442.786019][ T3571] usb usb3-port1: unable to enumerate USB device 14:54:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e00020001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:46 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ioctl$EVIOCGBITKEY(r0, 0x5452, &(0x7f00000000c0)=""/67) 14:54:46 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:46 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:46 executing program 4: r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 14:54:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x101, 0x10001, 0xd584f291, 0x0, 0x1}, 0x48) 14:54:46 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 14:54:46 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000180)={0x0, 'veth1_to_bridge\x00'}, 0x18) 14:54:46 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x0) unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8000000006}]}, 0x10) unshare(0x60000100) unshare(0x40000000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240100d3, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) unshare(0x40400) shutdown(r0, 0x1) 14:54:47 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:47 executing program 5: getpgrp(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$userns(r0, 0x0) getresgid(0x0, 0x0, &(0x7f0000000140)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 444.322878][ T3571] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 444.669613][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 444.832443][ T3571] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 444.840420][ T3571] usb 3-1: can't read configurations, error -61 [ 445.133281][ T3571] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 445.383037][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 445.546527][ T3571] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 445.554733][ T3571] usb 3-1: can't read configurations, error -61 [ 445.602277][ T3571] usb usb3-port1: attempt power cycle [ 446.042577][ T3571] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 446.132979][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 446.292955][ T3571] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 446.300927][ T3571] usb 3-1: can't read configurations, error -61 [ 446.465505][ T3571] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 446.562499][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 446.722645][ T3571] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 446.730535][ T3571] usb 3-1: can't read configurations, error -61 [ 446.738022][ T3571] usb usb3-port1: unable to enumerate USB device 14:54:50 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e00020001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:50 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000080)="91", 0x1) 14:54:50 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:50 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xfffffc8f) fcntl$setpipe(r0, 0x407, 0x10001) 14:54:50 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x4000}]}) 14:54:50 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x1b, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 14:54:50 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}}, 0xb8}}, 0x0) 14:54:50 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000000100)) 14:54:50 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r0, 0x1, 0x15, 0x0, &(0x7f0000000200)) [ 447.570221][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 447.617996][ T28] usb 3-1: new high-speed USB device number 54 using dummy_hcd 14:54:50 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/net', 0x0, 0x0) openat$incfs(r0, &(0x7f00000000c0)='.pending_reads\x00', 0x0, 0x0) 14:54:50 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 447.872544][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 448.032934][ T28] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 448.040774][ T28] usb 3-1: can't read configurations, error -61 [ 448.245496][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 448.255992][ T28] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 448.516383][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 448.672595][ T28] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 448.680498][ T28] usb 3-1: can't read configurations, error -61 [ 448.687644][ T28] usb usb3-port1: attempt power cycle [ 449.112397][ T28] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 449.222654][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 449.402439][ T28] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 449.410437][ T28] usb 3-1: can't read configurations, error -61 [ 449.562310][ T28] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 449.667962][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 449.842493][ T28] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 449.850388][ T28] usb 3-1: can't read configurations, error -61 [ 449.876661][ T28] usb usb3-port1: unable to enumerate USB device 14:54:53 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e00020001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:53 executing program 4: keyctl$KEYCTL_CAPABILITIES(0x14, 0x0, 0x0) 14:54:53 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:53 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private}, @redirect={0x12, 0x0, 0x0, @private, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}}}, 0x0) 14:54:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) 14:54:53 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}}, 0xb8}}, 0x0) [ 450.407879][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:53 executing program 1: r0 = io_uring_setup(0x7ec2, &(0x7f0000000180)) syz_io_uring_setup(0x7cff, &(0x7f0000000000), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x62d2, 0x0, 0x0, 0x0, 0x0) 14:54:53 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000040)={0x26, 0x0, 0xd0e3}, 0x0) 14:54:53 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:54:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="de", 0x1) 14:54:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8934, 0x0) [ 451.000396][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:54 executing program 1: mq_open(&(0x7f0000001080)='.\x00', 0x0, 0x0, 0x0) [ 451.093301][ T28] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 451.352344][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 451.512965][ T28] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 451.520795][ T28] usb 3-1: can't read configurations, error -61 [ 451.715688][ T28] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 451.972213][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 452.142466][ T28] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 452.150270][ T28] usb 3-1: can't read configurations, error -61 [ 452.158014][ T28] usb usb3-port1: attempt power cycle [ 452.572353][ T28] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 452.666172][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 452.822462][ T28] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 452.834029][ T28] usb 3-1: can't read configurations, error -61 [ 452.992352][ T28] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 453.082574][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 453.243510][ T28] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 453.251409][ T28] usb 3-1: can't read configurations, error -61 [ 453.259499][ T28] usb usb3-port1: unable to enumerate USB device [ 453.546189][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.555888][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 14:54:56 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e00020001090212000119000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:54:56 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:54:56 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:54:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000680)) 14:54:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x2, {{0x2, 0x0, @loopback}}}, 0x88) 14:54:56 executing program 1: unshare(0x400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/tty/drivers\x00', 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) [ 453.882999][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x17, 0x0, &(0x7f0000000100)) 14:54:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x24, 0x0, 0x0) 14:54:57 executing program 1: keyctl$KEYCTL_CAPABILITIES(0xc, &(0x7f0000000040)=""/4096, 0x1000) 14:54:57 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000014000100000000000000000000000000b80dbf7baf99d747"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:54:57 executing program 4: keyctl$KEYCTL_CAPABILITIES(0x6, 0x0, 0x0) [ 454.492243][ T28] usb 3-1: new high-speed USB device number 62 using dummy_hcd 14:54:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x16, 0x0, 0x0) [ 454.554129][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 454.742317][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 454.874148][ T28] usb 3-1: config 25 has an invalid descriptor of length 0, skipping remainder of the config [ 454.888403][ T28] usb 3-1: config 25 has 0 interfaces, different from the descriptor's value: 1 [ 455.013124][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 455.023359][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 455.031562][ T28] usb 3-1: Product: syz 14:55:00 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e00020001090212000119000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:00 executing program 5: r0 = getpgid(0x0) rt_tgsigqueueinfo(r0, r0, 0x12, &(0x7f0000000200)={0x0, 0x0, 0xfffffffd}) 14:55:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x12, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 14:55:00 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:00 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f00000009c0)={[{@fat=@gid={'gid', 0x3d, 0xee01}}]}) 14:55:00 executing program 1: openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001ec0), 0x1, 0x0) [ 457.182943][ T3571] usb 3-1: USB disconnect, device number 62 [ 457.340799][ T7267] FAT-fs (loop4): bogus number of reserved sectors [ 457.348412][ T7267] FAT-fs (loop4): Can't find a valid FAT filesystem 14:55:00 executing program 3: openat$random(0xffffffffffffff9c, 0x0, 0x410800, 0x0) 14:55:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000000), 0x4) 14:55:00 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x3, 0x0, 0x0) 14:55:00 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x6, &(0x7f0000000000), 0x4) 14:55:00 executing program 3: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000180), 0x0, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x3]}, 0x8}) [ 457.892983][ T3571] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 458.132888][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 458.267094][ T3571] usb 3-1: config 25 has an invalid descriptor of length 0, skipping remainder of the config [ 458.277831][ T3571] usb 3-1: config 25 has 0 interfaces, different from the descriptor's value: 1 [ 458.373376][ T3571] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 458.383333][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 458.391548][ T3571] usb 3-1: Product: syz 14:55:03 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e00020001090212000119000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000000), 0x4) 14:55:03 executing program 1: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @mcast1, @dev}}}}, 0x0) 14:55:03 executing program 4: unshare(0x20400) unshare(0x28060480) 14:55:03 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:03 executing program 3: socket(0x1d, 0x0, 0x7fffffff) [ 460.587074][ T3571] usb 3-1: USB disconnect, device number 63 14:55:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000100)) 14:55:03 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x453, 0x0, 0x0, 0x0, 'e'}, 0x14}}, 0x0) 14:55:03 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r0, 0x300, 0x11, 0x0, 0x0) 14:55:03 executing program 4: r0 = getpid() syz_open_procfs$namespace(r0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) 14:55:04 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:04 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4bfb, &(0x7f0000000180)=""/207) [ 461.287923][ T24] audit: type=1107 audit(1660661704.344:31): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='e' [ 461.372474][ T28] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 461.622609][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 461.743628][ T28] usb 3-1: config 25 has an invalid descriptor of length 0, skipping remainder of the config [ 461.754273][ T28] usb 3-1: config 25 has 0 interfaces, different from the descriptor's value: 1 [ 461.853127][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 461.862499][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 461.870766][ T28] usb 3-1: Product: syz 14:55:07 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:07 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @broadcast}, 0x20, {0x2, 0x0, @multicast1}, 'veth0_to_hsr\x00'}) 14:55:07 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r0, 0x1, 0x2b, 0x0, &(0x7f0000000200)) 14:55:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x10, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) 14:55:07 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:07 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@broadcast, @broadcast, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @random="aa8f2456500e", "", @broadcast, "7021abb6e26797ac"}}}}, 0x0) [ 464.045377][ T114] usb 3-1: USB disconnect, device number 64 14:55:07 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private}, @redirect={0x5, 0x0, 0x0, @private, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}}}, 0x0) 14:55:07 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r0, 0x1, 0x1a, 0x0, &(0x7f0000000200)) 14:55:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x12, 0x0, 0x0) 14:55:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x32, 0x0, 0x0) 14:55:07 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 464.762316][ T3571] usb 3-1: new high-speed USB device number 65 using dummy_hcd 14:55:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8981, 0x0) [ 465.013035][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 465.133571][ T3571] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 465.142281][ T3571] usb 3-1: config 25 has no interface number 0 [ 465.148637][ T3571] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 465.162785][ T3571] usb 3-1: config 25 interface 210 has no altsetting 0 [ 465.263197][ T3571] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 465.272853][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 465.281049][ T3571] usb 3-1: Product: syz [ 465.379528][ T3571] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 466.702672][ T3571] gspca_stk1135: reg_w 0xd err -71 [ 466.708987][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 466.716499][ T3571] gspca_stk1135: Sensor write failed [ 466.722106][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 466.728560][ T3571] gspca_stk1135: Sensor write failed [ 466.734128][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 466.740581][ T3571] gspca_stk1135: Sensor read failed [ 466.746084][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 466.752737][ T3571] gspca_stk1135: Sensor read failed [ 466.758097][ T3571] gspca_stk1135: Detected sensor type unknown (0x0) [ 466.765037][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 466.771510][ T3571] gspca_stk1135: Sensor read failed [ 466.776995][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 466.783551][ T3571] gspca_stk1135: Sensor read failed [ 466.788927][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 466.795491][ T3571] gspca_stk1135: Sensor write failed [ 466.800934][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 466.807459][ T3571] gspca_stk1135: Sensor write failed [ 466.813166][ T3571] stk1135: probe of 3-1:25.210 failed with error -71 [ 466.836761][ T3571] usb 3-1: USB disconnect, device number 65 14:55:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:10 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @rand_addr=0xe0000000}, @redirect={0x5, 0x0, 0x0, @private, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}}}, 0x0) 14:55:10 executing program 4: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp863'}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}) 14:55:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000012c0), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) 14:55:10 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty=0x9, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 467.309907][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 467.316704][ T7352] hfs: unable to change iocharset [ 467.324747][ T7352] hfs: unable to parse mount options 14:55:10 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 14:55:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000012c0), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) 14:55:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty=0x9, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:55:10 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:10 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2}) dup(r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x8, 0xd8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x7c}) close_range(r0, 0xffffffffffffffff, 0x0) [ 467.850909][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 467.932648][ T28] usb 3-1: new high-speed USB device number 66 using dummy_hcd 14:55:11 executing program 3: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) [ 468.187657][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 468.323093][ T28] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 468.331710][ T28] usb 3-1: config 25 has no interface number 0 [ 468.338570][ T28] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 468.343449][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 468.352160][ T28] usb 3-1: config 25 interface 210 has no altsetting 0 [ 468.493445][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 468.506729][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 468.515433][ T28] usb 3-1: Product: syz [ 468.681573][ T28] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 469.992685][ T28] gspca_stk1135: reg_w 0xd err -71 [ 469.999040][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 470.005757][ T28] gspca_stk1135: Sensor write failed [ 470.011235][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 470.018750][ T28] gspca_stk1135: Sensor write failed [ 470.024317][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 470.030777][ T28] gspca_stk1135: Sensor read failed [ 470.041867][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 470.048850][ T28] gspca_stk1135: Sensor read failed [ 470.054270][ T28] gspca_stk1135: Detected sensor type unknown (0x0) [ 470.061215][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 470.067750][ T28] gspca_stk1135: Sensor read failed [ 470.073188][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 470.079622][ T28] gspca_stk1135: Sensor read failed [ 470.085061][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 470.091540][ T28] gspca_stk1135: Sensor write failed [ 470.097135][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 470.103654][ T28] gspca_stk1135: Sensor write failed [ 470.109141][ T28] stk1135: probe of 3-1:25.210 failed with error -71 [ 470.130719][ T28] usb 3-1: USB disconnect, device number 66 14:55:13 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:13 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0xb, r0, r1) 14:55:13 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000012c0), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) 14:55:13 executing program 3: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:13 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) [ 470.632988][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:55:13 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)=""/120, 0x78}], 0x1, 0x0, 0x0) r0 = open(&(0x7f0000001640)='./file0\x00', 0x615, 0x0) pwritev(r0, &(0x7f00000003c0), 0x273, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000000000/0x1000)=nil, 0x1000) 14:55:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000012c0), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) 14:55:13 executing program 3: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:13 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x0, 0x0) 14:55:14 executing program 4: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x6200, 0x0) 14:55:14 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 471.242614][ T3571] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 471.273399][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 471.492323][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 471.577950][ T7396] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 471.588119][ T7396] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 471.616474][ T3571] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 471.625095][ T3571] usb 3-1: config 25 has no interface number 0 [ 471.631549][ T3571] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 471.645318][ T3571] usb 3-1: config 25 interface 210 has no altsetting 0 [ 471.864191][ T3571] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 471.874184][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 471.882543][ T3571] usb 3-1: Product: syz [ 471.984661][ T3571] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 473.292515][ T3571] gspca_stk1135: reg_w 0xd err -71 [ 473.298937][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 473.305745][ T3571] gspca_stk1135: Sensor write failed [ 473.317263][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 473.325415][ T3571] gspca_stk1135: Sensor write failed [ 473.330883][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 473.337462][ T3571] gspca_stk1135: Sensor read failed [ 473.342906][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 473.349354][ T3571] gspca_stk1135: Sensor read failed [ 473.354773][ T3571] gspca_stk1135: Detected sensor type unknown (0x0) [ 473.361527][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 473.368088][ T3571] gspca_stk1135: Sensor read failed [ 473.373535][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 473.379971][ T3571] gspca_stk1135: Sensor read failed [ 473.385452][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 473.391919][ T3571] gspca_stk1135: Sensor write failed [ 473.397483][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 473.404113][ T3571] gspca_stk1135: Sensor write failed [ 473.409712][ T3571] stk1135: probe of 3-1:25.210 failed with error -71 [ 473.447795][ T3571] usb 3-1: USB disconnect, device number 67 14:55:16 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:16 executing program 1: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) 14:55:16 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x0, 0x0) 14:55:16 executing program 3: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:16 executing program 4: syz_mount_image$pvfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000080)="c9782a2cfdade8e5580ca2ffeb2df76a46d2f9dd6ba597739787739b93854722076022d086f4873948926327090cbb79d1b9061e546c85bf317d88507c2253ea9cc7fea755ac77", 0x47, 0x30}, {&(0x7f0000000100)="a9f83f4194c7899e69d2755e6249b4c99c2b05bf3f5beb2ad9bc4d7688184766136c9bf9706f590fc0bcbf7aac4c4779c4cf790fe7b044fa12cbda9be0bb1e05969968962ae18ea21781104dba041e33bbb2824d85a5807bdc0c29e4f8816e365925d286f86cd74fa0cb20635ea20d65e816843229b0025c993954baff9657491aeaa7e237385f39a4ca60f1fb51a0402499fc", 0x93, 0x100}, {&(0x7f00000002c0)="ed58cc6c58ed24b3d928b207ad8d2dd8c076b127dcd66c0a9ea839", 0x1b, 0xc674ed5}, {&(0x7f0000000380)="3a54a1897f309f4a622a11e9aa4d05a3b12add4b7e83f50d4a2b9e4143a60a083aa9605af6f346d7476af9e312b2e3f2e9988c811db0d10a1a7acf0a1b5a2654ae4a7e9d042a9b697cab083ed1926cb55b66a51e0f86078efc381e3c5b83024cadd5c80527c56f", 0x67, 0x6}, {&(0x7f0000000400)="19b3", 0x2, 0x10001}], 0x2200004, &(0x7f0000000600)={[{'\x00'}], [{@dont_measure}, {@fsname={'fsname', 0x3d, '\x1d&{&&%\\#{.{'}}, {@obj_type={'obj_type', 0x3d, '0&'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) 14:55:16 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 473.859798][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:55:17 executing program 1: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) [ 473.903460][ T7405] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 473.913306][ T7405] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 473.942476][ T7406] loop4: detected capacity change from 0 to 264192 14:55:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000480)={@local, @empty, @remote}, 0xc) 14:55:17 executing program 3: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:17 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x0, 0x0) 14:55:17 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:55:17 executing program 1: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) [ 474.562306][ T114] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 474.668633][ T7418] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 474.678744][ T7418] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 474.802417][ T114] usb 3-1: Using ep0 maxpacket: 8 [ 474.924406][ T114] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 474.933168][ T114] usb 3-1: config 25 has no interface number 0 [ 474.939617][ T114] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 474.957068][ T114] usb 3-1: config 25 interface 210 has no altsetting 0 [ 475.106457][ T114] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 475.115966][ T114] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 475.124508][ T114] usb 3-1: Product: syz [ 475.199553][ T114] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 476.502727][ T114] gspca_stk1135: reg_w 0xd err -71 [ 476.509080][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 476.515910][ T114] gspca_stk1135: Sensor write failed [ 476.521375][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 476.527917][ T114] gspca_stk1135: Sensor write failed [ 476.533496][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 476.539934][ T114] gspca_stk1135: Sensor read failed [ 476.545553][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 476.552122][ T114] gspca_stk1135: Sensor read failed [ 476.557450][ T114] gspca_stk1135: Detected sensor type unknown (0x0) [ 476.564335][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 476.570770][ T114] gspca_stk1135: Sensor read failed [ 476.576323][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 476.582873][ T114] gspca_stk1135: Sensor read failed [ 476.594312][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 476.600791][ T114] gspca_stk1135: Sensor write failed [ 476.606849][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 476.613468][ T114] gspca_stk1135: Sensor write failed [ 476.619060][ T114] stk1135: probe of 3-1:25.210 failed with error -71 [ 476.654304][ T114] usb 3-1: USB disconnect, device number 68 14:55:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:20 executing program 3: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:20 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:55:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa0c82) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 14:55:20 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) 14:55:20 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x0, &(0x7f0000000540)) [ 477.118377][ T7429] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 477.128073][ T7429] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 14:55:20 executing program 3: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:20 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) 14:55:20 executing program 4: socketpair(0x1d, 0x3, 0x1, &(0x7f0000000340)) 14:55:20 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:55:20 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x0, &(0x7f0000000540)) 14:55:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) [ 477.662434][ T3571] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 477.902655][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 477.910900][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 478.030126][ T3571] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 478.038791][ T3571] usb 3-1: config 25 has no interface number 0 [ 478.045395][ T3571] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 478.059348][ T3571] usb 3-1: config 25 interface 210 has no altsetting 0 [ 478.187164][ T3571] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 478.197106][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 478.205515][ T3571] usb 3-1: Product: syz [ 478.360288][ T3571] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 479.682652][ T3571] gspca_stk1135: reg_w 0xd err -71 [ 479.689162][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 479.696439][ T3571] gspca_stk1135: Sensor write failed [ 479.701912][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 479.708903][ T3571] gspca_stk1135: Sensor write failed [ 479.715068][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 479.721553][ T3571] gspca_stk1135: Sensor read failed [ 479.727169][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 479.733709][ T3571] gspca_stk1135: Sensor read failed [ 479.739015][ T3571] gspca_stk1135: Detected sensor type unknown (0x0) [ 479.746150][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 479.752711][ T3571] gspca_stk1135: Sensor read failed [ 479.758082][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 479.770551][ T3571] gspca_stk1135: Sensor read failed [ 479.776712][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 479.783327][ T3571] gspca_stk1135: Sensor write failed [ 479.788808][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 479.795451][ T3571] gspca_stk1135: Sensor write failed [ 479.801044][ T3571] stk1135: probe of 3-1:25.210 failed with error -71 [ 479.821931][ T3571] usb 3-1: USB disconnect, device number 69 14:55:23 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:23 executing program 4: openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x410102, 0x0) 14:55:23 executing program 1: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) 14:55:23 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:55:23 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x0, &(0x7f0000000540)) 14:55:23 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:23 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:23 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:55:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa0c82) ioctl$SCSI_IOCTL_SYNC(r0, 0x5387) 14:55:23 executing program 1: syz_open_dev$ndb(&(0x7f00000012c0), 0x0, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) 14:55:23 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) [ 480.872304][ T3571] usb 3-1: new high-speed USB device number 70 using dummy_hcd 14:55:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 481.112403][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 481.233901][ T3571] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 481.242606][ T3571] usb 3-1: config 25 has no interface number 0 [ 481.248987][ T3571] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 481.262725][ T3571] usb 3-1: config 25 interface 210 has no altsetting 0 [ 481.312296][ T7474] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 481.321950][ T7474] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 481.387336][ T3571] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 481.396916][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 481.408742][ T3571] usb 3-1: Product: syz [ 481.484779][ T3571] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 482.782605][ T3571] gspca_stk1135: reg_w 0xd err -71 [ 482.788923][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 482.796334][ T3571] gspca_stk1135: Sensor write failed [ 482.801763][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 482.808344][ T3571] gspca_stk1135: Sensor write failed [ 482.813961][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 482.820398][ T3571] gspca_stk1135: Sensor read failed [ 482.825885][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 482.832435][ T3571] gspca_stk1135: Sensor read failed [ 482.842891][ T3571] gspca_stk1135: Detected sensor type unknown (0x0) [ 482.849692][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 482.856739][ T3571] gspca_stk1135: Sensor read failed [ 482.862241][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 482.868713][ T3571] gspca_stk1135: Sensor read failed [ 482.874190][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 482.880713][ T3571] gspca_stk1135: Sensor write failed [ 482.886257][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 482.892811][ T3571] gspca_stk1135: Sensor write failed [ 482.898493][ T3571] stk1135: probe of 3-1:25.210 failed with error -71 [ 482.920074][ T3571] usb 3-1: USB disconnect, device number 70 14:55:26 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002480)='/sys/bus/spi', 0x0, 0x0) ioctl$EVIOCGID(r0, 0x2, 0x0) 14:55:26 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:26 executing program 1: syz_open_dev$ndb(&(0x7f00000012c0), 0x0, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) 14:55:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:55:26 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) [ 483.424765][ T7483] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 483.434556][ T7483] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 14:55:26 executing program 1: syz_open_dev$ndb(&(0x7f00000012c0), 0x0, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) 14:55:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 14:55:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 14:55:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:55:26 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) 14:55:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 484.002599][ T114] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 484.053772][ T7495] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 484.068709][ T7495] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 14:55:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000012c0), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, 0x0) 14:55:27 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getpeername$ax25(r0, &(0x7f0000000000)={{0x3, @rose}, [@default, @null, @default, @netrom, @netrom, @bcast, @rose, @default]}, &(0x7f0000000080)=0x48) [ 484.242700][ T114] usb 3-1: Using ep0 maxpacket: 8 14:55:27 executing program 5: connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 484.363675][ T114] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 484.375914][ T114] usb 3-1: config 25 has no interface number 0 [ 484.382819][ T114] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 484.396446][ T114] usb 3-1: config 25 interface 210 has no altsetting 0 [ 484.603088][ T114] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 484.613044][ T114] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 484.621261][ T114] usb 3-1: Product: syz [ 484.733411][ T7506] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 484.743486][ T7506] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 484.750667][ T114] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 486.052580][ T114] gspca_stk1135: reg_w 0xd err -71 [ 486.059674][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 486.066535][ T114] gspca_stk1135: Sensor write failed [ 486.072848][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 486.079320][ T114] gspca_stk1135: Sensor write failed [ 486.084898][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 486.091359][ T114] gspca_stk1135: Sensor read failed [ 486.096852][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 486.103438][ T114] gspca_stk1135: Sensor read failed [ 486.108760][ T114] gspca_stk1135: Detected sensor type unknown (0x0) [ 486.121287][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 486.128273][ T114] gspca_stk1135: Sensor read failed [ 486.133760][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 486.140284][ T114] gspca_stk1135: Sensor read failed [ 486.145809][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 486.152352][ T114] gspca_stk1135: Sensor write failed [ 486.157763][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 486.164312][ T114] gspca_stk1135: Sensor write failed [ 486.169822][ T114] stk1135: probe of 3-1:25.210 failed with error -71 [ 486.190930][ T114] usb 3-1: USB disconnect, device number 71 14:55:29 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:29 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000012c0), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, 0x0) 14:55:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 14:55:29 executing program 4: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x24381) 14:55:29 executing program 5: connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 486.642079][ T7510] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 486.651740][ T7510] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 14:55:29 executing program 4: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) 14:55:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000012c0), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, 0x0) 14:55:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14:55:29 executing program 5: connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:55:30 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:30 executing program 4: add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="db", 0x1, 0xfffffffffffffffe) [ 487.262352][ T28] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 487.287370][ T7526] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 487.297583][ T7526] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 487.522733][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 487.636283][ T7532] trusted_key: encrypted_key: insufficient parameters specified [ 487.650101][ T28] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 487.658731][ T28] usb 3-1: config 25 has no interface number 0 [ 487.665327][ T28] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 487.679114][ T28] usb 3-1: config 25 interface 210 has no altsetting 0 [ 487.813488][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 487.822861][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 487.831071][ T28] usb 3-1: Product: syz [ 487.919911][ T28] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 489.242721][ T28] gspca_stk1135: reg_w 0xd err -71 [ 489.249164][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 489.255814][ T28] gspca_stk1135: Sensor write failed [ 489.261237][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 489.267966][ T28] gspca_stk1135: Sensor write failed [ 489.274689][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 489.281127][ T28] gspca_stk1135: Sensor read failed [ 489.286607][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 489.293097][ T28] gspca_stk1135: Sensor read failed [ 489.298381][ T28] gspca_stk1135: Detected sensor type unknown (0x0) [ 489.305268][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 489.311737][ T28] gspca_stk1135: Sensor read failed [ 489.317202][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 489.323722][ T28] gspca_stk1135: Sensor read failed [ 489.329099][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 489.335672][ T28] gspca_stk1135: Sensor write failed [ 489.341131][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 489.347706][ T28] gspca_stk1135: Sensor write failed [ 489.353374][ T28] stk1135: probe of 3-1:25.210 failed with error -71 [ 489.381868][ T28] usb 3-1: USB disconnect, device number 72 14:55:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14:55:32 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/kexec_crash_size', 0x2, 0x0) 14:55:32 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:55:32 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:32 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:32 executing program 4: add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="db", 0x1, 0xfffffffffffffffe) [ 489.810210][ T7536] trusted_key: encrypted_key: insufficient parameters specified 14:55:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14:55:33 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:55:33 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x1}], 0x10}, 0x0) 14:55:33 executing program 4: add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="db", 0x1, 0xfffffffffffffffe) 14:55:33 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:55:33 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 490.400611][ T7552] trusted_key: encrypted_key: insufficient parameters specified [ 490.420536][ T3571] usb 3-1: new high-speed USB device number 73 using dummy_hcd 14:55:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, 0x0) 14:55:33 executing program 4: add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="db", 0x1, 0xfffffffffffffffe) [ 490.682792][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 490.803070][ T3571] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 490.811642][ T3571] usb 3-1: config 25 has no interface number 0 [ 490.819008][ T3571] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 490.836512][ T3571] usb 3-1: config 25 interface 210 has no altsetting 0 14:55:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 491.005138][ T7564] trusted_key: encrypted_key: insufficient parameters specified [ 491.066858][ T3571] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 491.076276][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 491.085047][ T3571] usb 3-1: Product: syz [ 491.217919][ T3571] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 492.542544][ T3571] gspca_stk1135: reg_w 0xd err -71 [ 492.548886][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 492.555578][ T3571] gspca_stk1135: Sensor write failed [ 492.566734][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 492.573682][ T3571] gspca_stk1135: Sensor write failed [ 492.579154][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 492.585731][ T3571] gspca_stk1135: Sensor read failed [ 492.591076][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 492.597646][ T3571] gspca_stk1135: Sensor read failed [ 492.603032][ T3571] gspca_stk1135: Detected sensor type unknown (0x0) [ 492.609888][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 492.616413][ T3571] gspca_stk1135: Sensor read failed [ 492.621746][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 492.628336][ T3571] gspca_stk1135: Sensor read failed [ 492.633770][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 492.640248][ T3571] gspca_stk1135: Sensor write failed [ 492.645802][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 492.652325][ T3571] gspca_stk1135: Sensor write failed [ 492.657930][ T3571] stk1135: probe of 3-1:25.210 failed with error -71 [ 492.695381][ T3571] usb 3-1: USB disconnect, device number 73 14:55:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:36 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 14:55:36 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:36 executing program 1: request_key(&(0x7f0000000c80)='logon\x00', &(0x7f0000000cc0)={'syz', 0x1}, &(0x7f0000000d00)='(.+)\x00', 0x0) 14:55:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000003800), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/38) 14:55:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:55:36 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 14:55:36 executing program 4: socketpair(0x3, 0x0, 0x0, &(0x7f0000000140)) 14:55:36 executing program 1: syz_open_dev$rtc(&(0x7f00000006c0), 0x0, 0x0) 14:55:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:36 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:55:36 executing program 4: mq_open(&(0x7f0000000000)='.\x16\xac\x00'/14, 0x40, 0x0, 0x0) [ 493.682325][ T114] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 493.943031][ T114] usb 3-1: Using ep0 maxpacket: 8 [ 494.062799][ T114] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 494.071328][ T114] usb 3-1: config 25 has no interface number 0 [ 494.077857][ T114] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 494.091620][ T114] usb 3-1: config 25 interface 210 has no altsetting 0 [ 494.243310][ T114] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 494.252935][ T114] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 494.261150][ T114] usb 3-1: Product: syz [ 494.639132][ T114] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 495.056079][ T114] gspca_stk1135: reg_w 0x0 err -71 [ 495.062507][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 495.068988][ T114] gspca_stk1135: Sensor write failed [ 495.074538][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 495.080981][ T114] gspca_stk1135: Sensor write failed [ 495.086534][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 495.093102][ T114] gspca_stk1135: Sensor read failed [ 495.098437][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 495.104968][ T114] gspca_stk1135: Sensor read failed [ 495.110263][ T114] gspca_stk1135: Detected sensor type unknown (0x0) [ 495.117153][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 495.129634][ T114] gspca_stk1135: Sensor read failed [ 495.135515][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 495.142047][ T114] gspca_stk1135: Sensor read failed [ 495.147425][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 495.153990][ T114] gspca_stk1135: Sensor write failed [ 495.159449][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 495.165962][ T114] gspca_stk1135: Sensor write failed [ 495.171547][ T114] stk1135: probe of 3-1:25.210 failed with error -71 [ 495.194375][ T114] usb 3-1: USB disconnect, device number 74 14:55:38 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:38 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 14:55:38 executing program 1: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)=',.L\x00', 0xfffffffffffffffd) 14:55:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:38 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, 0x0}]) 14:55:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d40)={'batadv_slave_1\x00'}) 14:55:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000057c0)=[{{&(0x7f0000001900)={0xa, 0x4e22, 0x0, @private1, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) 14:55:38 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 14:55:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:38 executing program 1: syz_mount_image$fuse(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 14:55:39 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, 0x0}]) 14:55:39 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 496.253583][ T28] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 496.278815][ T7613] fuse: Bad value for 'fd' [ 496.512794][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 496.632963][ T28] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 496.641450][ T28] usb 3-1: config 25 has no interface number 0 [ 496.648592][ T28] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 496.662230][ T28] usb 3-1: config 25 interface 210 has no altsetting 0 [ 496.773293][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 496.783464][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 496.791684][ T28] usb 3-1: Product: syz [ 497.173722][ T28] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 497.597348][ T28] gspca_stk1135: reg_w 0x0 err -71 [ 497.603959][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 497.610590][ T28] gspca_stk1135: Sensor write failed [ 497.617195][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 497.623805][ T28] gspca_stk1135: Sensor write failed [ 497.629370][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 497.635945][ T28] gspca_stk1135: Sensor read failed [ 497.641283][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 497.647923][ T28] gspca_stk1135: Sensor read failed [ 497.653314][ T28] gspca_stk1135: Detected sensor type unknown (0x0) [ 497.660102][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 497.666665][ T28] gspca_stk1135: Sensor read failed [ 497.672102][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 497.678562][ T28] gspca_stk1135: Sensor read failed [ 497.684061][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 497.690524][ T28] gspca_stk1135: Sensor write failed [ 497.696082][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 497.702634][ T28] gspca_stk1135: Sensor write failed [ 497.708252][ T28] stk1135: probe of 3-1:25.210 failed with error -71 [ 497.732659][ T28] usb 3-1: USB disconnect, device number 75 14:55:41 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:41 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x5411, 0x0) 14:55:41 executing program 1: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) 14:55:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:41 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2600, 0x400000000000, 0x0, 0x1, 0x0, r0, 0x0}]) 14:55:41 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 498.223150][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:55:41 executing program 1: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='_', 0x1, 0xfffffffffffffffc) keyctl$update(0x2, r0, &(0x7f00000000c0)='l', 0x1) 14:55:41 executing program 4: add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 14:55:41 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:55:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0xb8}}, 0x0) [ 498.742440][ T28] usb 3-1: new high-speed USB device number 76 using dummy_hcd 14:55:41 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg(r0, &(0x7f0000001180)={&(0x7f0000001000)=@nl=@proc={0x10, 0x0, 0x25dfdbfd}, 0x80, 0x0}, 0x0) 14:55:42 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/block/nbd9', 0x281044, 0x0) [ 498.981605][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 498.992378][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 499.112996][ T28] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 499.125295][ T28] usb 3-1: config 25 has no interface number 0 [ 499.131674][ T28] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 499.145888][ T28] usb 3-1: config 25 interface 210 has no altsetting 0 [ 499.373891][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 499.383358][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 499.391574][ T28] usb 3-1: Product: syz [ 499.828505][ T28] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 500.252538][ T28] gspca_stk1135: reg_w 0x0 err -71 [ 500.258906][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 500.265815][ T28] gspca_stk1135: Sensor write failed [ 500.271283][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 500.278003][ T28] gspca_stk1135: Sensor write failed [ 500.283565][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 500.290034][ T28] gspca_stk1135: Sensor read failed [ 500.295560][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 500.302143][ T28] gspca_stk1135: Sensor read failed [ 500.307461][ T28] gspca_stk1135: Detected sensor type unknown (0x0) [ 500.314371][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 500.320815][ T28] gspca_stk1135: Sensor read failed [ 500.326252][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 500.332793][ T28] gspca_stk1135: Sensor read failed [ 500.338165][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 500.350843][ T28] gspca_stk1135: Sensor write failed [ 500.356830][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 500.363360][ T28] gspca_stk1135: Sensor write failed [ 500.368957][ T28] stk1135: probe of 3-1:25.210 failed with error -71 [ 500.389731][ T28] usb 3-1: USB disconnect, device number 76 14:55:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:43 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:55:43 executing program 0: request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) 14:55:43 executing program 4: syz_open_dev$rtc(&(0x7f0000000000), 0x5, 0x200180) 14:55:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0xb8}}, 0x0) 14:55:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) [ 500.902323][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:55:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x18}}, 0x0) 14:55:44 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 14:55:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup2(r0, r1) 14:55:44 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x227b, 0x0) 14:55:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 501.431301][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 14:55:44 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x0, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 501.506167][ T3571] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 501.783090][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 501.913028][ T3571] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 501.921638][ T3571] usb 3-1: config 25 has no interface number 0 [ 501.928567][ T3571] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 501.942212][ T3571] usb 3-1: config 25 interface 210 has no altsetting 0 [ 502.053293][ T3571] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 502.063395][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 502.071623][ T3571] usb 3-1: Product: syz [ 502.478939][ T3571] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 502.915902][ T3571] gspca_stk1135: reg_w 0x0 err -71 [ 502.922317][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 502.928999][ T3571] gspca_stk1135: Sensor write failed [ 502.934629][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 502.941096][ T3571] gspca_stk1135: Sensor write failed [ 502.946649][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 502.953463][ T3571] gspca_stk1135: Sensor read failed [ 502.958858][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 502.965434][ T3571] gspca_stk1135: Sensor read failed [ 502.970778][ T3571] gspca_stk1135: Detected sensor type unknown (0x0) [ 502.977739][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 502.984392][ T3571] gspca_stk1135: Sensor read failed [ 502.989766][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 502.996389][ T3571] gspca_stk1135: Sensor read failed [ 503.001717][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 503.014131][ T3571] gspca_stk1135: Sensor write failed [ 503.019564][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 503.026566][ T3571] gspca_stk1135: Sensor write failed [ 503.032237][ T3571] stk1135: probe of 3-1:25.210 failed with error -71 [ 503.071742][ T3571] usb 3-1: USB disconnect, device number 77 14:55:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:46 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080), 0x8) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002cc0)=ANY=[], 0x580}}, 0x0) 14:55:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup2(r0, r1) 14:55:46 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x4000) 14:55:46 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x719d, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 14:55:46 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x0, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:55:46 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x7, 0x3, &(0x7f0000000700)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:55:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup2(r0, r1) 14:55:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x1a, 0x2, &(0x7f00000000c0)=@raw=[@btf_id], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:55:46 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x0, 0x0, 0x0, {{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 14:55:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='<']}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'gretap0\x00', {}, 0x8000}) 14:55:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2, 0x0, &(0x7f0000000080)) [ 504.073034][ T28] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 504.312561][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 504.433594][ T28] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 504.445992][ T28] usb 3-1: config 25 has no interface number 0 [ 504.453002][ T28] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 504.466626][ T28] usb 3-1: config 25 interface 210 has no altsetting 0 [ 504.653868][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 504.663330][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 504.671590][ T28] usb 3-1: Product: syz [ 505.089067][ T28] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 505.512905][ T28] gspca_stk1135: reg_w 0x0 err -71 [ 505.519403][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 505.526045][ T28] gspca_stk1135: Sensor write failed [ 505.531477][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 505.538018][ T28] gspca_stk1135: Sensor write failed [ 505.543575][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 505.550050][ T28] gspca_stk1135: Sensor read failed [ 505.555624][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 505.562291][ T28] gspca_stk1135: Sensor read failed [ 505.573426][ T28] gspca_stk1135: Detected sensor type unknown (0x0) [ 505.580228][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 505.587307][ T28] gspca_stk1135: Sensor read failed [ 505.592717][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 505.599121][ T28] gspca_stk1135: Sensor read failed [ 505.604628][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 505.611074][ T28] gspca_stk1135: Sensor write failed [ 505.616672][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 505.623202][ T28] gspca_stk1135: Sensor write failed [ 505.628800][ T28] stk1135: probe of 3-1:25.210 failed with error -71 [ 505.662150][ T28] usb 3-1: USB disconnect, device number 78 14:55:49 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) dup2(r0, r1) 14:55:49 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xc6, &(0x7f0000000100)=""/198, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:55:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r2}) 14:55:49 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev}}}, 0xb8}}, 0x0) 14:55:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0x2, &(0x7f00000000c0)="f6", 0x1) [ 506.154075][ T7699] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 506.164033][ T7699] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 14:55:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000080)=0x60) 14:55:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8912, &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @dev}) 14:55:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}) 14:55:49 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000006c0)={@private0, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x15}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000006c0)={@private0, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000006c0)={@private0, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="bc010000", @ANYRES16=0x0, @ANYBLOB="15002cbd7000ffdbdf2508000000500001801400020064766d727030000000000000000000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d61637674617030000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="6800018008000300020000001400020064756d6d79300000000000000000000008000300010000001400020067656e65766530000000000000000000140002006772653000000000000000000000000008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="180001801400020065727370616e300000000000000000006800018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="080003000000000014000200767863616e310000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="1400020077673200000000000000000000000000140002006e65747063693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="5800018014000200766c616e30000000000000000000000014000200687372300000000000000000000000001400020064766d72703100000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4d5b9d9bcc7f86e07c61e8"], 0x1bc}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000000) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r12, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0}, 0x2000c000) sendmmsg$inet(r12, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:55:49 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev}}}, 0xb8}}, 0x0) 14:55:49 executing program 4: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan4\x00'}) [ 506.773397][ T28] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 506.790453][ T7714] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 506.804728][ T7714] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 507.032489][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 507.173149][ T28] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 507.181639][ T28] usb 3-1: config 25 has no interface number 0 [ 507.188466][ T28] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 507.202292][ T28] usb 3-1: config 25 interface 210 has no altsetting 0 [ 507.323248][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 507.332705][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 507.340904][ T28] usb 3-1: Product: syz [ 507.759067][ T28] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 508.182685][ T28] gspca_stk1135: reg_w 0x0 err -71 [ 508.189056][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 508.195703][ T28] gspca_stk1135: Sensor write failed [ 508.201345][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 508.208842][ T28] gspca_stk1135: Sensor write failed [ 508.214386][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 508.220834][ T28] gspca_stk1135: Sensor read failed [ 508.226304][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 508.232830][ T28] gspca_stk1135: Sensor read failed [ 508.238157][ T28] gspca_stk1135: Detected sensor type unknown (0x0) [ 508.245032][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 508.251466][ T28] gspca_stk1135: Sensor read failed [ 508.256940][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 508.263466][ T28] gspca_stk1135: Sensor read failed [ 508.268826][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 508.275379][ T28] gspca_stk1135: Sensor write failed [ 508.280893][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 508.287430][ T28] gspca_stk1135: Sensor write failed [ 508.293134][ T28] stk1135: probe of 3-1:25.210 failed with error -71 [ 508.328914][ T28] usb 3-1: USB disconnect, device number 79 14:55:51 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1e, 0x0, &(0x7f0000000080)) 14:55:51 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000006c0)={@private0, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x15}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000006c0)={@private0, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000006c0)={@private0, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="bc010000", @ANYRES16=0x0, @ANYBLOB="15002cbd7000ffdbdf2508000000500001801400020064766d727030000000000000000000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d61637674617030000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="6800018008000300020000001400020064756d6d79300000000000000000000008000300010000001400020067656e65766530000000000000000000140002006772653000000000000000000000000008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="180001801400020065727370616e300000000000000000006800018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="080003000000000014000200767863616e310000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="1400020077673200000000000000000000000000140002006e65747063693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="5800018014000200766c616e30000000000000000000000014000200687372300000000000000000000000001400020064766d72703100000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4d5b9d9bcc7f86e07c61e8"], 0x1bc}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000000) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r12, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0}, 0x2000c000) sendmmsg$inet(r12, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:55:51 executing program 4: sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000e80), 0xffffffffffffffff) 14:55:51 executing program 5: connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@empty, @in=@dev}}}, 0xb8}}, 0x0) 14:55:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x1) [ 508.808202][ T7727] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 508.818414][ T7727] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 14:55:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 14:55:52 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="8510"], &(0x7f0000000040)='GPL\x00', 0x6, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:55:52 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000300)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x1e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:55:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty}}}}) [ 509.382571][ T3571] usb 3-1: new high-speed USB device number 80 using dummy_hcd 14:55:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x5451, 0x0) 14:55:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x12e1}, 0x48) [ 509.622507][ T3571] usb 3-1: Using ep0 maxpacket: 8 [ 509.753897][ T3571] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 509.762784][ T3571] usb 3-1: config 25 has no interface number 0 [ 509.772881][ T3571] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 509.787009][ T3571] usb 3-1: config 25 interface 210 has no altsetting 0 [ 509.962731][ T3571] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 509.975554][ T3571] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 509.984921][ T3571] usb 3-1: Product: syz [ 510.391184][ T3571] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 510.812721][ T3571] gspca_stk1135: reg_w 0x0 err -71 [ 510.819075][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 510.825926][ T3571] gspca_stk1135: Sensor write failed [ 510.831411][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 510.838670][ T3571] gspca_stk1135: Sensor write failed [ 510.844288][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 510.850738][ T3571] gspca_stk1135: Sensor read failed [ 510.856245][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 510.862854][ T3571] gspca_stk1135: Sensor read failed [ 510.868127][ T3571] gspca_stk1135: Detected sensor type unknown (0x0) [ 510.875096][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 510.881541][ T3571] gspca_stk1135: Sensor read failed [ 510.887017][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 510.901247][ T3571] gspca_stk1135: Sensor read failed [ 510.907628][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 510.914180][ T3571] gspca_stk1135: Sensor write failed [ 510.919601][ T3571] gspca_stk1135: serial bus timeout: status=0x00 [ 510.926182][ T3571] gspca_stk1135: Sensor write failed [ 510.931726][ T3571] stk1135: probe of 3-1:25.210 failed with error -71 [ 510.965308][ T3571] usb 3-1: USB disconnect, device number 80 14:55:54 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 14:55:54 executing program 1: unshare(0x40000200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0x7c, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket(0x10, 0x3, 0x0) socket(0x2b, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000340)="30e6b9c14a1b2401c494012c51ea8cde4f3dbdedb5f3f616e44cb4c724fb0e5cab7648b8e0f447486d832ad9adc8f58043154bdb55751a170ea920be991d3852ac435f650d693db7b822417e9453f70d8c7e5edcaa0fe592fe7222014860a4a5deb14401d924aea8a919f8002f1898e8930e90017ff3b81feede2b4e479344e8353cce21c1a2df5c5c3d", &(0x7f0000000400)=@tcp}, 0x20) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x6, 0x4, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x3fff, 0x0, 0xfffffffe}, {0xff, 0x0, 0x0, 0x0, 0x1f, 0xb0dd}, 0x2, 0x3}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x2d159542e67c7237}, @TCA_TBF_PBURST={0x8, 0x7, 0x1c9d}]}}]}, 0x6c}}, 0x0) unshare(0x40000) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0xae) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) unshare(0x0) 14:55:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0xc01047d0, 0x0) 14:55:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @local}, 0x10) 14:55:54 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000001040)) 14:55:54 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f175f8", 0x18, 0x6, 0x0, @ipv4, @empty, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x0) 14:55:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x5421, &(0x7f00000006c0)={@loopback, @mcast1, @dev}) 14:55:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e40)={0x10, 0x27, 0x1}, 0x10}], 0x1}, 0x0) [ 511.720535][ T7756] sch_tbf: burst 720 is lower than device lo mtu (65550) ! 14:55:55 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000700)=@framed={{}, [], {0x95, 0x2}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:55:55 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x80c, 0x1, 0x7}, 0x48) [ 512.072324][ T3562] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 512.328130][ T3562] usb 3-1: Using ep0 maxpacket: 8 14:55:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x700) [ 512.482739][ T3562] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 512.491243][ T3562] usb 3-1: config 25 has no interface number 0 [ 512.497785][ T3562] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 512.512111][ T3562] usb 3-1: config 25 interface 210 has no altsetting 0 [ 512.722953][ T3562] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 512.732364][ T3562] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 512.744202][ T3562] usb 3-1: Product: syz [ 513.169184][ T3562] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 513.620352][ T3562] gspca_stk1135: reg_w 0x0 err -71 [ 513.626960][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 513.633639][ T3562] gspca_stk1135: Sensor write failed [ 513.639104][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 513.645709][ T3562] gspca_stk1135: Sensor write failed [ 513.651168][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 513.663628][ T3562] gspca_stk1135: Sensor read failed [ 513.669017][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 513.676018][ T3562] gspca_stk1135: Sensor read failed [ 513.681348][ T3562] gspca_stk1135: Detected sensor type unknown (0x0) [ 513.688243][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 513.694833][ T3562] gspca_stk1135: Sensor read failed [ 513.700208][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 513.706776][ T3562] gspca_stk1135: Sensor read failed [ 513.712203][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 513.718669][ T3562] gspca_stk1135: Sensor write failed [ 513.724237][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 513.730716][ T3562] gspca_stk1135: Sensor write failed [ 513.736441][ T3562] stk1135: probe of 3-1:25.210 failed with error -71 [ 513.773078][ T3562] usb 3-1: USB disconnect, device number 81 14:55:57 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:57 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x1a, 0x3, &(0x7f0000000700)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) 14:55:57 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000700)=@framed={{}, [], {0x95, 0x0, 0x0, 0x2}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:55:57 executing program 3: socketpair(0xa, 0x1, 0x6, &(0x7f0000000040)) 14:55:57 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000006c0)={@private0, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890c, &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00'}) 14:55:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001980)={0x14, 0x27, 0x1, 0x0, 0x0, "", [@generic="e5"]}, 0x14}], 0x1}, 0x0) 14:55:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8903, &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @dev}) 14:55:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x65, 0x0, 0x0) 14:55:57 executing program 0: sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0}}, 0x0) 14:55:57 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffff71c}) 14:55:57 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) chmod(&(0x7f0000000040)='./file0/file0\x00', 0x0) 14:55:57 executing program 4: socketpair(0x1, 0x1, 0x1, &(0x7f0000000140)) [ 514.802661][ T28] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 514.990834][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.997564][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.053976][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 515.172937][ T28] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 515.181525][ T28] usb 3-1: config 25 has no interface number 0 [ 515.188371][ T28] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 515.206105][ T28] usb 3-1: config 25 interface 210 has no altsetting 0 [ 515.343326][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 515.352784][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 515.360996][ T28] usb 3-1: Product: syz [ 515.779197][ T28] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 516.212843][ T28] gspca_stk1135: reg_w 0x0 err -71 [ 516.224935][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 516.231424][ T28] gspca_stk1135: Sensor write failed [ 516.237379][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 516.243911][ T28] gspca_stk1135: Sensor write failed [ 516.249334][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 516.255880][ T28] gspca_stk1135: Sensor read failed [ 516.261265][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 516.267838][ T28] gspca_stk1135: Sensor read failed [ 516.273227][ T28] gspca_stk1135: Detected sensor type unknown (0x0) [ 516.280017][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 516.286576][ T28] gspca_stk1135: Sensor read failed [ 516.291941][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 516.298482][ T28] gspca_stk1135: Sensor read failed [ 516.303927][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 516.310397][ T28] gspca_stk1135: Sensor write failed [ 516.315935][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 516.322461][ T28] gspca_stk1135: Sensor write failed [ 516.328052][ T28] stk1135: probe of 3-1:25.210 failed with error -71 [ 516.372626][ T28] usb 3-1: USB disconnect, device number 82 14:55:59 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:55:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000040), 0x4) 14:55:59 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000000)={@remote, @random="0176da524139", @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @loopback, @empty, @broadcast}}}}, 0x0) 14:55:59 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmdt(0x0) 14:55:59 executing program 3: request_key(&(0x7f0000000140)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 14:55:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20100000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="200000006300000005000025ce000b000f00c00c110000000000000000000000002000000020000220000000d7f4655fd7f4655f0100ffff53ef270000408000d7f4655f000000000100000001000005000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x4008, &(0x7f0000013800)) [ 516.866613][ T7802] loop4: detected capacity change from 0 to 264192 14:56:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x2}, 0x0) 14:56:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:public_content_rw_t:s0\x00'}]}, 0x44}}, 0x0) 14:56:00 executing program 5: set_mempolicy(0x1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 14:56:00 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80) [ 517.001316][ T7802] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 517.065811][ T7802] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. 14:56:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x9, r0, r4, 0x0, 0x0) 14:56:00 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x20) [ 517.298798][ T3515] EXT4-fs (loop4): unmounting filesystem. [ 517.464485][ T3562] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 517.723028][ T3562] usb 3-1: Using ep0 maxpacket: 8 [ 517.853012][ T3562] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 517.865250][ T3562] usb 3-1: config 25 has no interface number 0 [ 517.871631][ T3562] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 517.886249][ T3562] usb 3-1: config 25 interface 210 has no altsetting 0 [ 518.002716][ T3562] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 518.012476][ T3562] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 518.020784][ T3562] usb 3-1: Product: syz [ 518.663131][ T3562] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 518.685699][ T3562] gspca_stk1135: reg_w 0x2 err -71 [ 518.692207][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 518.698694][ T3562] gspca_stk1135: Sensor write failed [ 518.704349][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 518.710814][ T3562] gspca_stk1135: Sensor write failed [ 518.716351][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 518.722968][ T3562] gspca_stk1135: Sensor read failed [ 518.728347][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 518.735023][ T3562] gspca_stk1135: Sensor read failed [ 518.740374][ T3562] gspca_stk1135: Detected sensor type unknown (0x0) [ 518.747315][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 518.753870][ T3562] gspca_stk1135: Sensor read failed [ 518.759205][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 518.765745][ T3562] gspca_stk1135: Sensor read failed [ 518.771104][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 518.783842][ T3562] gspca_stk1135: Sensor write failed [ 518.789323][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 518.796313][ T3562] gspca_stk1135: Sensor write failed [ 518.801842][ T3562] stk1135: probe of 3-1:25.210 failed with error -71 [ 518.835194][ T3562] usb 3-1: USB disconnect, device number 83 14:56:02 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:56:02 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14:56:02 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000700)) 14:56:02 executing program 0: prctl$PR_SET_VMA(0x59616d61, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 14:56:02 executing program 5: syz_clone(0x2004080, 0x0, 0x0, 0x0, 0x0, 0x0) 14:56:02 executing program 4: r0 = socket(0x29, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x38, 0x0) 14:56:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x410001, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x6e4982, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) socketpair(0x0, 0x0, 0x9, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_clone(0x604c100, &(0x7f0000000580)="9c5abe72937184d91143730968618915fbec49de82704c98e174e100c38af0e974292929dd5e3386012b60f98872194126adfaf70f7b74a6996968ef9713aff148c5b1143ab5ce053f69adefd6f90d8047b326d9b9adf7c0a9da531b861293cf9fb5eb08c41a14e7960202190aad10ab6be3dea1e4a949404a6732370ecc235b1f005c2f4e52f2c6e61bc397914cdc62", 0x90, 0x0, &(0x7f0000000680), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500), 0xc, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 14:56:02 executing program 3: prctl$PR_SET_VMA(0x53564d41, 0x60ff, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 14:56:02 executing program 1: syz_emit_ethernet(0x85, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) 14:56:02 executing program 5: prctl$PR_SET_VMA(0x3c, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) [ 519.809982][ T114] usb 3-1: new high-speed USB device number 84 using dummy_hcd 14:56:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}}, 0x0) bind$netlink(r0, &(0x7f0000000140), 0xc) 14:56:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x0) [ 520.072305][ T114] usb 3-1: Using ep0 maxpacket: 8 [ 520.203467][ T114] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 520.215702][ T114] usb 3-1: config 25 has no interface number 0 [ 520.222678][ T114] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 520.236295][ T114] usb 3-1: config 25 interface 210 has no altsetting 0 [ 520.434877][ T114] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 520.444298][ T114] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 520.452723][ T114] usb 3-1: Product: syz [ 521.141457][ T114] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 521.162487][ T114] gspca_stk1135: reg_w 0x2 err -71 [ 521.168837][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 521.176576][ T114] gspca_stk1135: Sensor write failed [ 521.182111][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 521.188586][ T114] gspca_stk1135: Sensor write failed [ 521.194191][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 521.200644][ T114] gspca_stk1135: Sensor read failed [ 521.206120][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 521.212695][ T114] gspca_stk1135: Sensor read failed [ 521.218024][ T114] gspca_stk1135: Detected sensor type unknown (0x0) [ 521.225030][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 521.231502][ T114] gspca_stk1135: Sensor read failed [ 521.242883][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 521.249337][ T114] gspca_stk1135: Sensor read failed [ 521.255167][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 521.261641][ T114] gspca_stk1135: Sensor write failed [ 521.267223][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 521.273755][ T114] gspca_stk1135: Sensor write failed [ 521.279343][ T114] stk1135: probe of 3-1:25.210 failed with error -71 [ 521.300754][ T114] usb 3-1: USB disconnect, device number 84 14:56:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:56:04 executing program 5: prctl$PR_SET_VMA(0x1e, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 14:56:04 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)=[{}, {}]}) 14:56:04 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) 14:56:04 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, 0x0, 0x0) 14:56:04 executing program 0: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) 14:56:04 executing program 5: r0 = socket(0x18, 0x0, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 14:56:04 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) syz_open_dev$vcsn(&(0x7f00000016c0), 0xe0d1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:56:05 executing program 3: r0 = epoll_create1(0x0) r1 = io_uring_setup(0x3a70, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 14:56:05 executing program 4: socket(0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000005c0)={@any, 0x3f}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}}, 0x20008081) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)) 14:56:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 522.295841][ T114] usb 3-1: new high-speed USB device number 85 using dummy_hcd 14:56:05 executing program 5: r0 = socket(0x29, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) [ 522.583261][ T114] usb 3-1: Using ep0 maxpacket: 8 [ 522.783379][ T114] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 522.792238][ T114] usb 3-1: config 25 has no interface number 0 [ 522.798616][ T114] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 522.812326][ T114] usb 3-1: config 25 interface 210 has no altsetting 0 [ 522.893278][ T114] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 522.902794][ T114] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 522.910990][ T114] usb 3-1: Product: syz [ 523.548288][ T114] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 523.575068][ T114] gspca_stk1135: reg_w 0x2 err -71 [ 523.581386][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 523.594848][ T114] gspca_stk1135: Sensor write failed [ 523.600333][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 523.607434][ T114] gspca_stk1135: Sensor write failed [ 523.612961][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 523.619505][ T114] gspca_stk1135: Sensor read failed [ 523.625035][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 523.631505][ T114] gspca_stk1135: Sensor read failed [ 523.636909][ T114] gspca_stk1135: Detected sensor type unknown (0x0) [ 523.643761][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 523.650210][ T114] gspca_stk1135: Sensor read failed [ 523.655656][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 523.662184][ T114] gspca_stk1135: Sensor read failed [ 523.667560][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 523.674148][ T114] gspca_stk1135: Sensor write failed [ 523.679612][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 523.686249][ T114] gspca_stk1135: Sensor write failed [ 523.691869][ T114] stk1135: probe of 3-1:25.210 failed with error -71 [ 523.727344][ T114] usb 3-1: USB disconnect, device number 85 14:56:07 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:56:07 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='x\x14q\xa8\x8c\xc6K\xd5\xa0x\x00\x1a:l\xee\x00\x00\x00\x00\x00\x000V\xbe\xd46ou\'\x87\x87\x17\xbd*h\x01\xcde=w3j\xa6\xb8\xc6\x13\x00\x89\xd8\x8d!\x02\x00\x00\x00<\x95\n\xb1\xdacw\xac\xbb\n\x89\x8b5\"V\xbd\xa91/J\xa0\xb9[\xdc\xb4\xe1\x1c\xe4\xae\xac\x96!!%\"\x1d\x9f\xabW\xfe\xce\x8d\x1f\xbc\xff\xadl\xa7\xb4\xdf\xcb\xab\xae\xce\x03\x8fmX\x862\xd7?\xdf\xc2,\xf3\xab\xe4\x01\x00\x00\x009ZVc\xf716\xf0\xce\xa0\xde?a\xa4\xec38\x96\xba$\x1a\xb1}\xe8Cv\xe3N`@\x1b.\x04\xaa\x18M\x99\x01:\xfb \x13\x00') 14:56:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) 14:56:07 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4000196a11b000705830b"], 0x0) 14:56:07 executing program 1: r0 = epoll_create1(0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xff600000}) 14:56:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0xfffffdef}}, 0x0) 14:56:07 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:07 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x5b3081) 14:56:07 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, 0x0) 14:56:07 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40401, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0x7fe, "89e1c30347d50fc48fa4a184319ec115eb61a74a64f62bbb52f7495ce734d31ca3962d7b4a5266fd2fb238d7ceb232dca5dc4e56defe2c9b3db7063411a37b083126a4f1683b8ec2d149c6ba1e623f660c6930e53b8a29f4a2159fa02fae745b43da2aeee13c38d733311f125f5aaab3ecc73406b957a67f5ac700601000c689e85bc327a02a8707649f655ffc58adb68d7492f216ccc7c612ad65f3f5a132792c0d4e0b57efd7b557a859555763c55e45d69145371be317db45d74de8a88b27066e2e06942569aff70854d970c1f1de7f6200a9c2ff699d0c7c4f177bf049c5aef15312ea4b63a6b5e864e9bdd2230113c50b71c84f4fe5d1dfba17309ae0df2228820c74bfa4d915ca544e0a22ef2185d9b1d0a32f6333a00331d176a5b8f5142a88c4c29291ff29e8e9109e5a3c803d98a78294a7c41e8170be0775171ac8d1868594e5c856bb56534c234f6d6f4def6e367575e2ef8077d5510f6f9dd3fff2779355aefea83384652af1196297f2d2a2234a96e4c4b6d115177d7f3e3d73cc25bfdf43b5fee9cfd4991bfb1df6605e433a2cd38b654370ba4e6bf6339e48bc57b80c297774c23bddd5741b3eede52f1e7bd9aa7e14fd31cb197abfa84c0336e5be7eb870e5a9d9879f889bda1ad948a83dad3d7a2e5e4908a3a74ac2fa0c7725166fb42971aac6d81f4ad83c769cf4196fd6a3f842f464ece3bb9387946fe56dd24610d99f5adf5bd301c5a9419a5c54ecc800ea0d151e4c90e7a0c6c955e1de39c7893b1c05e02624728f96918688e79ae92ae3e94b93f1307c4c25286594643cf2a0fceaeec532634ae591f893f1b92a829e627ab5673db4ce5c335af92fb2717d4b84a77e24195a83ad30b2bf619ac1f84bdab9fb2acdc11226ed7e3b88001d6e9dfde2f36809ece530b11be2501a7b9edd6f503ba1d609aabf772628870234a368624e378c37746ccd369aaab2ec3cf397536c17d7da7d0522909931bf590c5d15e256472e51de78d4695c38ca6beb77d55ef03f70d9e7b089626403340ccfddd7c58193fdae689f00f778878009172c3c7bef83582bcb14eb0bb6a3a94225c6c67bae999cbe423b1e59e6da4576b20961f3f17ba0b7a9bba951d148088a5b80ee6a99041e732600a991a548b7e288fcc7f2d82882303d9f63d85c4078dcf984358d899f33f8daed4f6f273c2ba0d50542f0e1bcce804994e5c5711bbc74c59e42423b9080bc8bbff14c54dfd2e08215adaeb8478256ead0286626c6e9e95f848adddae2e314de5f6d636dbcd43082b215611b6364271162fc4b79ec68d5af6166342ba68fedf958182ec51596bd78aa8557e2c50cde46e30aa0358d224542ebf14086f07c02cc9767ba836cd3e3a4a242d998275c46cf5db711dd285e8a4a2f2cd448bf140af5e3ce80c3c2466f39a2693c08f24d4c195fd39f3f35de381640a4b13d2b612e9fe753d9f0e5c1251bcf45da79df65b63802e36a5c1dbf03f46b7a479dca023f404596c42a19f0463798fb1dc9e20dc21a70c2a39d1c6dce523c25389d9e01a17a15dcd975515ae7b39d7d7782ee8c17b36d75e4de0ca9fde6e5dfe14bc118a1810f3e265fcd70a93dc6894f585adc10a42c85baa236be0ca70c50c9b4986ea6c97a67baecaeae84d3896874286dd314912a8595c80220102222af0050e195c872f7f4f5df6aa692584dc3e0ea93e444bc568b7228f4c7083ac32e2cd607df6761f414bc5f9728e43e8dc6aa3bb0bd3e14f284e5f60b6cf152419f24cc0131492c000ed2f42d43d928279e7d10e9951db4b45bf4a84ac57b12a104b773942ac1b9e6956e4af1221b2cae9410c81505df33c278ed0bb03fcd8230b19b22a731432e0d6c3fa32788ab7bcaca6b870ea3eaf0c9a7fac75f25bf240e5e7db0c79075621b673b2a1e2684fa8eb715bcf5cacdb56620927c1e9380ad79182b101facce52d2c75bbe24835c0748d9d05deb79c15d2a600f6f6857cb2a2c30225376cd02114dbd2b025a1846096ffe29f236c8ab462c52c4fb648aa7090817f1135c65ae02e099acd1f4a2f615651391bd1e62df5c57bd66109bdf6b319a90ff706b4f7003aea2e052fbd44a1de771e674585dc938895a3a8349808769c96aa08c1fc59c9d8156f2a1ca3ceea467a3bb87312843ac294b88bf5c02f23b8e5cca239fd68e75cce3200a3f083d2598f9e77d807271a5c387cbfb6c3764061dee1a004518d2779a7dfb59df93e470c50a4ac37fee01a1e61f496801b2d2daa79e122a9b1898cebe496bbc0ecf5e628d4b6670fd13aad435baa77109573dc59e3ff5401e246ab4083f11783e44af4ff354910b76d5e4d0363c23787e2878c8828f779a602bba06f3ee8b285fae8e632549fa056139e872d4f15b4870286a822fa79bc8f3d742c02206c815554c3e44867f99df9f73191c77c578b97bf189dcf4465e53d5bfe3ee9a7e1d3380451c32bae9e9594d7cf49c8968451710077c566db1267fe3ff26439f4447e831cd5311d13d930e603356c623171ff4c2db5f115368f39d1df99b3aa01e2af365ef5a40ff6f465d08e493e5013f0b14d247420053c5cfee5ce7d465b97fe662245176f2cdc829cbbe832cc5fc7f7307c5d0e52610e9d74bf5c91a01b0b81377abdbdaf97924aefbc0b9cd4d29b3f2b58189e2006745bffa9abfcc9069a30499932483eb59ae080a46fd572c2cf64bc1b70bc7e0018f77393cb903f23d75e04b012aa34392ed16863e4a1b83aeedb6eb4e1fd29dc2a3fac196d69b03da0f1b796ef522f93944639192c08da8e1b483e7a9d5fab75db190b98c6ec5ebe3d2839d3dd8f9d1b5c4a44acc961c0e4fa9ed858b4c6f4863dc3d60274f8d4159b46b9f305611eb5597a35c478e455396643f"}}, 0x804) [ 524.402362][ T114] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 524.662163][ T114] usb 5-1: Using ep0 maxpacket: 8 [ 524.713980][ T7865] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 524.820936][ T114] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 524.829704][ T114] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.840179][ T114] usb 5-1: config 0 has no interface number 0 [ 524.846587][ T114] usb 5-1: config 0 interface 228 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 524.858390][ T114] usb 5-1: config 0 interface 228 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 524.868693][ T114] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 524.878144][ T114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:56:08 executing program 0: prctl$PR_SET_VMA(0x3b, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) [ 524.981195][ T114] usb 5-1: config 0 descriptor?? 14:56:08 executing program 3: clock_gettime(0x7, &(0x7f0000000240)) [ 525.027462][ T7865] usb 3-1: Using ep0 maxpacket: 8 [ 525.040587][ T114] streamzap 5-1:0.228: streamzap_probe: endpoint Max Packet Size is 0!?! [ 525.153084][ T7865] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 525.161662][ T7865] usb 3-1: config 25 has no interface number 0 [ 525.168388][ T7865] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 525.182199][ T7865] usb 3-1: config 25 interface 210 has no altsetting 0 [ 525.254037][ T3562] usb 5-1: USB disconnect, device number 2 [ 525.326517][ T7865] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 525.340383][ T7865] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 525.349250][ T7865] usb 3-1: Product: syz [ 526.054504][ T7865] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 526.072763][ T7865] gspca_stk1135: reg_w 0x2 err -71 [ 526.079180][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 526.086474][ T7865] gspca_stk1135: Sensor write failed [ 526.091942][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 526.098596][ T7865] gspca_stk1135: Sensor write failed [ 526.104179][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 526.110669][ T7865] gspca_stk1135: Sensor read failed [ 526.116325][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 526.122952][ T7865] gspca_stk1135: Sensor read failed [ 526.128280][ T7865] gspca_stk1135: Detected sensor type unknown (0x0) [ 526.135290][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 526.141770][ T7865] gspca_stk1135: Sensor read failed [ 526.147376][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 526.159815][ T7865] gspca_stk1135: Sensor read failed [ 526.165698][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 526.172455][ T7865] gspca_stk1135: Sensor write failed [ 526.177948][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 526.184544][ T7865] gspca_stk1135: Sensor write failed [ 526.190138][ T7865] stk1135: probe of 3-1:25.210 failed with error -71 [ 526.239657][ T7865] usb 3-1: USB disconnect, device number 86 [ 526.390939][ T7897] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:56:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:56:09 executing program 0: prctl$PR_SET_VMA(0x10, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 14:56:09 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="fcf6d0de4a96321c3f47da23d6a7c4de967a40") 14:56:09 executing program 3: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0xff600000) 14:56:09 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4000196a11b000705830b"], 0x0) 14:56:09 executing program 3: prctl$PR_SET_VMA(0x3, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) [ 527.013016][ T3562] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 527.255892][ T3562] usb 5-1: Using ep0 maxpacket: 8 [ 527.372562][ T3562] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 527.384628][ T3562] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.395665][ T3562] usb 5-1: config 0 has no interface number 0 [ 527.402022][ T3562] usb 5-1: config 0 interface 228 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 527.413360][ T3562] usb 5-1: config 0 interface 228 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 527.423641][ T3562] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 527.432961][ T3562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.472614][ T3562] usb 5-1: config 0 descriptor?? [ 527.522236][ T3562] streamzap 5-1:0.228: streamzap_probe: endpoint Max Packet Size is 0!?! [ 527.536215][ T28] usb 3-1: new high-speed USB device number 87 using dummy_hcd 14:56:10 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:10 executing program 3: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 14:56:10 executing program 0: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x80000001, 0x2, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 14:56:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 527.768278][ T7865] usb 5-1: USB disconnect, device number 3 [ 527.792396][ T28] usb 3-1: Using ep0 maxpacket: 8 14:56:10 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:10 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000340), 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001680)={0x0, 0x1, &(0x7f0000001580)=[0x0], 0x0, 0x0, &(0x7f0000001640)}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x2000, 0x0) [ 527.914150][ T28] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 527.922703][ T28] usb 3-1: config 25 has no interface number 0 [ 527.929113][ T28] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 527.942785][ T28] usb 3-1: config 25 interface 210 has no altsetting 0 [ 528.129835][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 528.139905][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 528.148232][ T28] usb 3-1: Product: syz [ 529.032724][ T28] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 529.072513][ T28] gspca_stk1135: reg_w 0x2 err -71 [ 529.079009][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 529.085806][ T28] gspca_stk1135: Sensor write failed [ 529.091277][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 529.097980][ T28] gspca_stk1135: Sensor write failed [ 529.103542][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 529.110015][ T28] gspca_stk1135: Sensor read failed [ 529.115594][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 529.127908][ T28] gspca_stk1135: Sensor read failed [ 529.133704][ T28] gspca_stk1135: Detected sensor type unknown (0x0) [ 529.140495][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 529.147018][ T28] gspca_stk1135: Sensor read failed [ 529.152535][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 529.159005][ T28] gspca_stk1135: Sensor read failed [ 529.164493][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 529.171050][ T28] gspca_stk1135: Sensor write failed [ 529.176620][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 529.183150][ T28] gspca_stk1135: Sensor write failed [ 529.188755][ T28] stk1135: probe of 3-1:25.210 failed with error -71 [ 529.412482][ T28] usb 3-1: USB disconnect, device number 87 14:56:12 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:56:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:12 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4000196a11b000705830b"], 0x0) 14:56:12 executing program 0: r0 = socket(0x29, 0x2, 0x0) bind$qrtr(r0, 0x0, 0x0) 14:56:12 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) 14:56:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 530.039061][ T28] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 530.293107][ T28] usb 5-1: Using ep0 maxpacket: 8 [ 530.302975][ T114] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 530.423545][ T28] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 530.432162][ T28] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.442654][ T28] usb 5-1: config 0 has no interface number 0 [ 530.453268][ T28] usb 5-1: config 0 interface 228 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 530.465085][ T28] usb 5-1: config 0 interface 228 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 530.475433][ T28] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 530.484824][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.566349][ T114] usb 3-1: Using ep0 maxpacket: 8 [ 530.684103][ T114] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 530.693124][ T114] usb 3-1: config 25 has no interface number 0 [ 530.699507][ T114] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 530.713234][ T114] usb 3-1: config 25 interface 210 has no altsetting 0 [ 530.778687][ T28] usb 5-1: config 0 descriptor?? [ 530.838665][ T28] streamzap 5-1:0.228: streamzap_probe: endpoint Max Packet Size is 0!?! [ 530.893415][ T114] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 530.903030][ T114] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 530.911346][ T114] usb 3-1: Product: syz [ 531.059142][ T7934] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 531.084671][ T28] usb 5-1: USB disconnect, device number 4 [ 531.422716][ T7937] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 531.593593][ T114] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 531.641285][ T114] gspca_stk1135: reg_w 0x2 err -71 [ 531.647957][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 531.654627][ T114] gspca_stk1135: Sensor write failed [ 531.660088][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 531.666708][ T114] gspca_stk1135: Sensor write failed [ 531.672404][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 531.684686][ T114] gspca_stk1135: Sensor read failed [ 531.690070][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 531.697275][ T114] gspca_stk1135: Sensor read failed [ 531.702673][ T114] gspca_stk1135: Detected sensor type unknown (0x0) [ 531.709478][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 531.716082][ T114] gspca_stk1135: Sensor read failed [ 531.721463][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 531.728078][ T114] gspca_stk1135: Sensor read failed [ 531.733540][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 531.740003][ T114] gspca_stk1135: Sensor write failed [ 531.745617][ T114] gspca_stk1135: serial bus timeout: status=0x00 [ 531.752183][ T114] gspca_stk1135: Sensor write failed [ 531.757783][ T114] stk1135: probe of 3-1:25.210 failed with error -71 [ 532.061418][ T114] usb 3-1: USB disconnect, device number 88 14:56:15 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:15 executing program 0: io_setup(0x30a, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 14:56:15 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4000196a11b000705830b"], 0x0) 14:56:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 532.875515][ T114] usb 5-1: new high-speed USB device number 5 using dummy_hcd 14:56:16 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:16 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:56:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:16 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000000)={0x9}, 0x0, 0x0) [ 533.135437][ T114] usb 5-1: Using ep0 maxpacket: 8 [ 533.253080][ T114] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 533.261703][ T114] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.272226][ T114] usb 5-1: config 0 has no interface number 0 [ 533.278511][ T114] usb 5-1: config 0 interface 228 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 533.289887][ T114] usb 5-1: config 0 interface 228 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 14:56:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 533.300357][ T114] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 533.309740][ T114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.424092][ T28] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 533.609092][ T114] usb 5-1: config 0 descriptor?? [ 533.699314][ T114] streamzap 5-1:0.228: streamzap_probe: endpoint Max Packet Size is 0!?! [ 533.772261][ T28] usb 3-1: Using ep0 maxpacket: 8 14:56:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 533.909811][ T28] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 533.911517][ T114] usb 5-1: USB disconnect, device number 5 [ 533.918391][ T28] usb 3-1: config 25 has no interface number 0 [ 533.934519][ T28] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 533.948595][ T28] usb 3-1: config 25 interface 210 has no altsetting 0 14:56:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x33fe0}}, 0x0) [ 534.173870][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 534.183476][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 534.191674][ T28] usb 3-1: Product: syz 14:56:17 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) [ 534.954007][ T28] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 535.015100][ T28] gspca_stk1135: reg_w 0x2 err -71 [ 535.021524][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 535.028244][ T28] gspca_stk1135: Sensor write failed [ 535.033904][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 535.040379][ T28] gspca_stk1135: Sensor write failed [ 535.045991][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 535.052747][ T28] gspca_stk1135: Sensor read failed [ 535.063987][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 535.070467][ T28] gspca_stk1135: Sensor read failed [ 535.076259][ T28] gspca_stk1135: Detected sensor type unknown (0x0) [ 535.083113][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 535.089580][ T28] gspca_stk1135: Sensor read failed [ 535.095070][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 535.101539][ T28] gspca_stk1135: Sensor read failed [ 535.107025][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 535.113570][ T28] gspca_stk1135: Sensor write failed [ 535.119025][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 535.125615][ T28] gspca_stk1135: Sensor write failed [ 535.131256][ T28] stk1135: probe of 3-1:25.210 failed with error -71 [ 535.191068][ T28] usb 3-1: USB disconnect, device number 89 [ 535.757507][ T7963] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 536.370984][ T7972] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 14:56:19 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:19 executing program 4: 14:56:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x91) 14:56:20 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:56:20 executing program 0: r0 = socket(0x29, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10}], 0x10}, 0x38) 14:56:20 executing program 4: 14:56:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:20 executing program 4: 14:56:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x5, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) [ 538.035217][ T3562] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 538.292332][ T3562] usb 3-1: Using ep0 maxpacket: 8 [ 538.453254][ T3562] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 538.461829][ T3562] usb 3-1: config 25 has no interface number 0 [ 538.468371][ T3562] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 538.482062][ T3562] usb 3-1: config 25 interface 210 has no altsetting 0 [ 538.652344][ T3562] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 538.661647][ T3562] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 538.670008][ T3562] usb 3-1: Product: syz [ 539.308374][ T7990] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 539.378832][ T3562] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 539.416302][ T3562] gspca_stk1135: reg_w 0x2 err -71 [ 539.422773][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 539.429258][ T3562] gspca_stk1135: Sensor write failed [ 539.434946][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 539.441419][ T3562] gspca_stk1135: Sensor write failed [ 539.447044][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 539.453634][ T3562] gspca_stk1135: Sensor read failed [ 539.459013][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 539.471358][ T3562] gspca_stk1135: Sensor read failed [ 539.477242][ T3562] gspca_stk1135: Detected sensor type unknown (0x0) [ 539.484094][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 539.490559][ T3562] gspca_stk1135: Sensor read failed [ 539.497468][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 539.503989][ T3562] gspca_stk1135: Sensor read failed [ 539.509366][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 539.515890][ T3562] gspca_stk1135: Sensor write failed [ 539.521350][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 539.528833][ T3562] gspca_stk1135: Sensor write failed [ 539.534495][ T3562] stk1135: probe of 3-1:25.210 failed with error -71 [ 539.723169][ T3562] usb 3-1: USB disconnect, device number 90 [ 540.268828][ T8000] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 14:56:23 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:23 executing program 4: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 14:56:23 executing program 0: sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000001c40)) 14:56:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:24 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:56:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:56:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:24 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0xffffffffffffff13) 14:56:24 executing program 4: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 14:56:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:24 executing program 0: socketpair(0x1d, 0x0, 0x6, &(0x7f0000001c40)) [ 541.824218][ T7865] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 542.072436][ T7865] usb 3-1: Using ep0 maxpacket: 8 14:56:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 542.193500][ T7865] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 542.202223][ T7865] usb 3-1: config 25 has no interface number 0 [ 542.208590][ T7865] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 542.222344][ T7865] usb 3-1: config 25 interface 210 has no altsetting 0 [ 542.413741][ T7865] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 542.423372][ T7865] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 542.435278][ T7865] usb 3-1: Product: syz [ 543.184827][ T7865] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 543.202392][ T7865] gspca_stk1135: reg_w 0x2 err -71 [ 543.208877][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 543.215614][ T7865] gspca_stk1135: Sensor write failed [ 543.221088][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 543.227729][ T7865] gspca_stk1135: Sensor write failed [ 543.233281][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 543.239778][ T7865] gspca_stk1135: Sensor read failed [ 543.245314][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 543.257579][ T7865] gspca_stk1135: Sensor read failed [ 543.263678][ T7865] gspca_stk1135: Detected sensor type unknown (0x0) [ 543.270473][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 543.277079][ T7865] gspca_stk1135: Sensor read failed [ 543.282518][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 543.288976][ T7865] gspca_stk1135: Sensor read failed [ 543.294433][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 543.300896][ T7865] gspca_stk1135: Sensor write failed [ 543.306443][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 543.313025][ T7865] gspca_stk1135: Sensor write failed [ 543.318620][ T7865] stk1135: probe of 3-1:25.210 failed with error -71 [ 543.361130][ T8017] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 543.536153][ T7865] usb 3-1: USB disconnect, device number 91 14:56:27 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:27 executing program 4: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 14:56:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 14:56:27 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:28 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:56:28 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:56:28 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x300}, 0x0) 14:56:28 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 14:56:28 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r3, 0x0) 14:56:28 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 545.782316][ T7865] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 545.814087][ T3562] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 546.023048][ T3562] usb 5-1: device descriptor read/64, error 18 [ 546.031788][ T7865] usb 3-1: Using ep0 maxpacket: 8 14:56:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 546.228580][ T7865] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 546.237162][ T7865] usb 3-1: config 25 has no interface number 0 [ 546.243650][ T7865] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 546.257286][ T7865] usb 3-1: config 25 interface 210 has no altsetting 0 [ 546.303384][ T3562] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 546.394710][ T7865] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 546.404830][ T7865] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 546.413210][ T7865] usb 3-1: Product: syz [ 546.499765][ T3562] usb 5-1: device descriptor read/64, error 18 [ 546.624730][ T3562] usb usb5-port1: attempt power cycle [ 547.062382][ T3562] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 547.072919][ T8048] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 547.119039][ T7865] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 547.169357][ T7865] gspca_stk1135: reg_w 0x2 err -71 [ 547.175987][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 547.182658][ T7865] gspca_stk1135: Sensor write failed [ 547.188129][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 547.194723][ T7865] gspca_stk1135: Sensor write failed [ 547.200194][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 547.206819][ T7865] gspca_stk1135: Sensor read failed [ 547.212315][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 547.218821][ T7865] gspca_stk1135: Sensor read failed [ 547.224517][ T7865] gspca_stk1135: Detected sensor type unknown (0x0) [ 547.231325][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 547.237972][ T7865] gspca_stk1135: Sensor read failed [ 547.243141][ T3562] usb 5-1: device descriptor read/8, error -61 [ 547.249178][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 547.256430][ T7865] gspca_stk1135: Sensor read failed [ 547.261814][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 547.268380][ T7865] gspca_stk1135: Sensor write failed [ 547.273904][ T7865] gspca_stk1135: serial bus timeout: status=0x00 [ 547.280371][ T7865] gspca_stk1135: Sensor write failed [ 547.286072][ T7865] stk1135: probe of 3-1:25.210 failed with error -71 [ 547.498997][ T7865] usb 3-1: USB disconnect, device number 92 [ 547.541159][ T3562] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 547.726579][ T3562] usb 5-1: device descriptor read/8, error -61 [ 547.853311][ T3562] usb usb5-port1: unable to enumerate USB device 14:56:31 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:31 executing program 0: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000140)=0x9, 0x8, 0x0) 14:56:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:31 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) [ 548.873120][ T3562] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 549.182897][ T3562] usb 3-1: Using ep0 maxpacket: 8 14:56:32 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:56:32 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 14:56:32 executing program 0: prctl$PR_SET_VMA(0x8, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 14:56:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 549.313198][ T3562] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 549.321721][ T3562] usb 3-1: config 25 has no interface number 0 [ 549.328272][ T3562] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 549.342039][ T3562] usb 3-1: config 25 interface 210 has no altsetting 0 [ 549.433248][ T3562] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 549.442908][ T3562] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 549.451124][ T3562] usb 3-1: Product: syz 14:56:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:32 executing program 0: io_setup(0x30a, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 549.782391][ T124] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 550.022286][ T124] usb 5-1: device descriptor read/64, error 18 14:56:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 550.199323][ T3562] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 550.247552][ T3562] gspca_stk1135: reg_w 0x2 err -71 [ 550.254244][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 550.260726][ T3562] gspca_stk1135: Sensor write failed [ 550.266319][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 550.272844][ T3562] gspca_stk1135: Sensor write failed [ 550.278310][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 550.284893][ T3562] gspca_stk1135: Sensor read failed [ 550.290344][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 550.296873][ T3562] gspca_stk1135: Sensor read failed [ 550.302417][ T3562] gspca_stk1135: Detected sensor type unknown (0x0) [ 550.309208][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 550.321580][ T3562] gspca_stk1135: Sensor read failed [ 550.327403][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 550.333928][ T3562] gspca_stk1135: Sensor read failed [ 550.339305][ T3562] gspca_stk1135: serial bus timeout: status=0x00 14:56:33 executing program 0: shmget(0x2, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) [ 550.345838][ T3562] gspca_stk1135: Sensor write failed [ 550.351304][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 550.357836][ T3562] gspca_stk1135: Sensor write failed [ 550.363497][ T3562] stk1135: probe of 3-1:25.210 failed with error -71 [ 550.375915][ T124] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 550.583766][ T124] usb 5-1: device descriptor read/64, error 18 [ 550.703013][ T124] usb usb5-port1: attempt power cycle [ 550.892162][ T3562] usb 3-1: USB disconnect, device number 93 [ 551.142163][ T124] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 551.352422][ T124] usb 5-1: device descriptor read/8, error -61 [ 551.388459][ T8076] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 551.633126][ T124] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 551.803354][ T124] usb 5-1: device descriptor read/8, error -61 [ 551.922919][ T124] usb usb5-port1: unable to enumerate USB device 14:56:35 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:35 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 14:56:35 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000040)='[\x00') mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) syz_io_uring_setup(0x7d18, &(0x7f0000000080), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) [ 552.682731][ T7864] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 553.012835][ T7864] usb 3-1: Using ep0 maxpacket: 8 [ 553.146697][ T7864] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 553.155444][ T7864] usb 3-1: config 25 has no interface number 0 [ 553.161808][ T7864] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 553.175704][ T7864] usb 3-1: config 25 interface 210 has no altsetting 0 [ 553.266430][ T7864] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 553.275968][ T7864] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 553.287837][ T7864] usb 3-1: Product: syz 14:56:36 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:56:36 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 14:56:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:36 executing program 0: mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 14:56:36 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000001bc0), 0x40000, 0x0) 14:56:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 553.732626][ T28] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 553.918937][ T7864] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 553.932382][ T28] usb 5-1: device descriptor read/64, error 18 [ 553.953739][ T7864] gspca_stk1135: reg_w 0x2 err -71 [ 553.960086][ T7864] gspca_stk1135: serial bus timeout: status=0x00 [ 553.967318][ T7864] gspca_stk1135: Sensor write failed [ 553.972892][ T7864] gspca_stk1135: serial bus timeout: status=0x00 [ 553.979394][ T7864] gspca_stk1135: Sensor write failed [ 553.985076][ T7864] gspca_stk1135: serial bus timeout: status=0x00 [ 553.991551][ T7864] gspca_stk1135: Sensor read failed [ 553.997041][ T7864] gspca_stk1135: serial bus timeout: status=0x00 [ 554.009920][ T7864] gspca_stk1135: Sensor read failed [ 554.015344][ T7864] gspca_stk1135: Detected sensor type unknown (0x0) [ 554.022311][ T7864] gspca_stk1135: serial bus timeout: status=0x00 [ 554.028791][ T7864] gspca_stk1135: Sensor read failed [ 554.034266][ T7864] gspca_stk1135: serial bus timeout: status=0x00 [ 554.040748][ T7864] gspca_stk1135: Sensor read failed [ 554.046220][ T7864] gspca_stk1135: serial bus timeout: status=0x00 [ 554.052786][ T7864] gspca_stk1135: Sensor write failed [ 554.058256][ T7864] gspca_stk1135: serial bus timeout: status=0x00 [ 554.064819][ T7864] gspca_stk1135: Sensor write failed [ 554.070428][ T7864] stk1135: probe of 3-1:25.210 failed with error -71 14:56:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 554.212425][ T28] usb 5-1: new high-speed USB device number 15 using dummy_hcd 14:56:37 executing program 0: prctl$PR_SET_VMA(0x22, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) [ 554.419949][ T28] usb 5-1: device descriptor read/64, error 18 [ 554.542836][ T28] usb usb5-port1: attempt power cycle [ 554.568319][ T7864] usb 3-1: USB disconnect, device number 94 [ 554.973164][ T28] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 555.162912][ T28] usb 5-1: device descriptor read/8, error -61 [ 555.197594][ T8104] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 555.446584][ T28] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 555.648890][ T28] usb 5-1: device descriptor read/8, error -61 14:56:38 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:56:38 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 14:56:38 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:38 executing program 0: prctl$PR_SET_VMA(0x3e, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 14:56:38 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 555.773348][ T28] usb usb5-port1: unable to enumerate USB device [ 556.143060][ T28] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 556.392190][ T28] usb 3-1: Using ep0 maxpacket: 8 14:56:39 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 14:56:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x4001}, 0x20) 14:56:39 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 556.522914][ T28] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 556.531529][ T28] usb 3-1: config 25 has no interface number 0 [ 556.538022][ T28] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 556.551738][ T28] usb 3-1: config 25 interface 210 has no altsetting 0 14:56:39 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 556.913231][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 556.922690][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 556.930897][ T28] usb 3-1: Product: syz 14:56:40 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) [ 557.392400][ T3562] usb 5-1: new high-speed USB device number 18 using dummy_hcd 14:56:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00'}) 14:56:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x0) [ 557.594535][ T3562] usb 5-1: device descriptor read/64, error 18 [ 557.710269][ T28] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 557.787686][ T28] gspca_stk1135: reg_w 0x2 err -71 [ 557.800951][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 557.809386][ T28] gspca_stk1135: Sensor write failed [ 557.814914][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 557.821396][ T28] gspca_stk1135: Sensor write failed [ 557.826918][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 557.833448][ T28] gspca_stk1135: Sensor read failed [ 557.838914][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 557.845443][ T28] gspca_stk1135: Sensor read failed [ 557.850774][ T28] gspca_stk1135: Detected sensor type unknown (0x0) [ 557.857639][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 557.864168][ T28] gspca_stk1135: Sensor read failed [ 557.869549][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 557.876085][ T28] gspca_stk1135: Sensor read failed [ 557.881460][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 557.887985][ T28] gspca_stk1135: Sensor write failed [ 557.893511][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 557.899981][ T28] gspca_stk1135: Sensor write failed [ 557.905644][ T28] stk1135: probe of 3-1:25.210 failed with error -71 [ 558.002448][ T3562] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 558.192186][ T3562] usb 5-1: device descriptor read/64, error 18 [ 558.312860][ T3562] usb usb5-port1: attempt power cycle [ 558.534499][ T28] usb 3-1: USB disconnect, device number 95 [ 558.722173][ T3562] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 558.924537][ T3562] usb 5-1: device descriptor read/8, error -61 [ 559.199054][ T3562] usb 5-1: new high-speed USB device number 21 using dummy_hcd 14:56:42 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:56:42 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 559.398249][ T3562] usb 5-1: device descriptor read/8, error -61 [ 559.526523][ T3562] usb usb5-port1: unable to enumerate USB device 14:56:43 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x0) 14:56:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 14:56:43 executing program 0: add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\b', 0x1, 0xffffffffffffffff) 14:56:43 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 14:56:43 executing program 0: r0 = socket(0x29, 0x2, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x8800) 14:56:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x0) [ 560.482347][ T3562] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 560.752627][ T114] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 560.872525][ T3562] usb 3-1: Using ep0 maxpacket: 8 14:56:44 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$fb(r0, 0x0, 0x0) [ 560.952519][ T114] usb 5-1: device descriptor read/64, error 18 [ 560.993053][ T3562] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 561.001623][ T3562] usb 3-1: config 25 has no interface number 0 [ 561.008178][ T3562] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 561.021773][ T3562] usb 3-1: config 25 interface 210 has no altsetting 0 14:56:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 561.163250][ T3562] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 561.177028][ T3562] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 561.185348][ T3562] usb 3-1: Product: syz [ 561.223323][ T114] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 561.413033][ T114] usb 5-1: device descriptor read/64, error 18 14:56:44 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x410001, 0x0) [ 561.537031][ T114] usb usb5-port1: attempt power cycle [ 561.849198][ T3562] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 561.905928][ T3562] gspca_stk1135: reg_w 0x2 err -71 [ 561.912399][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 561.918904][ T3562] gspca_stk1135: Sensor write failed [ 561.925133][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 561.931613][ T3562] gspca_stk1135: Sensor write failed [ 561.937251][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 561.943863][ T3562] gspca_stk1135: Sensor read failed [ 561.949248][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 561.955989][ T3562] gspca_stk1135: Sensor read failed [ 561.961316][ T3562] gspca_stk1135: Detected sensor type unknown (0x0) [ 561.962544][ T114] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 561.968124][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 561.968173][ T3562] gspca_stk1135: Sensor read failed [ 561.968257][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 562.001169][ T3562] gspca_stk1135: Sensor read failed [ 562.007113][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 562.013664][ T3562] gspca_stk1135: Sensor write failed [ 562.019127][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 562.025731][ T3562] gspca_stk1135: Sensor write failed [ 562.031356][ T3562] stk1135: probe of 3-1:25.210 failed with error -71 [ 562.174360][ T114] usb 5-1: device descriptor read/8, error -61 [ 562.285380][ T3562] usb 3-1: USB disconnect, device number 96 [ 562.453015][ T114] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 562.623175][ T114] usb 5-1: device descriptor read/8, error -61 [ 562.747139][ T114] usb usb5-port1: unable to enumerate USB device [ 563.253113][ T8165] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:56:46 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:56:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 14:56:47 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:47 executing program 0: prctl$PR_SET_VMA(0x27, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 14:56:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 14:56:47 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 14:56:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 14:56:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000700)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00070080000000030000068845e7001400640000482f90780a"]}) 14:56:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 564.722557][ T3562] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 564.792630][ T7926] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 564.983010][ T3562] usb 3-1: Using ep0 maxpacket: 8 [ 564.988510][ T7926] usb 5-1: device descriptor read/64, error 18 14:56:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 565.106265][ T3562] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 565.114902][ T3562] usb 3-1: config 25 has no interface number 0 [ 565.121363][ T3562] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 565.135094][ T3562] usb 3-1: config 25 interface 210 has no altsetting 0 14:56:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) [ 565.302505][ T7926] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 565.363431][ T3562] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 565.376442][ T3562] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 565.385271][ T3562] usb 3-1: Product: syz [ 565.492244][ T7926] usb 5-1: device descriptor read/64, error 18 [ 565.614587][ T7926] usb usb5-port1: attempt power cycle 14:56:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 566.042289][ T7926] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 566.099084][ T3562] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 566.137425][ T3562] gspca_stk1135: reg_w 0x2 err -71 [ 566.144343][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 566.150824][ T3562] gspca_stk1135: Sensor write failed [ 566.157021][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 566.163562][ T3562] gspca_stk1135: Sensor write failed [ 566.169031][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 566.175765][ T3562] gspca_stk1135: Sensor read failed [ 566.181222][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 566.193891][ T3562] gspca_stk1135: Sensor read failed [ 566.199226][ T3562] gspca_stk1135: Detected sensor type unknown (0x0) [ 566.206522][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 566.213115][ T3562] gspca_stk1135: Sensor read failed [ 566.218489][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 566.225065][ T3562] gspca_stk1135: Sensor read failed [ 566.230445][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 566.237032][ T3562] gspca_stk1135: Sensor write failed [ 566.242565][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 566.249088][ T3562] gspca_stk1135: Sensor write failed [ 566.254811][ T3562] stk1135: probe of 3-1:25.210 failed with error -71 [ 566.308525][ T3562] usb 3-1: USB disconnect, device number 97 [ 566.343658][ T7926] usb 5-1: device descriptor read/8, error -61 [ 566.615346][ T7926] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 566.823439][ T7926] usb 5-1: device descriptor read/8, error -61 [ 566.953127][ T7926] usb usb5-port1: unable to enumerate USB device 14:56:50 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:56:50 executing program 0: mount$fuseblk(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002180)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}) 14:56:51 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:56:51 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 14:56:51 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf000000010902"], 0x0) 14:56:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x4, 0x6, 0x201}, 0x14}}, 0x0) 14:56:51 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020) 14:56:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 568.702486][ T7926] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 568.777292][ T3562] usb 3-1: new high-speed USB device number 98 using dummy_hcd 14:56:52 executing program 0: syz_clone(0x4000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 569.022434][ T7926] usb 5-1: Using ep0 maxpacket: 8 [ 569.102249][ T3562] usb 3-1: Using ep0 maxpacket: 8 14:56:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 569.152409][ T7926] usb 5-1: config 0 has no interfaces? [ 569.162362][ T7926] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 569.171690][ T7926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.244251][ T3562] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 569.252866][ T3562] usb 3-1: config 25 has no interface number 0 [ 569.263195][ T3562] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 569.277330][ T3562] usb 3-1: config 25 interface 210 has no altsetting 0 [ 569.330066][ T7926] usb 5-1: config 0 descriptor?? [ 569.413327][ T3562] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 569.423008][ T3562] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 569.431213][ T3562] usb 3-1: Product: syz [ 569.581435][ T28] usb 5-1: USB disconnect, device number 30 14:56:52 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$packet(r0, &(0x7f0000000280), 0x14) [ 570.113380][ T3562] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 570.167429][ T3562] gspca_stk1135: reg_w 0x2 err -71 [ 570.174174][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 570.187043][ T3562] gspca_stk1135: Sensor write failed [ 570.192977][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 570.199455][ T3562] gspca_stk1135: Sensor write failed [ 570.204973][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 570.211462][ T3562] gspca_stk1135: Sensor read failed [ 570.216915][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 570.223454][ T3562] gspca_stk1135: Sensor read failed [ 570.228785][ T3562] gspca_stk1135: Detected sensor type unknown (0x0) [ 570.235650][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 570.242264][ T3562] gspca_stk1135: Sensor read failed [ 570.247639][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 570.254210][ T3562] gspca_stk1135: Sensor read failed [ 570.259579][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 570.266121][ T3562] gspca_stk1135: Sensor write failed [ 570.271603][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 570.278151][ T3562] gspca_stk1135: Sensor write failed [ 570.283822][ T3562] stk1135: probe of 3-1:25.210 failed with error -71 [ 570.641761][ T3562] usb 3-1: USB disconnect, device number 98 14:56:54 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf000000010902"], 0x0) 14:56:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 571.623190][ T7864] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 571.865752][ T7864] usb 5-1: Using ep0 maxpacket: 8 14:56:55 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:55 executing program 0: r0 = getpgrp(0xffffffffffffffff) mq_notify(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x1, @thr={&(0x7f00000001c0)="3a1658e0908747be9fe69b4f53024a6c6ab4ad57de1a870a66e1495a9daed85b4763955804edb299b2eb0536b0ef9dcfff507ed8aa94743124ea8acbd1e5ee85161d52e0885a9ebeca889623e4aa49067ebd9d727974e6dc60da24b60947408ed41a4457dc509485d5e78a2f5deb08ede3450eb62f5b1bfedff6cac384e639b7a9e6e5a3587ffbb15d353f9420fe14a66dead5ae6397e021e9aa80a26fff60a6a10bc17167e8531bd9d3ce0115c0b86da37b7a9c6f43d636d674463106f9eccb2ab1c9ef1c5afa4c2fd6810beae6f1bbfc27598389d520dc007a2dfd08d173dbef2f42c7ac7d54aa435b1251e9", &(0x7f0000004ec0)="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"}}) r1 = syz_clone(0x4400a000, &(0x7f0000000000)="6d72e3800e1bf2c53367db4b5842f072aa84f99e9c4cc4ebbfb3b5cd3f9465a7fef7dddf4fcd4ca8f52b761a6d23a4e556a58de116eab97c9e5287ad16bfb6c0b9f250330bb05a1648ba3ef69db6606101c531df487ff00b01492396ad72ae5ad014ccb3dad4837b7287499b07ba7e1bb53dbd", 0x73, &(0x7f0000000080), &(0x7f00000002c0), &(0x7f0000000100)="58f5b089feeb0ccb9b0e1cee3a438cd56b9610e9efdfbc78ab7ddde3dd1b03015dee4a16de4dec9c633b7163fa6e7c3354121093be0e99718c52222150ebb166ca69cb73b5aeb2e41053d9610d1131c9c94f02e629f7226ff67946641b5a12c2e9d58a427e1070039a912416a96287e44b1c10217eb70d0a1927bcaebb268a0d01fefa39c065ab9fb2f29e67fcbb14ad0506db14b3e0fe34b6a566fb348bd513965e67ad3c649768631a0c9bb7c64d45a1d4aa7f7721a9ed3cf0880899c7bfa6") getpgrp(r1) getpgrp(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000007900), 0x0, 0x0) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffff, 0x22}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}]}, 0x40}}, 0x20040880) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) getpgrp(0x0) 14:56:55 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:56:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 14:56:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 571.983416][ T7864] usb 5-1: config 0 has no interfaces? [ 571.989153][ T7864] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 571.998653][ T7864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.093809][ T7864] usb 5-1: config 0 descriptor?? [ 572.352919][ T7864] usb 5-1: USB disconnect, device number 31 14:56:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 572.529844][ T3562] usb 3-1: new high-speed USB device number 99 using dummy_hcd 14:56:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 572.784786][ T3562] usb 3-1: Using ep0 maxpacket: 8 14:56:56 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf000000010902"], 0x0) 14:56:56 executing program 0: r0 = getpgrp(0xffffffffffffffff) mq_notify(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x1, @thr={&(0x7f00000001c0)="3a1658e0908747be9fe69b4f53024a6c6ab4ad57de1a870a66e1495a9daed85b4763955804edb299b2eb0536b0ef9dcfff507ed8aa94743124ea8acbd1e5ee85161d52e0885a9ebeca889623e4aa49067ebd9d727974e6dc60da24b60947408ed41a4457dc509485d5e78a2f5deb08ede3450eb62f5b1bfedff6cac384e639b7a9e6e5a3587ffbb15d353f9420fe14a66dead5ae6397e021e9aa80a26fff60a6a10bc17167e8531bd9d3ce0115c0b86da37b7a9c6f43d636d674463106f9eccb2ab1c9ef1c5afa4c2fd6810beae6f1bbfc27598389d520dc007a2dfd08d173dbef2f42c7ac7d54aa435b1251e9", &(0x7f0000004ec0)="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"}}) r1 = syz_clone(0x4400a000, &(0x7f0000000000)="6d72e3800e1bf2c53367db4b5842f072aa84f99e9c4cc4ebbfb3b5cd3f9465a7fef7dddf4fcd4ca8f52b761a6d23a4e556a58de116eab97c9e5287ad16bfb6c0b9f250330bb05a1648ba3ef69db6606101c531df487ff00b01492396ad72ae5ad014ccb3dad4837b7287499b07ba7e1bb53dbd", 0x73, &(0x7f0000000080), &(0x7f00000002c0), &(0x7f0000000100)="58f5b089feeb0ccb9b0e1cee3a438cd56b9610e9efdfbc78ab7ddde3dd1b03015dee4a16de4dec9c633b7163fa6e7c3354121093be0e99718c52222150ebb166ca69cb73b5aeb2e41053d9610d1131c9c94f02e629f7226ff67946641b5a12c2e9d58a427e1070039a912416a96287e44b1c10217eb70d0a1927bcaebb268a0d01fefa39c065ab9fb2f29e67fcbb14ad0506db14b3e0fe34b6a566fb348bd513965e67ad3c649768631a0c9bb7c64d45a1d4aa7f7721a9ed3cf0880899c7bfa6") getpgrp(r1) getpgrp(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000007900), 0x0, 0x0) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffff, 0x22}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) read$FUSE(r4, &(0x7f0000002e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgrp(r5) [ 572.923745][ T3562] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 572.932350][ T3562] usb 3-1: config 25 has no interface number 0 [ 572.938731][ T3562] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 572.952386][ T3562] usb 3-1: config 25 interface 210 has no altsetting 0 [ 573.124238][ T3562] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 573.133666][ T3562] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 573.141882][ T3562] usb 3-1: Product: syz 14:56:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 573.603836][ T28] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 573.858829][ T3562] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 573.872662][ T28] usb 5-1: Using ep0 maxpacket: 8 14:56:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 573.913219][ T3562] gspca_stk1135: reg_w 0x2 err -71 [ 573.919580][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 573.926296][ T3562] gspca_stk1135: Sensor write failed [ 573.931773][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 573.940572][ T3562] gspca_stk1135: Sensor write failed [ 573.946221][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 573.952742][ T3562] gspca_stk1135: Sensor read failed [ 573.958126][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 573.964727][ T3562] gspca_stk1135: Sensor read failed [ 573.970138][ T3562] gspca_stk1135: Detected sensor type unknown (0x0) [ 573.977051][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 573.983587][ T3562] gspca_stk1135: Sensor read failed [ 573.988963][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 573.995536][ T3562] gspca_stk1135: Sensor read failed [ 574.000920][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 574.007495][ T3562] gspca_stk1135: Sensor write failed 14:56:57 executing program 0: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000640)="2f41b7ae5fa1fd9e8e6ced09f30e456faf7a08b68ab2e6856d87cbed0170f9227d717c2b5250f227e6adb42702e5bfd271d797fb88ee982a4b4f695b9ba4bccaf8b9fc9c65b8e99be3e82bb8e03f703f3d848d2f66c1acbd212c8b1045af42a585d2347435ffb2377dded85f06833f15dde9cba16bb86243f6bfc9bcd9ce61724dcd09cc0ca6e5f127701d11230bf4362af42b2cd8a75885b76e16f970dd18d653004d44187e7a218aa4d008d39dfe7b73f2ca90816e3a4b7c04da5e9e8c33f073a4e7dd4f6e1323a4e48f36eef78de70fafbb193b0afa73a9b8b6b1c608ad78e80b26d5818bcaffe63d8d12133c2102a8dfc9ba0ba04fc8859bd074816b960fb90ac653c1c6bb4d62473c3a474e79da3526e4a71c36e84f2580befae8d7143f362f9a58d16cc59cc442da01174fdf2d925116587823fbf85f9dea3020123a3afdf144c428fa65905d21da0f00e5fa66ec09af60e3c582772d079ba9631c56ae905e332e7631d64d79f253c8ab2d76b56853c87b25e0e15b916372a3fa2934f401d24ba11e182e14e3e332622ba8e9b0e02480c0648b239efcb91d", 0x19b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48001ba7897f536256c900000000000000eeeb84", @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) [ 574.013017][ T3562] gspca_stk1135: serial bus timeout: status=0x00 [ 574.019473][ T3562] gspca_stk1135: Sensor write failed [ 574.025180][ T3562] stk1135: probe of 3-1:25.210 failed with error -71 [ 574.113271][ T28] usb 5-1: config 0 has no interfaces? [ 574.119070][ T28] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 574.128527][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.200815][ T28] usb 5-1: config 0 descriptor?? [ 574.419673][ T3562] usb 3-1: USB disconnect, device number 99 [ 574.453753][ T28] usb 5-1: USB disconnect, device number 32 14:56:59 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:56:59 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000679b5c084f17316aca6e000200010902120001190000000904d2db04736f9da2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 14:56:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x0) 14:56:59 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4"], 0x0) 14:56:59 executing program 5: unshare(0x6c060000) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) [ 576.422129][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 576.431705][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.722313][ T28] usb 3-1: new high-speed USB device number 100 using dummy_hcd 14:56:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x0) [ 576.822372][ T114] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 577.032444][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 577.133019][ T114] usb 5-1: Using ep0 maxpacket: 8 [ 577.169977][ T28] usb 3-1: config 25 has an invalid interface number: 210 but max is 0 [ 577.178826][ T28] usb 3-1: config 25 has no interface number 0 [ 577.185425][ T28] usb 3-1: config 25 interface 210 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 577.199090][ T28] usb 3-1: config 25 interface 210 has no altsetting 0 14:57:00 executing program 5: unshare(0x6c060000) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) [ 577.252710][ T114] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 577.261233][ T114] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.272479][ T114] usb 5-1: config 0 has no interface number 0 [ 577.278761][ T114] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 577.288110][ T114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:57:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x0) [ 577.483217][ T28] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=6e.ca [ 577.492653][ T28] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 577.500895][ T28] usb 3-1: Product: syz [ 577.523929][ T114] usb 5-1: config 0 descriptor?? [ 577.587674][ T114] streamzap 5-1:0.228: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 577.856362][ T3562] usb 5-1: USB disconnect, device number 33 14:57:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}}, 0x0) [ 578.217130][ T28] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 578.254908][ T28] gspca_stk1135: reg_w 0x2 err -71 [ 578.261465][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 578.268458][ T28] gspca_stk1135: Sensor write failed [ 578.279645][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 578.286872][ T28] gspca_stk1135: Sensor write failed [ 578.292438][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 578.298917][ T28] gspca_stk1135: Sensor read failed [ 578.304378][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 578.310954][ T28] gspca_stk1135: Sensor read failed [ 578.316389][ T28] gspca_stk1135: Detected sensor type unknown (0x0) [ 578.323188][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 578.329624][ T28] gspca_stk1135: Sensor read failed [ 578.335107][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 578.341610][ T28] gspca_stk1135: Sensor read failed [ 578.347095][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 578.353612][ T28] gspca_stk1135: Sensor write failed [ 578.359014][ T28] gspca_stk1135: serial bus timeout: status=0x00 [ 578.365594][ T28] gspca_stk1135: Sensor write failed [ 578.371162][ T28] stk1135: probe of 3-1:25.210 failed with error -71 14:57:01 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4"], 0x0) 14:57:01 executing program 5: unshare(0x6c060000) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:02 executing program 0: getpgrp(0xffffffffffffffff) syz_clone(0xa800000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) [ 579.069363][ T28] usb 3-1: USB disconnect, device number 100 [ 579.372694][ T7926] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 579.615947][ T7926] usb 5-1: Using ep0 maxpacket: 8 [ 579.733144][ T7926] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 579.741641][ T7926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.752262][ T7926] usb 5-1: config 0 has no interface number 0 [ 579.758583][ T7926] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 579.767969][ T7926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.875803][ T7926] usb 5-1: config 0 descriptor?? [ 579.924178][ T7926] streamzap 5-1:0.228: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 580.132732][ T7926] usb 5-1: USB disconnect, device number 34 14:57:03 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:03 executing program 2: syz_clone(0x4400a000, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100)) getpgrp(0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) 14:57:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x6, 0x303, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 14:57:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}}, 0x0) 14:57:03 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:03 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "8e78d9d8ee6f5298e2771725c7d7b5034d7634c13050455c331db787094cfee59b9064d7c5000976b33b8a539ba4b50220b5667a60b6672c5abdaa971a797809"}, 0x48, r0) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r1) 14:57:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}}, 0x0) 14:57:03 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4"], 0x0) 14:57:04 executing program 2: request_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0xfffffffffffffff8) 14:57:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x1, 0x7, 0x101}, 0x14}}, 0x0) 14:57:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:57:04 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "8e78d9d8ee6f5298e2771725c7d7b5034d7634c13050455c331db787094cfee59b9064d7c5000976b33b8a539ba4b50220b5667a60b6672c5abdaa971a797809"}, 0x48, r0) [ 581.572418][ T114] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 581.823413][ T114] usb 5-1: Using ep0 maxpacket: 8 [ 581.944540][ T114] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 581.953057][ T114] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.967173][ T114] usb 5-1: config 0 has no interface number 0 [ 581.974039][ T114] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 581.983362][ T114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.138062][ T114] usb 5-1: config 0 descriptor?? [ 582.189508][ T114] streamzap 5-1:0.228: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 582.403126][ T114] usb 5-1: USB disconnect, device number 35 [ 583.249923][ T8320] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:06 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) 14:57:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) 14:57:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(0xffffffffffffffff, &(0x7f0000001240), 0xffffffffffffffff, 0x0, 0x8000, 0x9) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000012c0)=ANY=[@ANYBLOB="a093b30ececf3c24fee4a369e83e512e4c41b6e4c3348b560d5f2e99ba48c3b401231e8e419c647dfc41f0f776d68be5bb01ae2f30d496b4cdfc4e6e66", @ANYRES16, @ANYBLOB], 0x40}}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x8000002b) 14:57:07 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:07 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4000196a11b"], 0x0) 14:57:07 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000007900), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) 14:57:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x2c}}, 0x0) [ 584.552206][ T7926] usb 5-1: new high-speed USB device number 36 using dummy_hcd 14:57:07 executing program 2: add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 584.802597][ T7926] usb 5-1: Using ep0 maxpacket: 8 [ 584.922848][ T7926] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 584.934924][ T7926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.945845][ T7926] usb 5-1: config 0 has no interface number 0 [ 584.952197][ T7926] usb 5-1: config 0 interface 228 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.965664][ T7926] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 584.975021][ T7926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:57:08 executing program 1: unshare(0x6c060000) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 585.225207][ T7926] usb 5-1: config 0 descriptor?? [ 585.268238][ T7926] streamzap 5-1:0.228: streamzap_probe: Unexpected desc.bNumEndpoints (0) 14:57:08 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 14:57:08 executing program 3: syz_open_dev$vcsa(&(0x7f0000000380), 0x0, 0x302) [ 585.535710][ T7926] usb 5-1: USB disconnect, device number 36 14:57:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 14:57:09 executing program 0: fsopen(&(0x7f00000012c0)='romfs\x00', 0x0) 14:57:09 executing program 3: syz_emit_ethernet(0x38, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000400000023c0000000000000000000000000000000000ff0700009d0000f500000000000000006d"], 0x0) 14:57:09 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4000196a11b"], 0x0) [ 586.375809][ T8370] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 586.762929][ T114] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 587.062361][ T114] usb 5-1: Using ep0 maxpacket: 8 [ 587.213147][ T114] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 587.221656][ T114] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.232100][ T114] usb 5-1: config 0 has no interface number 0 [ 587.238382][ T114] usb 5-1: config 0 interface 228 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 587.251877][ T114] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 587.261213][ T114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.344277][ T114] usb 5-1: config 0 descriptor?? [ 587.410655][ T114] streamzap 5-1:0.228: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 587.611665][ T114] usb 5-1: USB disconnect, device number 37 14:57:11 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:11 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0xffffffffffffff5a, 0x0, 0x0, 0x0) 14:57:11 executing program 0: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1811, 0xffffffffffffffff, 0x0) 14:57:11 executing program 3: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 14:57:11 executing program 1: unshare(0x6c060000) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:11 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4000196a11b"], 0x0) 14:57:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f00000001c0)='{', 0x1}], 0x2}, 0x0) 14:57:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000100)="a00eb426115999a5bff7412ce2b773062cbaf51f56ed88f02771d75f37b1fa682781293ef10a272132096468c22a5c6380268d18e86966326d472d866da46574b32316162be92007fe4a1e269922df2908167bf5a150263daacb05936b975a26f701243496b2307e2252a9953042f2148afb5daa", 0x74}, {&(0x7f00000001c0)="7bb0bdb4adea0fc2f46c99a0b5851cd47d537fdb231e2bfd14e9085d4f50b865d315598e9312569e725be1acfd8f2585bbeb67dd5e9087f499b163ab", 0x3c}, {&(0x7f0000000200)="15e79a75", 0x4}, {&(0x7f0000000240)="63935859edaedbe7174ce003a9fc5c251addd48b2aa2505803ebb285cfcb60ff00e4014b387b38724c907663cb76ca34756b7d037d0d11f8d9e30695cf33b6b0e0dd91468eef69afd9834e59c3809e248f6800ab6e3ce05dd3155006af2108d2ece405e5afe90355c1784de6afaa3c2bfdaae4817ac981a9cbac21742665742d0272e4101cdfdf7693622495f4a649e122cfa98a2b484ba5b24bd32b6732d10d309361df4d7d405fa18f8179f691c94a17c24f64cadb87ab87890756e58c8e798bac8aff23258f05945952a5ae6cfb6a0339ea3680fb39e3064ce31390216ad65d92b40f6312d6408dd38cdf926b0b9d1d7213a6435731fa9af5d413713cdc3ac932d6b22ff488552c9a14e70babe425fe415f1b260330892507656ae404bcbe8ad9166656f8e2ed94af4402163348a03c10ae2b2b2c6268818ee52b20d25833db66b8e7bfb34c52abe9557e921fb6f76e7db0b424df3480ba30e911142926659bbbd0c20d2d419a986e24de2ca09ae9ebbcc3b6e7989dc9331d0a50b2f42e94c9ff63721feff448e53657a6efeeeb17b1034453665eca207d39c55793c21ae9f0d6f6bae4c5ee0b9cf478b5e2da38fec825b2b8cdd56d68d178eeb82af0f9f0cb4101416ff1fcbab4ecf2ca8041ef0e9f18c472698a58fc4dc1dfc04a14e1ae8d194f161fa103382d24727d35704b73ecd88856608a50800b9266f877ec91039f41a7a95874d6534c448b05566350673626dd74b1c7913992a74bd29bb995f4e8f3aef9bcdc894d5da35ae4450723e8bc9ec21ec3a5499a5367c49d90aa469f3faf6b8fd728bc88ed3c794c097f63df2874171c92645651689383cb9d9ea11a8bc7d79d63ffc64ccc9b34930d714e41426f46fa645d8544854bf3f4aa8d9f9bcdec07fc321f0be95aaa80d5c77c28a3004702e17f30e8ce2beccc26d9a59eccf4424ad343cf0ea3a3cc9288d732e7aa52f08264f7c522c221edfb27d7ebad25e3cd0b61a2d12b2ee01f5f9e63671bf79bb0c27b0bf19bc766d560192ff56ff2818428e1524900eb5e7257d46793f5037e36a47b5e6b46b6840050daaf077d7b064eb8d5d3a1eaf10f8d0c5c894037a8c5efa67284e01f5ddd549a7191e4dddb13c026009a40cd2592e54dfa3f9623982dd2292ff5f5bf8f9941b6eb06b0de807b70ad26309ae6d66ddf4656089c4764125256aee70923567ec250ea88e5b92c12fe2646101bba82eb7d7a8e7681c4a05bebe3fea19388ec5332061897ca30d91a58d59cf2464b1af4c94d0a28f22edcab7b18322995878d773fd5a1a81fb00309b92ec294cb8394b7816a5f45909d0d49a4f76eb27750c9d48ddda7b2fe97826522b39092395fbb3046cb27c872d498e1a684f2fa3f9a5f4bea70119291fbe5f6ff22e16bff3981febd7c4f071b0c20f6c5d88f401c697e2424c9ea97827de6da74f189404c77e3aafcb633b5e80546a1b80686ab4109bc6afe45374d833103e9c6301563819ad44ad01e1ab281f37cf3d8328f8af23c1ae772a5970e2045b1b27de849d0f82eecb40cbeec5c5123ca5803c60eb1811af269d4d7be43999fe7a6b9fcae23be5d6f9b0ac7a64ed94cef53ef72d80ea1554c2a374f16470c76ac930ae59fda2be0e68fae164b20bab3ec77dc7799423be19e81b967ddb46f926d8c160aef5be51e75c9f08cde210bffd87821d5c127ea1deb273a4c08fde6aa28d421425a6e79c41d640821eb19003fdaf1ab1d17ed187de506243b76b5670da185e8a3b6110628f509ccc0378eba35fc2cf9e0a11253cd646dcbe356f5a5e8006340991b5e4ec00d4ab6aca11c7e2ccfd75cd9e94e630e98d1a5248d1e630de913ac1aa957d66feadcc99da89e687bccb3ac423b07ff4800aaaae94e10227474011cb984d98bdd9b8c3e470d2a0424c3e756f846b517aeb2ec05e76ef4dacd291911d99aaf9c722a7f763161fe7a4264d64c2c818e431c3ac4357b598b2bb45fb079ef0c19dbc7e83177318fad6ba4a37ebd39da9499ba7a28469a1dfcfe3a2e5c2503a83329124e7dc8106f7afcd4a4bfe2c5f2f97f3c9c3719da15c4da3811d79e68e5dde16d0868a1c9c389c1860614b71fe4eef765184f6a21b8b549d95a33c7480f5e393272af542e6368e344b81c9e1bcc4b9993a034de6e68573ebe3eb55abb746d95e884e5d82a29e692b332a55bae4c93af17959b285e5fa0b40091f28aec6b22ae1f3fdf9dcdec00f3fcee8f979e15e8f236bbd54cdb2f3a9a4d72cbd68eae3b408047be26faf06a1c426a3adaabfaa1420901bf5629de8fa7eaff38d9df39932cfb59afa3389d56fa206fe2209785dbb959dd29c5ad7ee42f7e2b2b076290022817660be3502eda7ea7a838e2097aff55f6ae5bd70f40b0f21c562167070ad2c2866f87e633f66f20c993322333b4294e1b7c235586530819e37a5ebc90e8b056efd7a7ffc029ee10ca8b014a777687322d9740b8b710cf006d1910f957f90fcfdef5c666b6427269365137aa608b4b3fd7b32b1631e2d3fa51d0cf278e77b2690f5d90c0bd8f74561736608a1be35e8a810fbe32e0280f90bb8853e8b51dc557cc7c9ebc13775fe08ef23d0fa1da84a09326641a1382540d9482d7334db01b11e73f88968469ea6f96796bab78a00209a5ee12a17cf096521da6aad4f50a48624f54b86cf8455cbc77c15c11c22d9ca2c5ccfed330570064e3331bfcc9ef5c4ba335a7c66e4be660fc31d86e43698f4a29c111f43260504ef3a9c5f167e205dcf083eca2e43944d5b604ad19aebc21817573746e5527d13d49e2a40cbee2509c799af254b684ce4a7ebac78a3d1f2ccd90b30d22594b54a2707b05f15790524e1b5f0f7148647c74a4ecd749d3eb93ca49063c6183b341ad9793773a5394b45d8e557c3b85acdea79e11b2941a87f6ee0647776bd5816aac68eed5c870f8c4cc93eab187f66ae99596cf4072cca4142b6f1be7bf74c9c1393ac1b9861fff13b612437a937d7b6698c6b120f3009949aeb11c1ef6ffdba8a8ae4bd42720e636ea8d8bc63cca62824984c301592089b960f8ea7c16cb99f95d4d6a4b487de4dcbbe2a469cbc0314afd5373cbb911b1e19207798283f6a8e534d2c808661c7eaa1092e7e80ce49c7c93b92e8371eb08250fddb0d9158174e12ed4eedd8c5241e91cda2416ad0cab21f1ac2c023c91999baa7aa25f9fd29bb44c76aac1291a3f4843339b965d5033cafc4ba85d0f6b56e548fc76361eb2f85798cbc553de53a6ae1a39d1ed7057f3d30a41cab6aaef7ce2cfdab1ab028f8ec5c222fdcd437dcbdde5c6ad463794c392353769394c3ef82bf264d4a36998c66a57afa7c9976cdb73f22036819d02e732f78b716c1a116a3feb6a3e5aac765176b76995d9ae6bb203580b41dddb857332bfdf0ed6f00b7f70b7fa4cbea664daf33ed2d8abb776e5e085dd96a78f8e2b79884f8b7aed23028570e146be7c4e143fdf7f2aa6196a2dc3c9d18f0f06ece0177cae3e7480071e884ffea48964fc7bef9a396302797b346b7463961cd25bdd3059f03000a0baefe4aee9d9f847040c100525c728cb2bede43fdf2169cdebb8fbb17e4f180593a98a71054590c9bda182bda5109ac4f17132d6cbe9181a58f6cd0d9d78de019b7528248dae40429729301dece6d6748d40195b6acc0561875dd9447ce9870a63a9986e99d3d09f82e86603b03d5a90dc904646517346ebce143b0e4487f19d8300a5bdf95d9705504395ca8a02acc0afc6c8cd41e679df5854f915c81c2af33562a10a9f82adb25df01f9baeb5d647e9cf4b04a2abd4b4104e708a0d124a775b8b1150a1c4561c585064b34a091199ed37b897b35bd93cf8b4ad05909f1ea6b2b3db74e6ef860ee29489c6c7826694663d0815dac4e154c77ec5745d3bbd22023595635fdfade76b553a7ec33c797e8596aac65353a5b9784e096378f0813a7d0d80ecb961a45f76d1edcd7986b534843dba1c59ed5175663a353beb298186cd17801087a5ff9a8f3a25a2fc7a04314384920249a45b4ceeb91adc49ef22680e29ea93fec96cd7fd3ca950ee3e12a14aaceccc0a303121d34de4b2ac0d4cc6e7c2d943bd8792f8e425ad06d498654543311adf8ee6cdeff8244dd69441ac9b3d9296a27eece9086e1d171b129560a7bf134868b8e6b94276f0255704e702153f14c1afd945156d7b7ba61f31d7a9b753ce7e3186226258038a47f025b72423042c2323d50d074f8e6f6c179b694e8a59b60ce6b6c3cb0b82145469d49e727113d7f50262986b462ebabc974c08f23408e3bb72fa076f3b12e4de8a093d2a9d800a068c0d11cff3cdb72e898d1e09eb6741d6517bc96791408e4d9b0bee06bd520c8db8c1e2514df055d46e9feda2fdbb398be3a7a3775b77bf9315d2fc1bbe2027337bdb41eb5f59febe3fa472bb4d56f369c9b568975790f8ed289f0643a64bd51df1119af9eec3560a8ac347d23e371a99a42dd6a2ebeeb1334a7eb39901ba6b56a88dce29651828413abc6bb63adb56ee006f844d7066476194049aa0c3505881e13c88863c2addf4d5955f78dfa6865b13231f30e382b689eba723742cb7f88b778f1e27b39b9955d2f2d177d3eaccfa640a4fed60a487853433c55d84ecfbc1ac69647629fca2af021eabe55b405fdc97ae374d7c959e45caa997804dbf19335c375023c78c779828931bd717d439a2b9e8e74ec8a87bbdbe29acc5bc9f43b5bd4101d84925c954151e71826cfb5b21677da23719ccb5ca31aa5c10a433519debc3548be2b0b23d57524c7aa155cbee86ce80fa64ae6261373025ad385ad6df222b59c80d287dc667ae543ac7e305f277df620f5f29f892f6b345cea055b82b204a2c70312513542fc583e4dd864d6e9f4ce81a171f33048a29dfd4c563c5e9eccadb5b4aad0f9750d2173cea6f3d248b126daa59890f8fa1e3e12560a27fca189ab61714092fbc5e830d68b75ed2d7195e5c0d1fd7e970e9139f6cb465806f7950f3585b7dbca297c9936d1d973564799223a6ec1921f9b4ea21c12570020eb5dcc3a4c8f73bbe76a1524ed31c3e4bba7f99a92652d367bedfb73edb44f75c78c7f036dc371492592877361f73ab2a6c800c0d5a5e7a3229b390e39643f05d8400e9e965d4894c163a9c901887eec397f232909ec78e3c47957ce9fbac5b57fb989e74c81cdcecef553a11147a31285beb92eb089b7619d155b4128dd370beb35a30af00b5fe6731e3554289d9e19cd2c4c187e7f1b929262ce1420504b9c94ae138487316de72a8fce52c2ab8cc8e9f556233ec439a37365615bd87bf8d2f36250b5c6db0949a52e8b6205d7a3b24f7ee3da105c63d7a3b111c", 0xed0}], 0x4}, 0x0) [ 588.781602][ T8396] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:11 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) [ 588.872389][ T7926] usb 5-1: new high-speed USB device number 38 using dummy_hcd 14:57:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) 14:57:12 executing program 1: unshare(0x6c060000) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:12 executing program 2: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 589.112320][ T7926] usb 5-1: Using ep0 maxpacket: 8 [ 589.237114][ T7926] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 589.246246][ T7926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.256704][ T7926] usb 5-1: config 0 has no interface number 0 [ 589.263086][ T7926] usb 5-1: config 0 interface 228 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 589.276516][ T7926] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 589.285867][ T7926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.577332][ T7926] usb 5-1: config 0 descriptor?? [ 589.657901][ T7926] streamzap 5-1:0.228: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 589.727870][ T8410] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 589.839757][ T28] usb 5-1: USB disconnect, device number 38 14:57:14 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:14 executing program 2: sendto$unix(0xffffffffffffff9c, &(0x7f00000000c0)="b100050300000000000000000101000000000000cea1fea7fef96ecfc73fa6a16b41909f82cffa4f373f00acf00b7804be781e4991f7c8df5fc82b297ba1ab5b23116730f144000000000000001f1306000000000000007d026ba8af63ff37282902", 0x62, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b100050300000000000000000101000000000000cea1fea7fef96ecfc73fd3357ae26caa0416fa4f373f00acf00b7804be781e4991f7c8df5f882b297be1ab5b23ed00f4c807000000000000001f132e27acbdd602000d7d026ba8af63ff37282902e4fd89720fd3872babfbb770c1ffff00000f90006ee01bc43eaeacc50000fa02000000000000020208a371a3f80004000000040000000100"/164, 0xb1, 0x0, 0x0, 0xd0584fcd7f7abe72) 14:57:14 executing program 3: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 14:57:14 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000000c0), 0x8) 14:57:14 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:14 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4000196a11b000705"], 0x0) 14:57:14 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2012, r0, 0x0) 14:57:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000100)="a00eb426115999a5bff7412ce2b773062cbaf51f56ed88f02771d75f37b1fa682781293ef10a272132096468c22a5c6380268d18e86966326d472d866da46574b32316162be92007fe4a1e269922df2908167bf5a150263daacb05936b975a26f701243496b2307e2252a9953042f2148afb5daa", 0x74}, {&(0x7f00000001c0)="7bb0bdb4adea0fc2f46c99a0b5851cd47d537fdb231e2bfd14e9085d4f", 0x1d}, {0x0}], 0x3}, 0x0) 14:57:14 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) [ 591.632890][ T7865] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 591.896427][ T7865] usb 5-1: Using ep0 maxpacket: 8 [ 592.023467][ T7865] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 592.032117][ T7865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.042540][ T7865] usb 5-1: config 0 has no interface number 0 [ 592.048818][ T7865] usb 5-1: config 0 interface 228 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 592.059844][ T7865] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a 14:57:15 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) bind(r0, &(0x7f0000000140)=@in={0x2, 0x2}, 0xc) [ 592.069188][ T7865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:57:15 executing program 2: mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 14:57:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 592.341218][ T7865] usb 5-1: config 0 descriptor?? [ 592.417430][ T7865] streamzap 5-1:0.228: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 592.589767][ T7864] usb 5-1: USB disconnect, device number 39 [ 593.779035][ T8419] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:17 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:17 executing program 0: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x3810, 0xffffffffffffffff, 0x0) 14:57:17 executing program 2: mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0) 14:57:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000100)="a00eb426115999a5bff7412ce2b773062cbaf51f56ed88f02771d75f37b1fa682781293ef10a272132096468c22a5c6380268d18e86966326d472d866da46574b32316162be92007fe4a1e269922df2908167bf5a150263daacb05936b975a26f701243496b2307e2252a9953042f2148afb5daa", 0x74}, {&(0x7f00000001c0)="7bb0bdb4adea0fc2f46c99a0b5851cd47d537fdb231e2bfd14e9085d4f50b865d315598e9312569e725be1acfd8f2585bbeb67dd5e9087f499b163ab", 0x3c}, {&(0x7f0000000200)="15e79a75", 0x4}, {&(0x7f0000000240)="63935859edaedbe7174ce003a9fc5c251addd48b2aa2505803ebb285cfcb60ff00e4014b387b38724c907663cb76ca34756b7d037d0d11f8d9e30695cf33b6b0e0dd91468eef69afd9834e59c3809e248f6800ab6e3ce05dd3155006af2108d2ece405e5afe90355c1784de6afaa3c2bfdaae4817ac981a9cbac21742665742d0272e4101cdfdf7693622495f4a649e122cfa98a2b484ba5b24bd32b6732d10d309361df4d7d405fa18f8179f691c94a17c24f64cadb87ab87890756e58c8e798bac8aff23258f05945952a5ae6cfb6a0339ea3680fb39e3064ce31390216ad65d92b40f6312d6408dd38cdf926b0b9d1d7213a6435731fa9af5d413713cdc3ac932d6b22ff488552c9a14e70babe425fe415f1b260330892507656ae404bcbe8ad9166656f8e2ed94af4402163348a03c10ae2b2b2c6268818ee52b20d25833db66b8e7bfb34c52abe9557e921fb6f76e7db0b424df3480ba30e911142926659bbbd0c20d2d419a986e24de2ca09ae9ebbcc3b6e7989dc9331d0a50b2f42e94c9ff63721feff448e53657a6efeeeb17b1034453665eca207d39c55793c21ae9f0d6f6bae4c5ee0b9cf478b5e2da38fec825b2b8cdd56d68d178eeb82af0f9f0cb4101416ff1fcbab4ecf2ca8041ef0e9f18c472698a58fc4dc1dfc04a14e1ae8d194f161fa103382d24727d35704b73ecd88856608a50800b9266f877ec91039f41a7a95874d6534c448b05566350673626dd74b1c7913992a74bd29bb995f4e8f3aef9bcdc894d5da35ae4450723e8bc9ec21ec3a5499a5367c49d90aa469f3faf6b8fd728bc88ed3c794c097f63df2874171c92645651689383cb9d9ea11a8bc7d79d63ffc64ccc9b34930d714e41426f46fa645d8544854bf3f4aa8d9f9bcdec07fc321f0be95aaa80d5c77c28a3004702e17f30e8ce2beccc26d9a59eccf4424ad343cf0ea3a3cc9288d732e7aa52f08264f7c522c221edfb27d7ebad25e3cd0b61a2d12b2ee01f5f9e63671bf79bb0c27b0bf19bc766d560192ff56ff2818428e1524900eb5e7257d46793f5037e36a47b5e6b46b6840050daaf077d7b064eb8d5d3a1eaf10f8d0c5c894037a8c5efa67284e01f5ddd549a7191e4dddb13c026009a40cd2592e54dfa3f9623982dd2292ff5f5bf8f9941b6eb06b0de807b70ad26309ae6d66ddf4656089c4764125256aee70923567ec250ea88e5b92c12fe2646101bba82eb7d7a8e7681c4a05bebe3fea19388ec5332061897ca30d91a58d59cf2464b1af4c94d0a28f22edcab7b18322995878d773fd5a1a81fb00309b92ec294cb8394b7816a5f45909d0d49a4f76eb27750c9d48ddda7b2fe97826522b39092395fbb3046cb27c872d498e1a684f2fa3f9a5f4bea70119291fbe5f6ff22e16bff3981febd7c4f071b0c20f6c5d88f401c697e2424c9ea97827de6da74f189404c77e3aafcb633b5e80546a1b80686ab4109bc6afe45374d833103e9c6301563819ad44ad01e1ab281f37cf3d8328f8af23c1ae772a5970e2045b1b27de849d0f82eecb40cbeec5c5123ca5803c60eb1811af269d4d7be43999fe7a6b9fcae23be5d6f9b0ac7a64ed94cef53ef72d80ea1554c2a374f16470c76ac930ae59fda2be0e68fae164b20bab3ec77dc7799423be19e81b967ddb46f926d8c160aef5be51e75c9f08cde210bffd87821d5c127ea1deb273a4c08fde6aa28d421425a6e79c41d640821eb19003fdaf1ab1d17ed187de506243b76b5670da185e8a3b6110628f509ccc0378eba35fc2cf9e0a11253cd646dcbe356f5a5e8006340991b5e4ec00d4ab6aca11c7e2ccfd75cd9e94e630e98d1a5248d1e630de913ac1aa957d66feadcc99da89e687bccb3ac423b07ff4800aaaae94e10227474011cb984d98bdd9b8c3e470d2a0424c3e756f846b517aeb2ec05e76ef4dacd291911d99aaf9c722a7f763161fe7a4264d64c2c818e431c3ac4357b598b2bb45fb079ef0c19dbc7e83177318fad6ba4a37ebd39da9499ba7a28469a1dfcfe3a2e5c2503a83329124e7dc8106f7afcd4a4bfe2c5f2f97f3c9c3719da15c4da3811d79e68e5dde16d0868a1c9c389c1860614b71fe4eef765184f6a21b8b549d95a33c7480f5e393272af542e6368e344b81c9e1bcc4b9993a034de6e68573ebe3eb55abb746d95e884e5d82a29e692b332a55bae4c93af17959b285e5fa0b40091f28aec6b22ae1f3fdf9dcdec00f3fcee8f979e15e8f236bbd54cdb2f3a9a4d72cbd68eae3b408047be26faf06a1c426a3adaabfaa1420901bf5629de8fa7eaff38d9df39932cfb59afa3389d56fa206fe2209785dbb959dd29c5ad7ee42f7e2b2b076290022817660be3502eda7ea7a838e2097aff55f6ae5bd70f40b0f21c562167070ad2c2866f87e633f66f20c993322333b4294e1b7c235586530819e37a5ebc90e8b056efd7a7ffc029ee10ca8b014a777687322d9740b8b710cf006d1910f957f90fcfdef5c666b6427269365137aa608b4b3fd7b32b1631e2d3fa51d0cf278e77b2690f5d90c0bd8f74561736608a1be35e8a810fbe32e0280f90bb8853e8b51dc557cc7c9ebc13775fe08ef23d0fa1da84a09326641a1382540d9482d7334db01b11e73f88968469ea", 0x74d}], 0x4}, 0x0) 14:57:17 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4000196a11b000705"], 0x0) 14:57:17 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:17 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:57:17 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@in6={0x18, 0x2}, 0x4b4bdb39d9856e80, &(0x7f0000002640)=[{&(0x7f0000000340)="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", 0xfe}, {&(0x7f00000026c0)="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", 0x1062}, {&(0x7f0000000200)="3e5edb3937a19726b060cf15d5461127156c213a74d6ae451d8dad6c47dccd0a125f4dfe86dd682d983f69fc55a3e30b4afe622eb609b55ba7c26825281f17f83970c2f2bc797dc6b6cf0369a5ac55346c64097a1a15235cdfc1a47aef54a527407280cc82059be41d258d6de79b411f977678f25f302e5670aeb800eb69e1cfd91adc48ce30db7395", 0x89}, {&(0x7f00000002c0)="13d0ab87cd368c4536999906e750aa5c4181f661d5f6961cf8b6b82e061e4c5a47ef8c603ac859885e39e32cb35d3b6487b3ff65188ead5e44167c60f92fb058b096f63a40a444634d3524175ac5797a46e0b1a17239d98c9923e754", 0x5c}, {&(0x7f0000001540)="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", 0xead}], 0x5, 0x0, 0xb}, 0x408) 14:57:18 executing program 3: fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) writev(r1, &(0x7f0000000480)=[{0x0}], 0x1) [ 595.102645][ T28] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 595.342533][ T28] usb 5-1: Using ep0 maxpacket: 8 14:57:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 595.463263][ T28] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 595.471799][ T28] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.485899][ T28] usb 5-1: config 0 has no interface number 0 [ 595.492675][ T28] usb 5-1: config 0 interface 228 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 595.503634][ T28] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a 14:57:18 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000280)=""/156, 0x1000000, 0x9c, 0x1}, 0x20) [ 595.513001][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:57:18 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000e00)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) [ 595.748170][ T28] usb 5-1: config 0 descriptor?? [ 595.881795][ T28] streamzap 5-1:0.228: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 596.003507][ T28] usb 5-1: USB disconnect, device number 40 [ 597.290739][ T8447] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:21 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:21 executing program 2: bpf$PROG_LOAD_XDP(0x4, &(0x7f0000005700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:57:21 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000000140)=""/207, 0x32, 0xcf, 0x1}, 0x20) 14:57:21 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4000196a11b000705"], 0x0) 14:57:21 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x7, 0x0, 0x0, [{}]}]}}, &(0x7f0000000140)=""/207, 0x32, 0xcf, 0x1}, 0x20) 14:57:21 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:21 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000280)=""/156, 0x26, 0x9c, 0x1}, 0x20) 14:57:21 executing program 2: r0 = socket$kcm(0x2, 0x922000000001, 0x106) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/26, 0x1a}], 0x1}, 0x0) 14:57:21 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005700)={0x8, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000004600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 598.576297][ T7926] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 598.822606][ T7926] usb 5-1: Using ep0 maxpacket: 8 14:57:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=[{0xf}], 0x10}, 0x0) 14:57:22 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x8, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/156, 0x1a, 0x9c, 0x1}, 0x20) [ 598.943113][ T7926] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 598.951527][ T7926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.965588][ T7926] usb 5-1: config 0 has no interface number 0 [ 598.972584][ T7926] usb 5-1: config 0 interface 228 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 598.983560][ T7926] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a 14:57:22 executing program 0: socketpair(0x1f, 0x0, 0x0, &(0x7f00000000c0)) [ 598.992976][ T7926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.273715][ T7926] usb 5-1: config 0 descriptor?? [ 599.318942][ T7926] streamzap 5-1:0.228: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 599.552945][ T28] usb 5-1: USB disconnect, device number 41 [ 600.339515][ T8476] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:23 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x1, &(0x7f0000000340)=@raw=[@call], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:57:23 executing program 2: bpf$PROG_LOAD_XDP(0xf, &(0x7f0000005700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:57:23 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002240)=""/51, 0x33}], 0x1}, 0x0) 14:57:23 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4000196a11b00070583"], 0x0) 14:57:24 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:24 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0x0, 0xb}, 0x14) 14:57:24 executing program 3: socketpair(0x23, 0x0, 0x7fffffff, &(0x7f0000000000)) [ 601.272884][ T7865] usb 5-1: new high-speed USB device number 42 using dummy_hcd 14:57:24 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000040) [ 601.524756][ T7865] usb 5-1: Using ep0 maxpacket: 8 [ 601.663522][ T7865] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 601.672095][ T7865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.682524][ T7865] usb 5-1: config 0 has no interface number 0 [ 601.688803][ T7865] usb 5-1: config 0 interface 228 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 601.699213][ T7865] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 601.708555][ T7865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 14:57:24 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000180)='\\', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 14:57:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x10, 0x4, 0x0, 0x401, 0x0, 0x1}, 0x48) [ 601.863257][ T7865] usb 5-1: config 0 descriptor?? [ 601.918819][ T7865] streamzap 5-1:0.228: streamzap_probe: endpoint attributes don't match xfer 0200 14:57:25 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@func={0x8, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000140)=""/207, 0x2e, 0xcf, 0x1}, 0x20) 14:57:25 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) [ 602.120269][ T7864] usb 5-1: USB disconnect, device number 42 14:57:25 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005700)={0x1e, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000004600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:57:25 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xb, [@var={0x6, 0x0, 0x0, 0xe, 0x5}, @typedef={0x9}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x2e, 0x0, 0x61]}}, &(0x7f0000000240)=""/163, 0x3f, 0xa3, 0x1}, 0x20) 14:57:25 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/156, 0x27, 0x9c, 0x1}, 0x20) 14:57:25 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4000196a11b00070583"], 0x0) [ 603.412760][ T7865] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 603.685995][ T7865] usb 5-1: Using ep0 maxpacket: 8 [ 603.830075][ T7865] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 603.838626][ T7865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.849084][ T7865] usb 5-1: config 0 has no interface number 0 [ 603.855564][ T7865] usb 5-1: config 0 interface 228 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 603.865821][ T7865] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 603.878657][ T7865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.979820][ T7865] usb 5-1: config 0 descriptor?? [ 604.035037][ T7865] streamzap 5-1:0.228: streamzap_probe: endpoint attributes don't match xfer 0200 [ 604.055584][ T8510] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 604.236111][ T7864] usb 5-1: USB disconnect, device number 43 14:57:27 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) 14:57:27 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {}]}]}}, &(0x7f0000000280)=""/156, 0x36, 0x9c, 0x1}, 0x20) 14:57:27 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000001680)=""/226, 0x28, 0xe2, 0x1}, 0x20) 14:57:27 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:27 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201280080c9fc089c0e00008aaf0000000109021b0001000000000904e4000196a11b00070583"], 0x0) 14:57:28 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x7a}}, &(0x7f0000000280)=""/156, 0x1a, 0x9c, 0x1}, 0x20) 14:57:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000001680)=""/226, 0x28, 0xe2, 0x1}, 0x20) 14:57:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x1}]}}, &(0x7f00000000c0)=""/154, 0x26, 0x9a, 0x1}, 0x20) [ 605.413250][ T7864] usb 5-1: new high-speed USB device number 44 using dummy_hcd 14:57:28 executing program 3: socketpair(0x2, 0xa, 0x1, &(0x7f0000000440)) 14:57:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) 14:57:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002200)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001400)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) [ 605.672361][ T7864] usb 5-1: Using ep0 maxpacket: 8 [ 605.806473][ T7864] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 605.815378][ T7864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.825787][ T7864] usb 5-1: config 0 has no interface number 0 [ 605.832155][ T7864] usb 5-1: config 0 interface 228 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 605.842385][ T7864] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=af.8a [ 605.851644][ T7864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.088759][ T7864] usb 5-1: config 0 descriptor?? [ 606.152719][ T7864] streamzap 5-1:0.228: streamzap_probe: endpoint attributes don't match xfer 0200 [ 606.348607][ T7864] usb 5-1: USB disconnect, device number 44 [ 607.191337][ T8540] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:30 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:30 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:30 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={0x0, &(0x7f0000000300)=""/4096, 0x0, 0x1000, 0x7f}, 0x20) 14:57:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}, 0x0) 14:57:30 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@func={0x8}, @struct={0x7, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xf}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000000140)=""/207, 0x46, 0xcf, 0x1}, 0x20) 14:57:30 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x14}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005700)={0x6, 0x4, &(0x7f00000000c0)=@raw=[@btf_id, @generic={0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000004600)='GPL\x00', 0x2, 0x1000, &(0x7f0000004640)=""/4096, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000005640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000005680)={0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000056c0)=[r1]}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000005780)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005700)={0x6, 0x3, &(0x7f00000045c0)=@raw=[@btf_id, @generic={0x1}], &(0x7f0000004600)='GPL\x00', 0x2, 0x1000, &(0x7f0000004640)=""/4096, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000005640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000005680)={0x3, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000056c0)=[r3]}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) bpf$PROG_LOAD_XDP(0x3, &(0x7f0000005700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000480)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)="57b9f02d2d5118992341099484cfe63fb800758677e26f7e307014159670186775a6d9c566ea19f3b9b163b3124ae0ef5f52d92dc5fa2bc1cb2c2aa4beec13db7e91fbe29c35b741aa29582625abedf2d4046a71056aa6a5045733333cd55410b723fdada62ccb4a7bc8e415e90d6a168207652f6e3c272be1a68e1ce75395f3b6d841fc8455bfee1b44689f996d4ddf084c52cb3e95241e9afabb0f261479d7937e24ba26732b1368b62dc91870cd6bed0ab05217caf570a3a963cd2cddcab880a5b9b8c664cdf4cfb1b26ed5769a94c573f4f0557f94adf4ee3d2f9efda04d7cb34039da", 0xe5}, {&(0x7f00000005c0)="0a20b5161cd7eff21589c4c55584a20446428ccac91333ea1705d8df9e5f8f7c5d37106000f3eccaf65b0a1914b0cf2f8905bcbf3edc18a3a0e9717da0e4fa204913cb014c6a799035cba97ee5aa78e44505f2188b108258bdd76249860b8932762eedbb84a64159f13a499db3d0065ed788ce43ee2bc25544cd143dd4aaa45438f18ff7879d8b00a3df8928c916fac65bda84580d59e77d7ce8881037adc6aafe8ec11047d0fb2da3c3295333db236a7b0f5a9ff181e1c51aea65330f2ca913735aff1140da9f6eda813404dd5aed69872e9a11b53c9d6f6b8c31c80d4076d441eded9d187d60a7a9d42e4dd1062ce2658602890683fa9e4e", 0xf9}, {&(0x7f00000006c0)="c33880b70329078c5f367e51cd54ebaf472c5772e2c4759b3128320e4cb38e0e9e57a9415e792762a2352579a1ea08fdc13c4a985e701e7cfdcf83536b2b8800f610cefe5947d00776281cb1d1d805aa838ba3aadd7a6091f19d2248d077e1ae60b68872b2fab925a982bdc261a89c6714d3b35d02ca348b9913e16777eecb6929a0e01c5212d46b7b55ba538c204428d4c44c062668a00401a67ca5f012e209b478bf8d97a3ed4947cf55154e0b626f92d7283380fd5aab7abf9ea6c589ea1dcd94d4367f4ade74b6ca855b6b9eb5d1ad6ba78d3be694eb5792d72eda31a8a469316b44831e20", 0xe7}, {&(0x7f00000007c0)="d0bba005356b577ad009d5f1ad711780ead1b2a290f44826cd259cf6546202eaa02237b7c2a681bdf390de18a2de20de5b3877407ffe17fe59208b53", 0x3c}], 0x4, &(0x7f0000000c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@rr={0x7, 0xf, 0x35, [@broadcast, @remote, @broadcast]}, @ssrr={0x89, 0xf, 0x61, [@rand_addr=0x64010100, @private=0xa010100, @rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0xf6, [@empty, @rand_addr=0x64010102]}, @generic={0x88, 0xd, "b7263fb49db4083b59968f"}, @timestamp={0x44, 0x10, 0x63, 0x0, 0x1, [0xff, 0xd593, 0x1f]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0xc, 0xf2, 0x0, 0x3, [0x2, 0x6]}, @timestamp_addr={0x44, 0x24, 0xba, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x9c4f}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0xfff}, {@rand_addr=0x64010100, 0xfffffffd}]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x20e}}], 0x168}, 0x81) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x8, [@union={0xa, 0x7, 0x0, 0x5, 0x1, 0x5, [{0x4, 0x1, 0x20}, {0x1, 0x4, 0x7fff}, {0xe, 0x5, 0x5}, {0xb, 0x0, 0x3ff}, {0x1, 0x2}, {0x8, 0x2, 0xfff}, {0xb, 0x4, 0x8}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x2a, 0x0, 0x2c, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb}, {0x7, 0x3}]}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x4}}]}, {0x0, [0x0, 0x2e, 0x61, 0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/4096, 0xd0, 0x1000, 0x1}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005700)={0x6, 0x3, &(0x7f00000045c0)=@raw=[@btf_id, @generic={0x1}], &(0x7f0000004600)='GPL\x00', 0x2, 0x1000, &(0x7f0000004640)=""/4096, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000005640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000005680)={0x3, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000056c0)=[r5]}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005700)={0x6, 0x3, &(0x7f00000045c0)=@raw=[@btf_id, @generic={0x1}], &(0x7f0000004600)='GPL\x00', 0x2, 0x1000, &(0x7f0000004640)=""/4096, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000005640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000005680)={0x3, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000056c0)=[r6]}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005700)={0x6, 0x3, &(0x7f00000045c0)=@raw=[@btf_id, @generic={0x1}], &(0x7f0000004600)='GPL\x00', 0x2, 0x1000, &(0x7f0000004640)=""/4096, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000005640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000005680)={0x3, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000056c0)=[r7]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa3}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x8b, &(0x7f0000000200)=""/139, 0x40f00, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xb, 0x2, 0x80000001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[r5, r6, r1, r7, r1]}, 0x80) 14:57:30 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x1}, {}]}]}}, &(0x7f0000000280)=""/156, 0x3e, 0x9c, 0x1}, 0x20) 14:57:31 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000180)='\\', 0x1}], 0x1}, 0x0) 14:57:31 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000505d25a80648c63940d0424fc60100000000a000400050082c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 14:57:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x9, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 14:57:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x2060) 14:57:31 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005700)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001f00000000b30000000000000000000095"], &(0x7f0000004600)='GPL\x00', 0x2, 0x1000, &(0x7f0000004640)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 609.639583][ T8569] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:33 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/207, 0x2c, 0xcf, 0x1}, 0x20) 14:57:33 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:33 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000280)=""/156, 0x36, 0x9c, 0x1}, 0x20) 14:57:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000dc0)={&(0x7f00000009c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0}, 0x0) 14:57:33 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x208442, 0x0) close(r0) 14:57:33 executing program 0: socketpair(0x25, 0x1, 0x4, &(0x7f0000000000)) 14:57:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 14:57:33 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x573c00, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$nfs(&(0x7f0000006e80), 0x0, 0x0, 0x0, &(0x7f0000006f80), 0x0, &(0x7f0000006fc0)={[{'[{{\\'}, {'.+w\xc8-,\\@'}, {'\xcc#]@![${@!-+\''}, {']a&]('}, {}, {'#\x00'}], [{@smackfsroot={'smackfsroot', 0x3d, '*}'}}, {@appraise_type}]}) 14:57:33 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) 14:57:33 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0x1, 0x0, 0x0}, 0x20) 14:57:33 executing program 0: syz_mount_image$nfs(0x0, &(0x7f0000006ec0)='./file0\x00', 0x0, 0x1, &(0x7f0000006f80)=[{&(0x7f0000006f00)="0c46126c145d3c90", 0x8, 0x7}], 0x0, 0x0) 14:57:34 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:34 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RVERSION(r0, 0x0, 0x0) 14:57:34 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:34 executing program 2: syz_mount_image$nfs(&(0x7f0000006e80), &(0x7f0000006ec0)='./file0\x00', 0x0, 0x1, &(0x7f0000006f80)=[{&(0x7f0000006f00)="0c46126c145d3c90", 0x8, 0x7}], 0x200040, 0x0) 14:57:34 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x11fe7c488ae9bb44, 0x0) 14:57:34 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security', 0x0, 0x0) 14:57:34 executing program 4: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000006e80), &(0x7f0000006ec0)='./file0\x00', 0x0, 0x1, &(0x7f0000006f80)=[{&(0x7f0000006f00)="0c46126c145d3c90cbd480159d95001f36f7a0", 0x13, 0x7}], 0x0, 0x0) 14:57:34 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) 14:57:34 executing program 3: syz_mount_image$nfs(&(0x7f0000006e80), &(0x7f0000006ec0)='./file0\x00', 0x0, 0x1, &(0x7f0000006f80)=[{&(0x7f0000006f00), 0x0, 0x7}], 0x0, 0x0) 14:57:35 executing program 4: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000f80)) 14:57:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9}}]}}]}, 0x44}}, 0x0) 14:57:35 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:35 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:35 executing program 2: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x6000, 0x0) 14:57:35 executing program 3: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/18) 14:57:35 executing program 0: syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x6200) 14:57:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'gre0\x00', 0x0}) 14:57:35 executing program 2: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000006f80)=[{&(0x7f0000006f00)='\f', 0x1}], 0x0, 0x0) 14:57:36 executing program 0: mount$9p_fd(0x0, &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x0) 14:57:36 executing program 3: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000080), 0xf) 14:57:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={0x0}}, 0x0) 14:57:36 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) 14:57:36 executing program 2: setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000900)="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", 0x2fb) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x40000, &(0x7f0000000840), 0x0, &(0x7f00000008c0)={[{}]}) 14:57:36 executing program 3: r0 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, 0x0, 0xfffffffffffffdf1) 14:57:36 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=@delchain={0x24, 0x65, 0x1}, 0x24}}, 0x0) 14:57:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x8000, 0xaa, 0x10}, 0x48) 14:57:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8904, 0x0) 14:57:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0123000000000800000005"], 0x1c}}, 0x0) [ 614.578754][ T8669] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:37 executing program 3: r0 = syz_clone(0x40040000, &(0x7f0000000000)="715f35ea27e77351d05a4f8d168b8ba9e6a43b6a4fdd12f1431405fe1b6fb1f514791ade8e64c1e8fe1f46415dacbaee53056e08166faa3e6aa79c4794983a6eeb81a2aab6dcc588627af67a3e0b0c363fd51bb1b0d64a66219385026ee285ae3d67adb578a84c2e28fc9350055e3c86e26cc9553e9a6fbe02ba6d2ea0e8195c5ec3af65687faa0c2f005472fd4789459f23da75f2b25e6daefa8e56d9d315c4c84148e7e6b4a77fe606ce18881cdd3ce9b73b8f4f04c7eddc378a236630e708533431804e3c08d2d40a3625ee2c2524b9310cabc23d5848ef2bb41403a8fde7d7ea83501348d47a2f974306044a0ccd93f724cd2312dcde09310d8f15b05e669e4b7be9b2dbc01a8697a877afcfa9b97b602b030538c5ad248268be853adfd3c5e2f2fee89d7dce09170370858ac9c5cae201325892376d4d86971d0a5afdeb1208b5f49f2c8fbea2ec1acbc1da5f3f25dd3556691cb119d1c52aa5a91214e00333343c229e3f62079af0f8069237e528ef0fa4780e739bdf1d05d1b6770e08b9b464f6105ff30cf547cb4a37d9b6bb3dbd3b96bd63e7b017042a4f62c70f57d0d06f73a1877dea4809b39179964439091083501b53ec3e6cdd2ae436e2f89a21404ec0966c8b56d189edfef49449d82c972000a465405134b64e512ad6a4de88d437f895dbc775d3e35c0e61a3702b2018795db78b3764bcbc7a6e826716257d03772a2fcc31fb1bb4f0540648710cfe282744d6660d5a69366c3434eeedbd7cd364f76e56a657ba7009e4710eb1a68a844f1dca9472b68f21d6f0f59e4accd2d12ba424ad6777feed80df5a2f6d8d57f39ab4b85c36b589039021d7b5eed19e5ac75c3edc6e82742053403135bbfb853f9d841a358f83770d990b68b8874b5e43ce9e0939f771bb255f627e7166610e27bd7a66bb9e5eb4928f5fe27247a23de067f27383ec4a2a0d7e695a6ffe4f2deb811f49ebee9f7ece0b2273ff4581a0b6c6fbf86781143b002e30427268da06eb968d5b052a8d103eb88ee70df1a79bdbfc897f4e71705189294c99b31c430262492aaaf3487670613936e17768386d69ff5f115f0a1e6b8ad5038b5fa4ffddb992c62ff6b90d33a6d75784ee51c5412fa87681de38e264a05c5a605913a6ee887f2734c79e96826e850d8d6ef589900dd462669f0fa24ed327db3a026cddc4f79f4fb7018b70a90b7d9590b9950bd9d3dc4c907876bc4d327b3ff1816f6931ca5ecd94048a9305dcdfd97a100881dd773d86229703989a7a7e1e96317d522d5f75263040a744f7534369bd7b5d7869c41c5ca6f579404bce5e503941b16d7f7236d00f259dbe1055b3287b6f4f02826228a4bd894ef53a6ec711b4aae46d71b05b3e0a6b03603240d1e4a8517b228e6ae2a7ec4e1220d5dc88f0679dc92f64d772baec67fe89747bd88c14a90aec1471d6ebb228de917f24f2b3cd26b07249f1b91ab2fe9e77fb956e0be583f9c6402c792932ba4c8a9720a4cbebcdc67e5d62304cdbc22f6d98b3f2863105379b7b26811502fc3c7179df7ce7b1fd9a16a1096a8cee9d04cb5ec842aa435128e9e13b21ce1be8fca724996083de02c594330118b3b39dd2e0f2b966af2dde3feb3c95c1cc233a5b44030ec151e72cb792052d94081a954e93b9716a73bde0fd502359049ad497b7a53278339d992a09b46c0478d4b8dcaa0344dbf03505271250c747ce75ad7da711df6495e45d366ad44120e642d94d0dc503d37a2fca3cf542b13f4e647801ddbe8591a250560eb289494be548628aadc6b2643c6a62af40070fccc9e63dd9b12996f3e432fb13f838d896911fd7a0c85c608a4665b213a851290fedb2823413d97729c6b17e4d5d00b1d6b9d42e5c485dc94fae8bd9dd75625959ebb09b4d3381f6c2ff8b394d483afdc5512c094b72acd3b2165e5e1a35087fa0697cecf9bb6f5633cbcd09e75006a3730150c5d4f62f4dfcf0e5712fc806c4dc779a92eb7f37804f14c70840852e74bcbdf594c2d0deb2891b4ebfdcb5489fda8ffaa829379d66e14da57629bec248c3a8bb9b5f0860b1af0dc3572e36e3884951084c2e98f735bf1be1b77490431a261462793811aceebe3d10f466b7484c7fa609dadce5a73f81f21060488e23a226667fa42046d512c8fb60ccb3871b4d65a78b3ddccbf89410b576ab141cbf7a469dd80bda97c27e4a1b60a24b157b9a003a4ea9259602ca279cfb0f96811901844ef81e85944519490e6e02fa6feb6b947da623417d1e3a513f1629a30cda39cc13d8179ad7a8fccf4e1435443a5dacd3b00354e7ddf1d0c666e3840f8c7ef939bb1c7a8a70b705c53fb05003ad91321c9d330b125f8d50f1c8dcb338ad2668f429535dc25918ea72d645cc40dc0054f5d1bff1d0344abd2f70cd4c5af356520a667d98acf49566a88b90f69f139ffd6991c4a498062cfa1132ecc61cc369e4a0fc04a61f0f8bb19c6e48bff65fcdd9dbf2379dd57c14bbb00f243cacf8bc75e187c09e296f9f19aaf5aff05e98b27ca6c13a165cc6784d4566948ad567f31fc63a6067e8df10d38546ba9dbe65e40648bb4b56b3ec7626142e79960c1f569b8143149bb6ea9ad64456663805d9325950e9c7f9fb441ad7bc9a647cb584b93750dde031d1072f8376bca2c569ab1ba603b251b1c9c36e9be1014a272d7d13f33df387a41d433d7b172b18f62d60b58ee7eb3e508d63e8e0cb76befead035f67ecf1cb90547029dcff7da2ba289a077f54a4c4a1904350dbeafe1093147bdac5a621da0b647d07fdd38dcee7816273f7bb865277531b4bc93175957747a5b613ffba57999ac75428ebf6a41b8f2387465c3a8eef26578fdbc66377894524d48a96d187f96eb32f9ed7ffcf01f1f4989705dc30ead5c6d681664f6cd8af20e07524625c9a1ebd77285b09bdc3c0b9f03c70ce878f00e015cfee66fd2f2e027f0a1bab3583675fdb35632422df4e556cd5428b1df0815e2a1bc855b6aec6287b59c0cf8de740d156e3d31c661704d0d11fdfdb1bbcfcc99c4038ed68b7e2292d6143dcbd2c498b41b8b741a4953ca918132e8c9dad3a1f0e6418123bae7746623adddf0ac3e5d37d32ef3979b86e986ff3e592150c0d72aa7b1c15a646c602d4d3932cbb5f7838401f29ff3355cd7227ad76aa76c2e8554ecd63b712de74005cacb3d801dde80b201009e2c59825d8d8d3b032c569f8271845f1c8aaddc9b58c7b6faf9750493e4202b10c2fb8664579c95b56c3572db8715e0ea44b29f44847a2fd8374dcdf6b2c7e0df7450beb4e1d4a07e906f5a14bb8895a47cfda862a9e90397575a69e8c92b13e3726f38ffcdb5bfd53490bff7c1b8b458861cfd70bca4d5d032946602178d4117745154779a5211afae6eaadb91f9c4a68a63c7ff7f097593f43049c0c9d2187f38a271cc6306e1d8e337019c0b156c830d8b1b593449a5642275497d5f553bb7e4b4188aaa0b323a4d90608ffab39cc53b62e3c27d0bfd1c5c3e6143df52137bfdb0ff1e1a9d886e5de8522e7d32121742661d2e06565a1fd4e930626d165f97bae3f3e2a8f4398f1288f41d1ecec87c7e1739c8440c4c47cc319d9210417c29382d278d035e11f3451289399192c00c29f4433400b1feb366127d535b545ebdd8bcd8c673f022950fac8f82a355ef4a26e8cb1a1621d045e82a1bdf574a380ff635ffe0d70facbc7659bfd2d675815b6c16b186386722c844db8be2e1af28a148952c470a2cf298dedff0d36a3de237e50f43528efca83779505a725e17aa5082b67f56f346166e0ce44e4b2dc8b888523b9299bd04b1a52129ad0f4f5157a090f2706216986257433a9b2c1f1bea9712d116a03036082b18c19d75fe37e56336bbaff0e46af9bec82c0b0b07e2d0ea076bd391743ecb444112810649f8a63c509630aebf494f13fab89b3158be978342a2585a1646c23a2b40d62be03db25007f4f0c0b782657da89d18c849c212d69d948d54da4c90ddb93ca60d4b8432c34176db65bee81c961f84a7c240318fcfdbbffcde913f2da2a2ee2d3193a3e40b93a94658a74124fcac77ac9d53b656b2add2d158b89e0aa6318aeda3f301964446e27b1912de2c8efdc7b71308d2996d63e7d9b0b12a0539e6acc6a39b5b0d569893b435372f6b38a6c37505faf3cc275e2b19193006dd6dc876dd077641ac3ae79b2b605f7ce9e645d1117eb7f3a9ddbd8e732d06fc7894ebb94cb2a960236ee87758b0f241d5b699b3ad2f6fb2de6fd6febb1efa6a0eedff01ecd4dd2052099c793846986607be8b42ae8c2ba85bb3b76bef74e854bd61993425ea9684668c376b2d026548810fca8bd0c0df8d02fdb2fbc76dcca49eb1ac09d0f81a6d4e10979ca2a7e252aaeec60b6b134f5d9b75395ea4e1cc0907f18f5fe714e8afc94aa3cf9295c2dace303b96fb3bf05c105212dd619a54e398f13e4a19cceedfef8eefd55fe4a6ca815fb8bac47f46c30db0488a267bdb018182a17b2b02675780622a3cbe4db0e3bf14d6762f79f98a95244f53bdda5707755352c292cc503303b26d4e1bf028ecb353b77849b37d079d1841a91163c772352eb1c1c4032dd0a4f262e9c57d5a09954774dc8ca6e09b98086e3bc9d7bd9a895f16e4360b371a0351264655be5500d80bd23d5d0a9d85a8b4353f02e54b5a1b38d82851eded7358fcb637cdf60d5aac00ac246044f6711b895d5e0b5d386d7399d15801cef8c4f039a962ecabd8b66366eda704e8daeb57458c6b2e26e6bda6ebf14711b50bf599ec1b69fd542b0b1cf2aa1a813fc370231bed0c29b8ec9504f98101c2eb79b2bc2857039e191cba51318e4702639f01a67d136d2a2a2137984a9c5ec8000389865f3713ffd563f7a7a117594d6b33f7176c12170b4f8cee9661f303a7c32ded8638dd85ac552b8c0421db0f6fe672a6e5a1853e96c48e3382f4dea51c4cb5134bd3faccc22441f40132f668d4ccd5b74e08da3c9a86a76f437bf44b801801edf220ac2271010718c330128bfa30ff0331517c3f6f95b5327e9082bf44c34c49c0904f609f526235405119f9a719e18741068b3964d4f275ff97b9e8e719a529d003f0b61efdaf1e240d5d7e877171d734c7386471d715d7a45268ca7be2093cf4f3ceb4b1c68cee6c223eafc33d5d67b95147fadee5b8e87ca636d00517c43a0c6a771a0e9f016da4df8561d2a2687ca07f141e715acdbb7c0d4b6f4f1cd0ed124e09c6151c8cdc165e45f762176d9f0ecfaddbf5bbde6bf926f10e7e260afd41cb2bb4bcde1a4b2ec1f8ee3fa82f3e3fa9063f100148b47d326be4dc4ec65235c586e5134d8f1f834bafa314631fc2c3946e2148ad35d376b2be117b4c1466196835988a5b6a667419e223b58992a712318459fcd8088c6c25f2b5484a63f2b5aeaf983f887278863618dc62c1cae952124950d466d4a753f212de0cc4fa9689b3e050a6beee87cd6474368fc7a54d324e4fca8dcc98386d3ae18379ce8b85285b1d8e12d6e7ede3869fb5d51967a1e13a32c1aa0d109817445a909da0a0a6546f8915f0ec3064e918da9724fb98efb359c88277470c750776378720db6758b659d1f0ca4a01211259b450481a0838329eb937fcfbca23c817a567bc7e1cf78b1a29ab3020c6eb5ea331824e31a63e093ed7556da9632f44afd3cbd9b95adb5686bc94583cbba9f60b897e587b406cdf5932b11f4475275a1f9a77a327eca611fab86df6aca4dd749e0bfb7caf433bc22b8f40d81739f0c8671d99e6d36728dfefc730bf18541", 0x1000, &(0x7f0000001180), &(0x7f0000001040), &(0x7f0000001080)="72552abcaf159a44add465cbdcbf56d54db351917d516bd5cdf0b75165ad5ea4a6af79ae27c38af63e08ad75e1e21f3c1b0045e91b5a77dde60b0cb94e56b687fb6ebb468c1bce6a49a7d13d819667e6635d4892153384220aad2240c3250f9214e01aa8f37f1bcef98edeae3523ffc92f1b1a0da2568f3a41fe7801655208254e4bef8a2a29c2ffebe53d7d011b5738b24303251570d2bf1436afe89ea365606c7689509e5c658d305088") pidfd_open(r0, 0x0) 14:57:37 executing program 4: syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x12, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e746673d95c2fcf"]) 14:57:37 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 14:57:38 executing program 2: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@target={'target ', {'PCI:', '8', ':', '7', ':', '11', '.', '1a'}}, 0x15) 14:57:38 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 615.354307][ T8678] loop4: detected capacity change from 0 to 38447 14:57:38 executing program 2: syz_mount_image$befs(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x8084, &(0x7f0000001380)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'subj_user'}}]}) [ 615.762310][ T8688] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:39 executing program 4: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io'}, 0x8) [ 616.017616][ T8690] befs: Unrecognized mount option "smackfstransmute=subj_user" or missing value 14:57:39 executing program 2: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@target={'target ', {'PCI:', '17', ':', 'a', ':', '15', '.', '8'}}, 0xc) 14:57:39 executing program 4: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io'}, 0x8) 14:57:39 executing program 0: syz_mount_image$ntfs3(0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000003c0)="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", 0x617}], 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x200000, &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{'ntfs3\x00'}]}) [ 616.995848][ T8694] loop0: detected capacity change from 0 to 3 14:57:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "abd3eb1d2a58944a40491936282b8131"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}}, 0x0) 14:57:40 executing program 4: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vga_arbiter(r0, 0x0, 0x0) [ 617.909567][ T2849] Dev loop0: unable to read RDB block 3 [ 617.916360][ T2849] loop0: unable to read partition table [ 617.967499][ T2849] loop0: partition table beyond EOD, truncated 14:57:43 executing program 3: syz_mount_image$squashfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[], 0x0, 0x0) 14:57:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') read$FUSE(r0, 0x0, 0x700) 14:57:44 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 14:57:44 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="183e000002000000000000000000000085100000040000008510"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xdf, &(0x7f00000000c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:57:44 executing program 0: syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x0, 0x155555555555561b, &(0x7f0000000140)=[{&(0x7f00000001c0)="3e45a4e6df0b95c2c3f555fc34fe601e86d86767220e4f254a27578fd9a3ebcdf3259a718d6a6b5acb5b553371fb4026c84bc1790eff42737cbcb0c0001860d7ff15b22a629b9160d183846e5fef7e76981b98e4045c2c7691c96157960e", 0xfe5d, 0xfe}], 0x0, &(0x7f0000000000)=ANY=[]) 14:57:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0123000000000800000001"], 0x1c}}, 0x0) 14:57:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 14:57:44 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 621.608855][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 14:57:44 executing program 2: syz_mount_image$ntfs3(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x200000, &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{'ntfs3\x00'}]}) 14:57:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) 14:57:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 621.920284][ T8716] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:45 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:45 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cpuset\x00') read$FUSE(r0, &(0x7f0000002500)={0x2020}, 0x16b9) read$FUSE(r0, 0x0, 0x700) 14:57:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f00004ac000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:57:45 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 14:57:45 executing program 3: syz_mount_image$squashfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@reiserfs_4={0x10}, &(0x7f0000000100), 0x1000) 14:57:46 executing program 2: syz_mount_image$befs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x1, &(0x7f0000000600)) 14:57:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0xf}}, 0x0) 14:57:46 executing program 4: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 623.193427][ T8736] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:46 executing program 3: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vga_arbiter(r0, 0x0, 0x2) 14:57:46 executing program 0: add_key$fscrypt_v1(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) [ 623.608430][ T8747] befs: (loop2): invalid magic header 14:57:46 executing program 3: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vga_arbiter(r0, 0x0, 0x2) 14:57:46 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000a4d0099b099d46eeb5a6d2ef5e9d5ded010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000e0f4655fe1f4655fe1f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x2080}, {&(0x7f0000011800)="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", 0x1e9, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x8000}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) [ 624.065619][ T8750] loop4: detected capacity change from 0 to 2048 14:57:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x29, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000200)=""/196, 0x2e, 0xc4, 0x1}, 0x20) 14:57:47 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:47 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:57:47 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_val], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 624.299606][ T8750] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. 14:57:47 executing program 3: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vga_arbiter(r0, 0x0, 0x2) [ 624.407308][ T8750] ext4 filesystem being mounted at /root/syzkaller-testdir3170927702/syzkaller.WMOiFl/380/file0 supports timestamps until 2038 (0x7fffffff) 14:57:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x1275, 0x0) 14:57:47 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) [ 624.635900][ T3515] EXT4-fs (loop4): unmounting filesystem. [ 624.773021][ T8766] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:47 executing program 0: bpf$BPF_BTF_LOAD(0x8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 14:57:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000180)) 14:57:48 executing program 3: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vga_arbiter(r0, 0x0, 0x2) 14:57:48 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x4, &(0x7f0000000000)=@raw=[@map_val, @alu, @generic], &(0x7f0000000040)='syzkaller\x00', 0xac3, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:57:48 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:57:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 14:57:48 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:48 executing program 3: write$vga_arbiter(0xffffffffffffffff, 0x0, 0x2) 14:57:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 14:57:49 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) 14:57:49 executing program 3: write$vga_arbiter(0xffffffffffffffff, 0x0, 0x2) 14:57:49 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 14:57:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@const, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000200)=""/196, 0x3a, 0xc4, 0x1}, 0x20) [ 626.582760][ T8796] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:49 executing program 4: bpf$BPF_BTF_LOAD(0x4, 0x0, 0x0) 14:57:49 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109024400e8"], 0x0) 14:57:50 executing program 3: write$vga_arbiter(0xffffffffffffffff, 0x0, 0x2) 14:57:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x0) 14:57:50 executing program 2: io_pgetevents(0x0, 0x0, 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040), &(0x7f00000004c0)={&(0x7f00000000c0), 0x11}) [ 627.253168][ T7864] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 627.571223][ T7864] usb 1-1: Using ep0 maxpacket: 32 [ 627.715518][ T7864] usb 1-1: config 0 has too many interfaces: 232, using maximum allowed: 32 [ 627.724519][ T7864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.734912][ T7864] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 232 [ 627.930746][ T7864] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 627.944398][ T7864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.953133][ T7864] usb 1-1: Product: syz [ 627.957484][ T7864] usb 1-1: Manufacturer: syz [ 627.962328][ T7864] usb 1-1: SerialNumber: syz [ 627.983080][ T7864] usb 1-1: config 0 descriptor?? [ 628.230514][ T7864] usb 1-1: USB disconnect, device number 3 14:57:52 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:52 executing program 3: r0 = openat$vga_arbiter(0xffffff9c, 0x0, 0x2, 0x0) write$vga_arbiter(r0, 0x0, 0x2) 14:57:52 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x9, &(0x7f0000000100)=@framed={{}, [@map_idx_val, @map_val, @map_fd]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:57:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000340)={0x0, 0x0}) 14:57:52 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:57:53 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x16, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000200)=""/196, 0x2e, 0xc4, 0x1}, 0x20) 14:57:53 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0xfffffed1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x0) 14:57:53 executing program 3: r0 = openat$vga_arbiter(0xffffff9c, 0x0, 0x2, 0x0) write$vga_arbiter(r0, 0x0, 0x2) 14:57:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000240)="d9", 0x1}], 0x2}, 0x0) 14:57:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}}, 0x0) [ 630.672840][ T8839] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:57:53 executing program 3: r0 = openat$vga_arbiter(0xffffff9c, 0x0, 0x2, 0x0) write$vga_arbiter(r0, 0x0, 0x2) 14:57:54 executing program 0: clock_gettime(0x536ff5786f310fab, 0x0) [ 630.913402][ T8835] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:54 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:54 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 14:57:54 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 14:57:54 executing program 3: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x2) 14:57:54 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 14:57:54 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, &(0x7f0000000180)=""/152, 0x32, 0x98, 0x1}, 0x20) [ 631.889010][ T8856] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:57:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) 14:57:55 executing program 3: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x2) 14:57:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 14:57:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80104592, 0x0) 14:57:55 executing program 3: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x2) 14:57:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, 0x0, 0x97ffffff}, 0x0) 14:57:59 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:57:59 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x15d440) 14:57:59 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) 14:57:59 executing program 3: openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x2) 14:57:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x900, &(0x7f0000000100)={0x2, 0x4e20, 0x0, @mcast2}, 0x1c) 14:57:59 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 636.363743][ T8882] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:57:59 executing program 4: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc42493689e913c4) 14:57:59 executing program 3: openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x2) 14:57:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0xc00c55ca, 0x0) 14:57:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}, 0x24000090) 14:57:59 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) 14:58:00 executing program 3: openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x2) [ 637.342965][ T8898] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:58:00 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:58:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) 14:58:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0xc004ae02, 0x20000000) 14:58:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x8008ae9d, 0x7ffffffff000) 14:58:00 executing program 3: socket$inet(0x2, 0xa, 0x9) 14:58:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x400c55cb, 0x0) 14:58:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x5501, 0x0) [ 637.870969][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 637.877726][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 14:58:01 executing program 4: syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x4080) 14:58:01 executing program 3: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006fc0)) 14:58:01 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) 14:58:01 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x0) 14:58:01 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x16, 0x0, 0x0, 0x2}}, &(0x7f0000000200)=""/196, 0x1a, 0xc4, 0x1}, 0x20) [ 638.508991][ T8924] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:58:01 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:58:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hoplimit_2292={{0x14}}], 0xf}, 0x0) 14:58:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$input_event(r0, 0x0, 0x0) 14:58:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x6, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)=""/196, 0x1a, 0xc4, 0x1}, 0x20) 14:58:01 executing program 2: io_setup(0x9, &(0x7f00000003c0)=0x0) io_getevents(r0, 0x95b, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}) 14:58:02 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) 14:58:02 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x2, 0x20000000) 14:58:02 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0) 14:58:02 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x304, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/141) 14:58:02 executing program 2: bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 14:58:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000380)="2f05bf2bd1fdafc5a296aa36578aa770cec00ede7d36f3f961d9ca97d57fd71c", 0x20) [ 639.709257][ T8943] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:58:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="e0", 0x1}], 0x4}, 0x0) 14:58:03 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:58:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) sendmsg$unix(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x70}, 0x0) 14:58:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delsa={0x28, 0x15, 0x1, 0x0, 0x0, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x28}}, 0x0) 14:58:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x40045564, &(0x7f0000000040)={{}, 'syz1\x00'}) 14:58:03 executing program 4: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$unlink(0x9, 0x0, r0) 14:58:03 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x12, r0, 0x10000000) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x10000000) 14:58:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, 0x0) 14:58:03 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10}, 0x80) 14:58:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0xc000000}]}}, &(0x7f0000000200)=""/196, 0x26, 0xc4, 0x1}, 0x20) 14:58:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1d) [ 640.925626][ T8964] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:58:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 14:58:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x0, 0x4, 0x4}, 0x48) 14:58:04 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:58:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000540), 0x18) 14:58:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, 0x0, 0x1d) 14:58:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x4c00, 0x0) 14:58:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x18, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x2c}}, 0x0) 14:58:04 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xffffffffffffffff) [ 641.635697][ T8986] input: syz1 as /devices/virtual/input/input13 14:58:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x2, 0x20040010) 14:58:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000240)) 14:58:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4b47, 0x0) 14:58:05 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) ioctl$UI_SET_FFBIT(r0, 0x40045566, 0x0) [ 642.148480][ T8997] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:58:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x28}}, 0x0) 14:58:05 executing program 5: bpf$BPF_BTF_LOAD(0x14, &(0x7f0000000300)={0x0, &(0x7f0000000200)=""/196, 0x0, 0xc4}, 0x20) 14:58:05 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:58:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40084503, 0x0) 14:58:05 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) 14:58:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x4c0a, 0x0) 14:58:05 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000200)=""/196, 0x26, 0xc4, 0x1}, 0x20) 14:58:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r2 = getpgid(0x0) sendmsg$unix(r1, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee01}}}], 0x20}, 0x0) 14:58:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x4b47, 0x0) 14:58:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hoplimit_2292={{0x14, 0x29, 0x3e}}], 0x18}, 0x0) 14:58:06 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 14:58:06 executing program 4: clock_gettime(0x0, &(0x7f0000000380)={0x0}) pselect6(0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={r0}, 0x0) 14:58:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x903, &(0x7f0000000100)={0x2, 0x0, 0x0, @mcast2}, 0x1c) 14:58:06 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) [ 643.556100][ T9020] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:58:07 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:58:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40044581, 0x0) 14:58:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 14:58:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x8008ae9d, 0x1ffff000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:58:07 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) 14:58:07 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000200)) 14:58:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2, 0x2, 0x3}, 0x14}}, 0x0) 14:58:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) 14:58:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x48) 14:58:07 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000480)=0xfff, 0x4) 14:58:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x2) [ 644.806414][ T9049] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:58:07 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:12 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:58:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x40045567, 0x0) 14:58:12 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x40010, r0, 0x8000000) 14:58:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @vsock={0x28, 0x0, 0x0, @host}, @hci, @nfc={0x27, 0x0, 0x0, 0x2}}) 14:58:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, 0x0}, 0x0) 14:58:12 executing program 5: timer_create(0x3, &(0x7f0000000140)={0x0, 0x9, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)) 14:58:12 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x56}, &(0x7f0000000200), 0x0) 14:58:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r0, 0xc008ae88, 0x20000000) 14:58:12 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0x12, r0, 0x10000000) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x10000000) 14:58:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001380)={&(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=[@rthdrdstopts={{0x18}}, @rthdrdstopts={{0x18}}, @hoplimit={{0x14}}, @dontfrag={{0x14}}], 0x60}, 0x0) 14:58:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc00caee0, 0x0) 14:58:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x0, &(0x7f0000004fc0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005040), &(0x7f0000005080)) [ 650.164801][ T9076] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:58:13 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:58:13 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000240)={0x2920, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) 14:58:13 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5, 0x5}]}]}}, &(0x7f0000000200)=""/196, 0x2e, 0xc4, 0x1}, 0x20) 14:58:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x301, 0x0) 14:58:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x5451, 0x0) 14:58:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x2, &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @dev}) 14:58:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x6c}}, 0x28}}, 0x0) 14:58:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000059c0)={0x18, 0x0, 0x4, 0x201, 0x0, 0x0, {}, [@generic="12"]}, 0x18}}, 0x0) 14:58:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x18}, 0x48) 14:58:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)) [ 650.915697][ T9105] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:58:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc) 14:58:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x5450, 0x0) [ 651.202980][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:58:14 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 14:58:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@hoplimit_2292={{0x14}}, @flowinfo={{0x14}}, @hoplimit_2292={{0x14}}], 0x48}, 0x0) 14:58:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)) 14:58:14 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:58:14 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00') ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) [ 651.797889][ T9128] input: syz1 as /devices/virtual/input/input19 14:58:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0xc, 0x0) ioctl$EVIOCGRAB(r0, 0x40084504, &(0x7f0000000000)) 14:58:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x46001) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 14:58:15 executing program 3: syz_open_dev$vcsa(&(0x7f00000001c0), 0x0, 0x300) [ 652.173083][ T9139] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 14:58:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000080)=""/195, 0x2a, 0xc3, 0x1}, 0x20) 14:58:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)) 14:58:15 executing program 2: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0), 0x0, 0x0, &(0x7f00000003c0)={0x0, r0+60000000}, 0x0) 14:58:15 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x23, &(0x7f0000000100)={0x5, 0xf, 0x23, 0x3, [@generic={0x3}, @generic={0x14, 0x10, 0xa, "532165d0439eeb2a055613324eadaf908c"}, @ext_cap={0x7}]}}) 14:58:15 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:58:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {0x0, 0x5}]}, @restrict]}}, &(0x7f0000000200)=""/196, 0x4e, 0xc4, 0x1}, 0x20) 14:58:15 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x304, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 14:58:16 executing program 2: r0 = socket(0xa, 0x3, 0x6) bind$xdp(r0, &(0x7f0000000000), 0x10) 14:58:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)) 14:58:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4010ae67, 0x0) [ 653.237007][ T7865] usb 6-1: new high-speed USB device number 2 using dummy_hcd 14:58:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x0, 0x0, 0x0, 0x44}, 0x48) [ 653.482765][ T7865] usb 6-1: Using ep0 maxpacket: 8 14:58:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f00000000c0)) [ 653.703051][ T7865] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 653.974295][ T7865] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.983779][ T7865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.992132][ T7865] usb 6-1: Product: syz [ 653.996468][ T7865] usb 6-1: Manufacturer: syz [ 654.001241][ T7865] usb 6-1: SerialNumber: syz 14:58:17 executing program 4: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x4}, &(0x7f0000000100), 0x0) 14:58:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x0, @mcast2}, 0x2) [ 654.246013][ T7865] cdc_ether: probe of 6-1:1.0 failed with error -22 14:58:17 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 654.465772][ T7865] usb 6-1: USB disconnect, device number 2 14:58:18 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x23, &(0x7f0000000100)={0x5, 0xf, 0x23, 0x3, [@generic={0x3}, @generic={0x14, 0x10, 0xa, "532165d0439eeb2a055613324eadaf908c"}, @ext_cap={0x7}]}}) 14:58:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000021c0)=[{{&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="8d", 0x1}], 0x1, &(0x7f00000001c0)=[{0x10}], 0x10}}, {{&(0x7f0000000380)=@qipcrtr, 0x80, 0x0}}], 0x2, 0x0) 14:58:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x0, 0xd259]) 14:58:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000000280)={0x10, 0x3c, 0x1}, 0x10}], 0x1}, 0x0) 14:58:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000001800), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000001a40)) 14:58:18 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 14:58:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x18}}, @hopopts={{0x18}}], 0x30}, 0x0) 14:58:18 executing program 3: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, r0+60000000}, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) 14:58:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 14:58:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x38000, 0x0, &(0x7f0000000100)={0x2, 0x0, 0x0, @mcast2}, 0x1c) 14:58:18 executing program 4: write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0xd3fb0000, 0x5, {0x5, 0x1800000, 0xb7a7, 0x0, 0x2, 0x6, 0x7fffffff, 0x3, 0x9, 0x8000, 0x7f, 0xee01, 0xee01, 0xffffffcd, 0x4}}}, 0x90) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000000c0)={0xd8, 0x0, 0x0, [{0x3, 0x9aa, 0x9, 0x6, '(\\]\x88^+(^#'}, {0x3, 0x8000000000000001, 0x2, 0x5, '(!'}, {0x2, 0xffffffffffffff80, 0x2, 0x4, '/@'}, {0x4, 0x3f, 0x1, 0x6, '-'}, {0x5, 0x7dc80d24, 0x7, 0x2, '^,-{-\v}'}, {0x3, 0x6, 0x2, 0x9, '\\#'}]}, 0xd8) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0xffffffffffffffda}, 0x10) r0 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x7, 0x5, &(0x7f0000000680)=[{&(0x7f0000000300)="a3384519738526803ddc2b5873dadc6ae26bbdd56da86c3d60c206c19ed3849f72c53cfc929617387d8926fdece94ccb6760b0f1cb43fe29bd6fba8aa89a784037a93bc271434118a17c8f95a456928b21b591ea43d6fd04b21b106bdd4524dacf0d841882e4997cf3b102791cedf2a45359f4af02b8ba2d014b0572ccdd6013dc4edd18aff34f304957db7fffb7ab27a022525579f7b787f81b2800de9a3df07de2d4c22d813d9c1dfc6296680af0899972b29aae468eb0100c6c7d7a9e4f329f83", 0xc2, 0xa6a6}, {&(0x7f0000000400)="ff74b302da0212337de5bafab93ed1cb6256997db71f906ade0336f26846f4b9af74018d8c5b8d5958d5b073fbefc6bedfeae550ab4d0c000e69c730351a98ea1294210edba6bcabe20e09", 0x4b, 0x80}, {&(0x7f0000000480)="3df349da999b6ce883c5fe848275603ea46bc96b0405a60f1b55ffb2c37a853f15c3ef0db65f2074ab2b17d9e841309bc263088de156c67ea39cfa7af351ac8640274a288c016d9a95b2e74a24bc", 0x4e, 0x100}, {&(0x7f0000000500)="67d0b12bb54bc5d2e62abbd251f7ccb114296b96b7cb9956cb9592eea5f251c386b6ef22a6da8901f32504d076d57f581501f4569c02f66f0cedec6dd64e048f01e71b3ef682d5ab8b7b605e5e10e498c92362b2b5330c5e0e0af289228e81711d08b4ba405c035fa6", 0x69, 0x7ff}, {&(0x7f0000000580)="9402fd76ff600e0f60e23d7743806ec88eb5b9f5aac15b015db5b44704185553e986776a40976d22a43a2026c4ebc8e4a0c74b1a5a3f2c64bbbdf2c8e6f078c684b966400e0150052557ee949d3fdf250350b45f217ac5d446ec68923c8d35df6faef79c81a422c3bb38a3377a9c796510aec3ddefde0580f23efaa92101667c47bb80c753edcd2e1669ace51f96346eaafa58b9a9e8f741eb9e563ade44b381a04e3a51b338af1eb2911b8342c310b03de6da51427334cf0bcd3b29686395059f586bb23c7ee0937e46ba62611955551ab30f6607df3c94e7bcf9f2eed0e8287ddbcc416f9fc29e2fcf", 0xea, 0xfff}], 0x4, &(0x7f0000000700)={[{@size={'size', 0x3d, [0x6d, 0x39, 0x2d]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x2d]}}, {@huge_always}], [{@euid_eq}, {@subj_type={'subj_type', 0x3d, '(!'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^,-{-\v}'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x38, 0x0, 0x34, 0x37, 0x34, 0x34, 0x64], 0x2d, [0x61, 0x36, 0x33, 0x64], 0x2d, [0x37, 0x38, 0x35, 0x61], 0x2d, [0x65, 0x36, 0x35, 0x39], 0x2d, [0x36, 0x37, 0x30, 0x64, 0x63, 0x37, 0x64]}}}, {@obj_role={'obj_role', 0x3d, '(\\]\x88^+(^#'}}, {@smackfsdef={'smackfsdef', 0x3d, '-'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '(!'}}]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000800)={@id={0x2, 0x0, @d}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002880)={0x10, 0x0, r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000028c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002900)={0x2020}, 0x2020) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000004940)=0x3) r3 = syz_open_dev$mouse(&(0x7f0000004ac0), 0x3f, 0x101040) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000004b00)={0x2, [0x0, 0x0]}) 14:58:19 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x3}]}) [ 656.013018][ T3562] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 656.264224][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 656.325273][ T9217] loop4: detected capacity change from 0 to 166 [ 656.352562][ T9217] tmpfs: Bad value for 'size' [ 656.513895][ T3562] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 656.693498][ T3562] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 656.702954][ T3562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.715044][ T3562] usb 6-1: Product: syz [ 656.719398][ T3562] usb 6-1: Manufacturer: syz [ 656.725389][ T3562] usb 6-1: SerialNumber: syz [ 656.836208][ T3562] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 657.051427][ T7926] usb 6-1: USB disconnect, device number 3 14:58:20 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x23, &(0x7f0000000100)={0x5, 0xf, 0x23, 0x3, [@generic={0x3}, @generic={0x14, 0x10, 0xa, "532165d0439eeb2a055613324eadaf908c"}, @ext_cap={0x7}]}}) 14:58:20 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000100)=""/146, 0xfffffffffffffe26) 14:58:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="03259085bd2aeed8defb5f4444553999", 0x10) 14:58:20 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, 0x0, 0x0) 14:58:20 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 14:58:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delsa={0x28, 0x11, 0x0, 0x0, 0x0, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x28}, 0x14}, 0x0) 14:58:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x28}}, 0x0) 14:58:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000180)) 14:58:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@pktinfo={{0x24, 0x88, 0x32, {@mcast1}}}], 0x28}, 0x0) 14:58:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000002640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000059c0)={0x1e84, 0x7, 0x4, 0x201, 0x0, 0x0, {}, [@generic="12e261326ebd60dc0af2f1fafbc55863f34ed5689ea3ff7dba509ceaa21fdcc3485d06bdc9d18057740631eb5aad0fedc5c0f875026d7b56db17088ee4a3fb4026d50b0bd80ad8aa383540df36ff311337d0502c99de1e704f846ab8453a92e7c961a89102a2f61d4a66c582e394a5677457e7695efe732d929b7306a592243cfb5b765f575aa5185075f89df0a57e5163d3a1546de076adcaa03ed246c20748aedc96002f1ccf94e11fc5d4143e9342795f98f445afdb4fced70e0646c263eda060d72853035348c373224ee520b9871c7060642713", @generic="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", @generic="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"]}, 0x1e84}}, 0x0) [ 658.452795][ T3562] usb 6-1: new high-speed USB device number 4 using dummy_hcd 14:58:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x200000dc) 14:58:21 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) [ 658.717030][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 658.943607][ T3562] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 659.203112][ T3562] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 659.215127][ T3562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.223437][ T3562] usb 6-1: Product: syz [ 659.227774][ T3562] usb 6-1: Manufacturer: syz [ 659.232606][ T3562] usb 6-1: SerialNumber: syz [ 659.345791][ T3562] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 659.602931][ T7865] usb 6-1: USB disconnect, device number 4 14:58:23 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x23, &(0x7f0000000100)={0x5, 0xf, 0x23, 0x3, [@generic={0x3}, @generic={0x14, 0x10, 0xa, "532165d0439eeb2a055613324eadaf908c"}, @ext_cap={0x7}]}}) 14:58:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, 0x0) 14:58:23 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, 0x0, 0x0) 14:58:23 executing program 0: io_setup(0x9, &(0x7f00000003c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 14:58:23 executing program 4: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 14:58:23 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x230000, 0x0) 14:58:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}}, 0x0) 14:58:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}, 0x900) 14:58:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x17, 0xfdfdffff, 0x0}) 14:58:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}) [ 660.823156][ T3562] usb 6-1: new high-speed USB device number 5 using dummy_hcd 14:58:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000001c0), 0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 14:58:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x5dc, 0x0, &(0x7f0000000100)={0x2, 0x4e20, 0x0, @mcast2}, 0x1c) [ 661.103223][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 661.312471][ T3562] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 661.526318][ T3562] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 661.535856][ T3562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.544184][ T3562] usb 6-1: Product: syz [ 661.548535][ T3562] usb 6-1: Manufacturer: syz [ 661.553415][ T3562] usb 6-1: SerialNumber: syz [ 661.656228][ T3562] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 661.903307][ T7865] usb 6-1: USB disconnect, device number 5 14:58:25 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x14, 0x0, &(0x7f00000004c0)=[@acquire_done], 0x0, 0x0, 0x0}) 14:58:25 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, 0x0, 0x0) 14:58:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@pktinfo={{0x24, 0x29, 0x3b, {@mcast1}}}], 0x28}, 0x0) 14:58:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x5452, 0x7ffffffff000) 14:58:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x17, 0x1, &(0x7f0000000140)='{'}) 14:58:25 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000300)=@framed={{}, [@map_fd]}, &(0x7f0000000340)='GPL\x00', 0x4, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140), 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1, 0x2}, 0x1c) 14:58:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, 0x0, @loopback}, 0x1) 14:58:25 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f00000001c0)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, r0) 14:58:26 executing program 5: r0 = getpgid(0x0) waitid(0x1, r0, 0x0, 0x8, 0x0) 14:58:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140), 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1, 0x2}, 0x1c) 14:58:26 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 14:58:26 executing program 3: syz_usb_connect(0x0, 0x102, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xfc, 0xd8, 0x9f, 0x10, 0x10c4, 0x81c8, 0xa2c6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf0, 0x2, 0x0, 0x0, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0xfa, 0xb4, 0xf4, 0x8, [@generic={0x37, 0x0, "558a0ab7345e8b701f83ee9d77d1cf56b6273059a78662ce7776cba38f72e58aeeef3979157d98bea1011ebc2985cc415332773bbb"}], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x0, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xca}]}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x0, 0x99, 0x0, [@generic={0x3, 0x0, '?'}]}}, {}, {}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x81}}]}}, {{0x9, 0x4, 0x40, 0x0, 0x2, 0xff, 0x23, 0x6f, 0x0, [@generic={0x4, 0x0, "d880"}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, [@generic={0x44, 0x0, "031b08f82c70dce22181880f07d31f8b5a8926c1f97a6f79486bd695b77bf6e735d6806efa5adfa51acea17384e0da5401eaab645b2464b12f4852e76ec30d12c648"}]}}, {}]}}]}}]}}, 0x0) 14:58:26 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040), 0x0) 14:58:26 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite\x00') read$FUSE(r0, 0x0, 0x0) 14:58:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) 14:58:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140), 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1, 0x2}, 0x1c) 14:58:27 executing program 2: inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000400) 14:58:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x700) 14:58:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140), 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1, 0x2}, 0x1c) [ 664.115739][ T7865] usb 4-1: new high-speed USB device number 6 using dummy_hcd 14:58:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc008ae88, 0x0) 14:58:27 executing program 2: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) [ 664.386044][ T7865] usb 4-1: Using ep0 maxpacket: 16 [ 664.514426][ T7865] usb 4-1: config 0 has an invalid interface number: 64 but max is 1 [ 664.522920][ T7865] usb 4-1: config 0 has no interface number 1 [ 664.529319][ T7865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 664.540589][ T7865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 664.551818][ T7865] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 664.562692][ T7865] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 664.573468][ T7865] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 664.584334][ T7865] usb 4-1: config 0 interface 64 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 664.599210][ T7865] usb 4-1: config 0 interface 64 altsetting 0 has an invalid endpoint with address 0x0, skipping 14:58:27 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040), 0x0) 14:58:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x700) [ 665.253537][ T7865] usb 4-1: New USB device found, idVendor=10c4, idProduct=81c8, bcdDevice=a2.c6 [ 665.263091][ T7865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.271296][ T7865] usb 4-1: Product: syz [ 665.275821][ T7865] usb 4-1: Manufacturer: syz [ 665.280597][ T7865] usb 4-1: SerialNumber: syz [ 665.393495][ T7865] usb 4-1: config 0 descriptor?? [ 665.679787][ T7865] cp210x 4-1:0.0: cp210x converter detected [ 665.704003][ T7865] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 665.711801][ T7865] cp210x 4-1:0.0: querying part number failed [ 665.737978][ T7865] usb 4-1: cp210x converter now attached to ttyUSB0 [ 665.753122][ T7865] cp210x 4-1:0.64: cp210x converter detected [ 665.777060][ T7865] cp210x 4-1:0.64: failed to get vendor val 0x370b size 1: -71 [ 665.785132][ T7865] cp210x 4-1:0.64: querying part number failed [ 665.801556][ T7865] usb 4-1: cp210x converter now attached to ttyUSB1 [ 665.815738][ T7865] usb 4-1: USB disconnect, device number 6 [ 665.846067][ T7865] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 665.856374][ T7865] cp210x 4-1:0.0: device disconnected [ 665.893085][ T7865] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 665.903396][ T7865] cp210x 4-1:0.64: device disconnected 14:58:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000680)=[{0x0, 0xfffffffffffffd39}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 14:58:29 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x0, 0x0, 0x0) 14:58:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@pktinfo={{0x24, 0x29, 0xb, {@mcast1}}}], 0x28}, 0x0) 14:58:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x700) 14:58:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020aea5, 0x0) 14:58:29 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040), 0x0) 14:58:29 executing program 0: symlink(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)='./file0\x00') 14:58:29 executing program 2: symlinkat(&(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') 14:58:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x10, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) 14:58:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x700) 14:58:30 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='.\x00') 14:58:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ee) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) mknod(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 14:58:30 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @local, @val, {@ipv4}}, 0x0) 14:58:30 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 14:58:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000040), 0x9) 14:58:30 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000300)) 14:58:30 executing program 0: r0 = semget(0x1, 0x4, 0x0) semctl$GETZCNT(r0, 0x0, 0x7, 0x0) 14:58:30 executing program 3: r0 = socket(0x18, 0x1, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0) 14:58:30 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) shutdown(r0, 0x0) select(0x40, &(0x7f0000000100)={0x7ff}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x4}, &(0x7f0000000040)={0x6}, 0x0, 0x0) 14:58:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 14:58:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000040), 0x9) 14:58:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, 0x0, 0x0) 14:58:31 executing program 3: r0 = socket(0x18, 0x1, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0x0, 0xffff}, 0x8) 14:58:31 executing program 2: faccessat(0xffffffffffffffff, 0x0, 0x110) 14:58:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0xa) 14:58:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000040), 0x9) 14:58:31 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 14:58:31 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r0, 0x80047462) 14:58:31 executing program 0: syz_emit_ethernet(0xda, &(0x7f0000000100)={@broadcast, @local, @val, {@ipv6}}, 0x0) 14:58:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ee) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x210, 0x0) 14:58:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000400), 0x10) 14:58:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000040), 0x9) 14:58:32 executing program 3: mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 14:58:32 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{0x0, 0x46}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x1000000000000316}, 0x0) 14:58:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[{0x38, 0x0, 0x0, "f72e76963c4f9087fc3f379d971fc539c66d9e2e96bab16e3b25721dc9f8eb7994"}, {0xb0, 0x0, 0x0, "fdbc8464053ccd0b19b97a4a418ea10f88d515e704ab4a58cc0cfcb61f23f44e7639ef7b198f46bdad99678c641a4b2bee546910d0179cbcb6fdb37f3ef46286a9ff80bf3eb173892ea63c757cf45f47085b6602c3f47b2e5356bcda72adf17ee5cb78c99d8c142c9877f83d5fa367ac371e6d102a152e3ff1ffeef041ee14070c8ac699da76f0efbad564c42af938cf0eb612c9f001869589"}], 0xe8}, 0x0) 14:58:32 executing program 5: open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 14:58:32 executing program 4: truncate(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f0000000200)='./file2\x00', 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x0) 14:58:32 executing program 3: r0 = socket(0x18, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1007, 0x0, 0x0) 14:58:33 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 14:58:33 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000180)={@broadcast, @local, @val, {@ipv4}}, 0x0) 14:58:33 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 14:58:33 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ee) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x138) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 14:58:33 executing program 3: r0 = semget(0x1, 0x4, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000140)=""/88) 14:58:33 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @local, @val, {@ipv4}}, 0x0) 14:58:33 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r0, 0x80047462) 14:58:33 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) 14:58:33 executing program 5: open$dir(0x0, 0x400, 0x0) 14:58:33 executing program 3: semget(0x0, 0x1, 0x2c7) 14:58:34 executing program 4: pipe2(0x0, 0x10008) 14:58:34 executing program 0: r0 = socket(0x18, 0x1, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffdbf) 14:58:34 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{}], 0x1) 14:58:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001400)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000001380)=[{&(0x7f0000000080)="242c1149b5bdbdb9cfb359d1122ba24b95cc258ac285b4a6a09954e6bc8c1618589d1225160a4bad0617817ad28efeee881ceb566dcc11cd129346b97ecae6a4f3eb7f2e2b5ccf694ea626e011825f4865e1469f99e9ba2e515c0a8a1e93331683ed6d3797ff0a13874f2d766044f31175718979494aa23beec1957cdb81a1e2d40d91fb70e1bb5b1c038b6b736420c808", 0x91}, {&(0x7f0000000140)='F', 0x1}, {0x0}], 0x3}, 0x0) 14:58:34 executing program 3: r0 = geteuid() setreuid(r0, 0x0) 14:58:34 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @local, @val, {@ipv4}}, 0x0) 14:58:34 executing program 0: shutdown(0xffffffffffffff9c, 0x0) 14:58:34 executing program 4: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') chown(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0) 14:58:34 executing program 2: socket(0x1, 0x3, 0x80) 14:58:34 executing program 5: fchmodat(0xffffffffffffffff, 0x0, 0x1000000) 14:58:35 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ee) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 14:58:35 executing program 4: shmget(0x0, 0x2000, 0x204, &(0x7f0000ffc000/0x2000)=nil) 14:58:35 executing program 0: syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 14:58:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1020a, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000000)='G', 0x1}], 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x0) pwritev(r0, &(0x7f0000002580)=[{&(0x7f0000002600)="5c780e1b437e00ea8590a07de41351376adb7d69403e80d605b24633d8ac8dd136022b8b9948efaa18482840dca806a66e083a44e6e30b243796bda3fb7640f6ade9e1a7c2a30bf573630fb90a34b4bb665c5b5a141e82d92a360dff925745774845fa09985605666fb6f0aee6cc91d105c61ff213d91036aabcc89b512689e067493810beffdd20b4a2065e4550aef9fc96f651367c707c3c8f9336fb9ed20c2bf9aefa8cfddabb9251219551f22b425932db32361414413332a302c5c7f371d0041b7fb5ff759791d6e3b3630946065f644b6a1aa359edd8ba3b2e8e93adb2603370c1b19788756a1d2000e0ec11d421838656787479627e", 0xf9}, {&(0x7f0000000200)="6dccbea3494b839df3c86049296105a95d55d1b8437f15439772f197518a3c369bc1b7cb35563a856c7f87c5ef74c5597738e05e73afa49ed8cf41d722556d9aa29d9f979ce857f139a27a179f2af19f0ce19665cbe7224adc5d16f85f66afe2e0e970de3d736119403eb16499e4e115b811c64a155e321eb51f842faed49d12c6d2cfec6196c05a071c878d55bd60f70bb76d575d5d473e87577f290de4faf7dd", 0xa1}, {&(0x7f00000002c0)="0d17096eb8fa009ef5167aa792c7c6b270e3535cefe311ea7dbf8d1c2b28cd6ea2fecde7f5b157cf658e199256055e84b4b7387d0035c4977e25e7d9e7fd5fca59a39e6f5d79ad8839a2ebfef44cb97c6eea1a68d74cfd29daa7a910730cb0c016205e6c470de6a7d85bd4cffb626253a858083551a35769b41a5fcdc20981df9c5bdf8201af808f89e526836f76d7e63eb0ff15b43674eae573", 0x9a}, {&(0x7f0000000380)="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", 0x5cd}], 0x4, 0x0, 0x0) 14:58:35 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{}], 0x1) 14:58:35 executing program 5: pipe(&(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, 0x0) 14:58:35 executing program 4: socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000200), 0x0) select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0xffffffffffffef7f}, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x4}, &(0x7f0000000040)={0x6}, 0x0, 0x0) 14:58:35 executing program 3: linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001900)) 14:58:35 executing program 0: pipe(&(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1010, r0, 0x0) 14:58:35 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x5}) 14:58:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 14:58:36 executing program 4: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 14:58:36 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) flock(r0, 0xc) 14:58:36 executing program 3: r0 = socket(0x18, 0x1, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 14:58:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) 14:58:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x8, 0x1}, 0x48) 14:58:36 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{}], 0x1) 14:58:36 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x2000000}}]}}, &(0x7f00000003c0)=""/172, 0x32, 0xac, 0x1}, 0x20) 14:58:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x400000, 0x2000001}, 0x48) 14:58:36 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000090000000000000000000003000000000900000005000000000000000600000002000006"], &(0x7f00000001c0)=""/187, 0x5d, 0xbb, 0x1}, 0x20) 14:58:37 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x8, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x62}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x7f, 0x0, 0x3f}, 0x48) 14:58:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) ioctl$TUNGETFILTER(r0, 0x400454dc, 0x0) 14:58:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) ioctl$TUNGETFILTER(r0, 0x800454dd, 0x0) 14:58:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x7f, 0x4, 0xbf}, 0x48) 14:58:37 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x60}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:37 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x18}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:37 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000480)=""/200, 0x28, 0xc8, 0x1}, 0x20) 14:58:38 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025", 0x1d}], 0x1) 14:58:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 14:58:39 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x6000000}}]}}, &(0x7f00000003c0)=""/172, 0x32, 0xac, 0x1}, 0x20) 14:58:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) 14:58:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x8, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x58}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)=0x3) 14:58:39 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025", 0x1d}], 0x1) 14:58:39 executing program 4: r0 = bpf$MAP_CREATE(0x5, &(0x7f00000000c0)=@base={0x0, 0x10088}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0xfffffffe, 0x8, 0xa00, r0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x800, 0x18}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x80000000, 0x18}, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='net_prio.prioidx\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x7f, 0x4, 0x3f, 0x0, r2, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) 14:58:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x7f, 0x4, 0x3f, 0x9}, 0x48) 14:58:39 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000ff"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:39 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 14:58:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)) 14:58:40 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="181000000000000000ff"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x7f, 0x2e00, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 14:58:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$BPF_GET_PROG_INFO(0x2, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 14:58:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x7, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xe}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 14:58:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x7, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xf}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:40 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025", 0x1d}], 0x1) 14:58:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x1c}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 14:58:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x7f, 0x4, 0x1}, 0x48) 14:58:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x7f, 0x4, 0x3f}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000040)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0xab, &(0x7f0000000100)=""/171, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x7f, 0x2e00, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 14:58:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0xc001, 0x3f}, 0x48) 14:58:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x19}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x7, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x2a}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:42 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) 14:58:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x7f, 0x8002, 0x3f}, 0x48) 14:58:42 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1}, {0x0, 0x3}]}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000200)=""/188, 0x38, 0xbc, 0x1}, 0x20) 14:58:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x7f, 0x2e00, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 14:58:42 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x27}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:42 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000", 0x2b}], 0x1) 14:58:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) ioctl$TUNGETFILTER(r0, 0x400454ce, 0x0) 14:58:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x43}}, 0x14) 14:58:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x7, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x17c000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5}, {}, {0x2, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}, @fwd]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000100)=""/186, 0x66, 0xba, 0x1}, 0x20) 14:58:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0, 0x4}, 0x20) 14:58:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x7f, 0x2e00, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 14:58:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x1, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 14:58:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5}}, @union={0x1000000}]}}, &(0x7f00000003c0)=""/172, 0x3e, 0xac, 0x1}, 0x20) 14:58:43 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x11}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:44 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000", 0x2b}], 0x1) 14:58:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x3, 0x4, 0x4, 0x1}, 0x48) 14:58:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 14:58:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x0, 0x304}, 0x48) 14:58:44 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 14:58:45 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$BPF_GET_MAP_INFO(0x16, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x10) 14:58:45 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x7f, 0x4, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 14:58:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x13}, 0x48) 14:58:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x22}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x7f, 0x4, 0x3f}, 0x48) 14:58:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x7f, 0x7600, 0x3f}, 0x48) 14:58:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x0, 0x0, 0x0, 0x304}, 0x48) 14:58:46 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000", 0x2b}], 0x1) 14:58:46 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0/file0\x00'}, 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 14:58:46 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="181000000000000000ff"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x29000000}, 0x48) 14:58:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x2000}, 0x48) 14:58:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x30]}}, &(0x7f0000000480)=""/194, 0x2f, 0xc2, 0x1}, 0x20) 14:58:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=':', 0x1}], 0x1}, 0x0) 14:58:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x7f, 0x2f00, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 14:58:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, 0x0}, 0x0) close(r1) 14:58:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {0x2}, {}]}]}, {0x0, [0x0]}}, &(0x7f0000000200)=""/188, 0x47, 0xbc, 0x1}, 0x20) 14:58:47 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1}]}, {0x0, [0x61]}}, &(0x7f0000000380)=""/167, 0x2b, 0xa7, 0x1}, 0x20) 14:58:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x1c}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) ioctl$TUNGETFILTER(r0, 0x401054d5, 0x0) 14:58:48 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400", 0x32}], 0x1) 14:58:48 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x11}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) 14:58:49 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000100)=""/186, 0x32, 0xba, 0x1}, 0x20) 14:58:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1}, {}, {0x0, 0x3}]}]}}, &(0x7f0000000200)=""/188, 0x3e, 0xbc, 0x1}, 0x20) 14:58:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x8, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x7f, 0x5900, 0x3f}, 0x48) 14:58:49 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400", 0x32}], 0x1) 14:58:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x8502}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'\x00', @local}) 14:58:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x55}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5}}, @union={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f00000003c0)=""/172, 0x46, 0xac, 0x1}, 0x20) 14:58:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) ioctl$TUNGETFILTER(r0, 0x4b47, 0x0) 14:58:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x4000000}}]}}, &(0x7f00000003c0)=""/172, 0x32, 0xac, 0x1}, 0x20) 14:58:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000140)="dc84148572feb743b3eef757b59ed1eba11b0809b7f69f74f49173112348b117eeff59cd1378af6534bcba5f7dd573a8376ad0da009d1408f62d6f9a050c7883980c66ac6f4475e1d34cb1718b9423530df3d642aa419cbeb9418fb9e7442ca17f86daf9bab3fe3c57e2c225a29feeb56ba0d5407ca1c1992c65503b1e6ac897de009ef3db2b3fcf7607ac0781a0232a84e5987e4acbddd63488350ca9a1f5b84e87528f7775c3701e8f86c42bd87f7c907faf7feb85e8404ae462e255f830f30e4a202fe5446449a2d44e330f43dc47248c878396026919102ffdc772", &(0x7f0000000240)=""/81}, 0x65) 14:58:50 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x1}, 0x48) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 14:58:50 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400", 0x32}], 0x1) 14:58:50 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x7, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x59}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'vlan1\x00'}) 14:58:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x8, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x2f}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x57}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11) 14:58:51 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x8, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x51}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x0, 0x4, 0x3f, 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x4, 0x10}, 0xc) 14:58:51 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x7, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x0, 0x0, 0x0, 0x4}, 0x48) 14:58:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f, 0x4}, 0x48) 14:58:56 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000", 0x36}], 0x1) 14:58:56 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x7f, 0x5d02, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 14:58:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x7f, 0x4, 0x3f}, 0x48) 14:58:56 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1}, {0x2}, {}]}]}, {0x0, [0x5f, 0x61, 0x30]}}, &(0x7f0000000200)=""/188, 0x41, 0xbc, 0x1}, 0x20) 14:58:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x0, 0x0, 0x0, 0x2}, 0x48) 14:58:56 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000140)="ff", &(0x7f00000001c0)=""/44}, 0x20) 14:58:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x40000d, 0x2000001}, 0x48) 14:58:56 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1}, {}, {0x0, 0x3}]}]}, {0x0, [0x5f, 0x61, 0x30]}}, &(0x7f0000000200)=""/188, 0x41, 0xbc, 0x1}, 0x20) 14:58:56 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0xd000000}}]}}, &(0x7f00000003c0)=""/172, 0x32, 0xac, 0x1}, 0x20) 14:58:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x10) 14:58:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x7, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:57 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000", 0x36}], 0x1) 14:58:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)) 14:58:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000100)='!', &(0x7f00000001c0)=""/213}, 0x20) 14:58:57 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) 14:58:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) 14:58:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)}, 0x20) close(r1) 14:58:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x7f, 0x4, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) 14:58:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x20) 14:58:57 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x318}, 0x48) 14:58:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x7f, 0x2f00, 0x3f}, 0x48) 14:58:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x1, 0x4}, 0x48) 14:58:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="3ada54170974864ad665db1925abbb3e7979c99990a77f08d50d65", 0x1b}, {&(0x7f0000000100)="837ec9529414d0dac6dbe7ba670ab731b2753bd50afc06a322d198301b82f3c1d4f278c0f5328d4aa2b949f510d49b6814252da514abdf7fde3f7a664105c1fa", 0x40}, {&(0x7f0000000140)="288051d95309fc77dd041ea1a4bcfe4b3f1945e5b0055380fcff2c427fc63276e2bd6900419acd28eca3fc716ee15fbbe716688c877965c6f0ae1809e8aaf65bab7f6c6c927a148e216bc76740119c112b93e87a0754302e3242142b3e0ec8f5408b41e2ac3b8030db6dc099577dc92582c412b30d85e258a6077ece763c6ca5d954d8f0326d8795b3c151863383f7", 0x8f}, {&(0x7f0000000200)="ffc57adc8a81835fbbac1056f60d0c783872c9cff8cbf05072a50d78d5cc071a80727423253cd36b839ef0eb9ae4140f06a3583504fd968e6930cfbcedfd15eb842eaf5542d71e2feccbb855db8491f278567fd0bbbb89b6efa2869e1e90858e9b8500c00c087d3502c5b1dcfe8b11d6f6adccba395fef980f6d14a942bc5d18aef227925b19298bc28feab3c4a45eee6fcf42681d592d30c2f45cdf46682170b98e02ab0e6421f2ad90a270e968bc8e7e9874c3617e9bddc45e8678fccc5eb1be5e09f1ed73df35ba41df9106ce03d1a9e7c48702511e4bf8c60fbb", 0xdc}, {&(0x7f0000002ac0)="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", 0xcbb}], 0x5}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1, &(0x7f0000000780)=""/189, 0xbd}, 0x0) 14:58:58 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5}}, @union={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f00000003c0)=""/172, 0x45, 0xac, 0x1}, 0x20) 14:58:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:58 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000", 0x36}], 0x1) 14:58:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x19}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@union={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/172, 0x2c, 0xac, 0x1}, 0x20) 14:58:59 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000005c0)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x94, &(0x7f0000000640)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x0, 0x0, 0x0, 0x6}, 0x48) 14:58:59 executing program 3: bpf$MAP_CREATE(0x5, &(0x7f00000000c0), 0x48) 14:58:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x7, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x16}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:59 executing program 0: syz_clone(0x30104000, 0x0, 0x0, &(0x7f0000001740), 0x0, 0x0) 14:58:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x2001}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)=0x1) 14:58:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x5}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:58:59 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x1a}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:00 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400000000000000", 0x38}], 0x1) 14:59:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x4, 0x4, 0x3, 0x4, 0x1}, 0x48) 14:59:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x2f}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x7f, 0x6500, 0x3f}, 0x48) 14:59:00 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) 14:59:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x2e}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000480)=""/194, 0x2e, 0xc2, 0x1}, 0x20) 14:59:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000240), 0x0}, 0x20) 14:59:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x7f, 0x4, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) 14:59:01 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0xc, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000480), 0x0}, 0x20) 14:59:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0}, 0xc) 14:59:01 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400000000000000", 0x38}], 0x1) 14:59:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x11, 0x4, 0x4, 0x3000001, 0x2}, 0x48) 14:59:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x0, 0x0, 0x0, 0x3f6}, 0x48) 14:59:01 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x7d}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:01 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x14, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f00000002c0)=""/137, 0x32, 0x89, 0x1}, 0x20) 14:59:01 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000040)=@raw=[@generic={0xbf}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x92, &(0x7f0000000280)=""/146, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:01 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0/file0\x00'}, 0x10) 14:59:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x9, 0x9, 0x9ff1, 0x40}, 0x48) 14:59:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x15}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'macvtap0\x00', 0x8512}) 14:59:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff}, 0xc) 14:59:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7f, 0x4, 0x3f}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xc1, &(0x7f00000000c0)=""/193, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 699.305236][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 699.314726][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 14:59:03 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000000060400000000000000", 0x38}], 0x1) 14:59:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5}}, @union]}}, &(0x7f00000003c0)=""/172, 0x3e, 0xac, 0x1}, 0x20) 14:59:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, 0x0, &(0x7f00000001c0)=""/213}, 0x20) 14:59:03 executing program 5: fdatasync(0xffffffffffffffff) 14:59:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 14:59:03 executing program 2: socket(0x0, 0x0, 0xfc) 14:59:03 executing program 3: ptrace(0x1, 0x0) 14:59:03 executing program 5: mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 14:59:03 executing program 0: faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 14:59:03 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback}}}, &(0x7f0000000240)=0x84) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000008000003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) 14:59:03 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 14:59:04 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000002180)={0x0, 0x0, 0x0}, 0x0) 14:59:04 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 14:59:04 executing program 3: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff}) 14:59:04 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0xa, 0x0}, 0x0) 14:59:04 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 14:59:04 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x0) 14:59:05 executing program 0: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8}}}}}]}}]}}, 0x0) 14:59:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 14:59:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000480)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000012c0)=ANY=[], 0xc001, 0x0) 14:59:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2}}) 14:59:05 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) 14:59:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0xffffffff) 14:59:05 executing program 2: setuid(0xee01) socketpair(0x1a, 0x0, 0x0, &(0x7f0000000180)) [ 702.530214][ T9916] loop4: detected capacity change from 0 to 512 14:59:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000000010200f3000040"]) 14:59:05 executing program 1: syz_clone3(&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000003c0), 0x0, 0x0, 0x0}, 0x58) [ 702.793464][ T7864] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 702.823504][ T9916] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. 14:59:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)='./file0/file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 14:59:06 executing program 5: syz_mount_image$befs(0x0, 0x0, 0x0, 0x2, &(0x7f0000002080)=[{&(0x7f0000001f00)="c9", 0x1}, {&(0x7f0000002000)="ea", 0x1, 0xffffffffffffffff}], 0x0, 0x0) 14:59:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x6, &(0x7f0000000380)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r3, &(0x7f0000002cc0)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f00000019c0), 0x0, &(0x7f0000001500)=""/232, 0xe8}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/147, 0x93}], 0x1}, 0x5}], 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000002d40)=ANY=[@ANYBLOB="677265746170300000001000000000066b052e13c3a8d081c8744562f1c806162d3ee701e2f85d0f9b198056af92ba9ae94ce00c208ad28aa32acab71472b5bd11dad338164bf02f6a3af7384674e9e850b70ff9a5aeb6632311f61d5d1e692fbc4319a6128ad9b53cae00512e83557921278cb9b32058fd0902158f8d1f450a35b8", @ANYBLOB="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", @ANYBLOB="07280001000000cb000004da374892bf8e92063bed2a038276ef004afc006800670000082f90780a010101ac14140089064959d80701443c4be36401010000000009ac1414bb00000002e000000200000101e00000010000000007ff0000000000200006830f0dc097bfd95d33462a7fa8729900006686f2c7943307a30343b02e97ebb9dd47243d91bf6a8c5efdf8ad7b416910ead81ec82dfd63ddda196ef831393e9de0c3a8503f3a2c9cfb9abd1ac678345dc266276d4938e25b20b500ea53802145d41b77d148620e", @ANYRES64=r1, @ANYRESHEX=r2, @ANYRES32=r1, @ANYRESOCT]}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(0xffffffffffffffff, 0x200, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) [ 703.152882][ T7864] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 703.184893][ T3515] EXT4-fs (loop4): unmounting filesystem. [ 703.363412][ T7864] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 703.373587][ T7864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.381791][ T7864] usb 1-1: Product: syz [ 703.386281][ T7864] usb 1-1: Manufacturer: syz [ 703.391059][ T7864] usb 1-1: SerialNumber: syz [ 703.576489][ T7864] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 703.650454][ T9941] loop5: detected capacity change from 0 to 264192 [ 703.781259][ T7864] usb 1-1: USB disconnect, device number 4 [ 703.880787][ T24] audit: type=1804 audit(1660661946.934:32): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir983575586/syzkaller.c6TCP6/420/bus" dev="sda1" ino=1176 res=1 errno=0 [ 703.906357][ T24] audit: type=1800 audit(1660661946.934:33): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1176 res=0 errno=0 14:59:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x2b, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) 14:59:07 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1f}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0xffffff5a, 0xc2, &(0x7f00000005c0)=""/194, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb, 0x0, 0x1000}, 0x10}, 0x80) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0xffffffffffffffff, 0xffffffffffffff71) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, '\x00'}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000340)={@rand_addr, @rand_addr, 0x29, 0x8a}}) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="9749ec1d2a74ba1d6cbb28", 0xb) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000003e40)='westwood\x00', 0x9) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 14:59:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000000010200f3000040"]) 14:59:07 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "d66327", 0x8, 0x0, 0x0, @empty, @dev, {[@fragment]}}}}}, 0x0) 14:59:07 executing program 5: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f00000002c0)='g', 0x1}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200), 0x0) 14:59:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000000010200f3000040"]) 14:59:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x8}]}}, &(0x7f0000000040)=""/243, 0x26, 0xf3, 0x1}, 0x20) 14:59:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x8077, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @loopback}}}}) 14:59:08 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)={[{@statfs_quantum={'statfs_quantum', 0x2c}}]}) [ 705.477796][ T9942] not chained 140000 origins [ 705.482770][ T9942] CPU: 0 PID: 9942 Comm: syz-executor.1 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 705.492983][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 705.503155][ T9942] Call Trace: [ 705.506523][ T9942] [ 705.509536][ T9942] dump_stack_lvl+0x1c8/0x256 [ 705.514407][ T9942] dump_stack+0x1a/0x1c [ 705.518725][ T9942] kmsan_internal_chain_origin+0x78/0x120 14:59:08 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 705.524610][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 705.531029][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 705.536997][ T9942] ? ____sys_recvmsg+0x5c1/0x810 [ 705.542081][ T9942] ? __get_compat_msghdr+0x5b/0x750 [ 705.547440][ T9942] ? get_compat_msghdr+0x8c/0x1c0 [ 705.552603][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 705.558572][ T9942] ? __get_compat_msghdr+0x5b/0x750 [ 705.563917][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 705.569878][ T9942] ? should_fail+0x3f/0x810 [ 705.574514][ T9942] ? __stack_depot_save+0x21/0x4b0 [ 705.579845][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 705.586236][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 705.592185][ T9942] __msan_chain_origin+0xbd/0x140 [ 705.597338][ T9942] __get_compat_msghdr+0x514/0x750 [ 705.602595][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 705.607573][ T9942] ? ___sys_recvmsg+0xa9/0x890 [ 705.612462][ T9942] ? do_recvmmsg+0x682/0x1180 [ 705.617257][ T9942] ___sys_recvmsg+0x19d/0x890 [ 705.622047][ T9942] ? do_recvmmsg+0x6e4/0x1180 [ 705.626858][ T9942] ? __stack_depot_save+0x21/0x4b0 [ 705.632103][ T9942] ? kmsan_internal_check_memory+0x94/0x530 [ 705.638139][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 705.644112][ T9942] do_recvmmsg+0x682/0x1180 [ 705.648752][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 705.655142][ T9942] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 705.661713][ T9942] __sys_recvmmsg+0x113/0x450 [ 705.666524][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 705.672929][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 705.678172][ T9942] ? exit_to_user_mode_prepare+0x119/0x220 [ 705.684111][ T9942] do_fast_syscall_32+0x33/0x70 [ 705.689120][ T9942] do_SYSENTER_32+0x1b/0x20 [ 705.693753][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 705.700231][ T9942] RIP: 0023:0xf7f29549 [ 705.704395][ T9942] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 705.724154][ T9942] RSP: 002b:00000000f7f035cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 705.732783][ T9942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 705.740873][ T9942] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 705.748964][ T9942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 705.757043][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.765120][ T9942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 705.773234][ T9942] [ 705.780951][ T9942] Uninit was stored to memory at: [ 705.786619][ T9942] __get_compat_msghdr+0x514/0x750 [ 705.792039][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 705.797017][ T9942] ___sys_recvmsg+0x19d/0x890 [ 705.801829][ T9942] do_recvmmsg+0x682/0x1180 [ 705.806566][ T9942] __sys_recvmmsg+0x113/0x450 [ 705.811376][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 705.817865][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 705.823210][ T9942] do_fast_syscall_32+0x33/0x70 [ 705.828207][ T9942] do_SYSENTER_32+0x1b/0x20 [ 705.832934][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 705.839421][ T9942] [ 705.841810][ T9942] Uninit was stored to memory at: [ 705.847093][ T9942] __get_compat_msghdr+0x514/0x750 [ 705.852445][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 705.857434][ T9942] ___sys_recvmsg+0x19d/0x890 [ 705.862333][ T9942] do_recvmmsg+0x682/0x1180 [ 705.866969][ T9942] __sys_recvmmsg+0x113/0x450 [ 705.871776][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 705.878262][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 705.883599][ T9942] do_fast_syscall_32+0x33/0x70 [ 705.888580][ T9942] do_SYSENTER_32+0x1b/0x20 [ 705.893287][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 705.899765][ T9942] [ 705.902235][ T9942] Uninit was stored to memory at: [ 705.907421][ T9942] __get_compat_msghdr+0x514/0x750 [ 705.912755][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 705.917740][ T9942] ___sys_recvmsg+0x19d/0x890 [ 705.922641][ T9942] do_recvmmsg+0x682/0x1180 [ 705.927280][ T9942] __sys_recvmmsg+0x113/0x450 [ 705.932230][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 705.938625][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 705.944026][ T9942] do_fast_syscall_32+0x33/0x70 [ 705.949016][ T9942] do_SYSENTER_32+0x1b/0x20 [ 705.953806][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 705.960283][ T9942] [ 705.962751][ T9942] Uninit was stored to memory at: [ 705.967942][ T9942] __get_compat_msghdr+0x514/0x750 [ 705.973266][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 705.978260][ T9942] ___sys_recvmsg+0x19d/0x890 [ 705.983211][ T9942] do_recvmmsg+0x682/0x1180 [ 705.987849][ T9942] __sys_recvmmsg+0x113/0x450 [ 705.992886][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 705.999278][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 706.004622][ T9942] do_fast_syscall_32+0x33/0x70 [ 706.009780][ T9942] do_SYSENTER_32+0x1b/0x20 [ 706.014541][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 706.021031][ T9942] [ 706.023560][ T9942] Uninit was stored to memory at: [ 706.028750][ T9942] __get_compat_msghdr+0x514/0x750 [ 706.034118][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 706.039110][ T9942] ___sys_recvmsg+0x19d/0x890 [ 706.044066][ T9942] do_recvmmsg+0x682/0x1180 [ 706.048749][ T9942] __sys_recvmmsg+0x113/0x450 [ 706.053701][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 706.060097][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 706.065487][ T9942] do_fast_syscall_32+0x33/0x70 [ 706.070486][ T9942] do_SYSENTER_32+0x1b/0x20 [ 706.075370][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 14:59:09 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001480)='cmdline\x00') read$msr(r0, &(0x7f00000014c0)=""/194, 0xc2) [ 706.081892][ T9942] [ 706.084435][ T9942] Uninit was stored to memory at: [ 706.089631][ T9942] __get_compat_msghdr+0x514/0x750 [ 706.095011][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 706.100047][ T9942] ___sys_recvmsg+0x19d/0x890 [ 706.105013][ T9942] do_recvmmsg+0x682/0x1180 [ 706.109653][ T9942] __sys_recvmmsg+0x113/0x450 [ 706.114613][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 706.121008][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 706.126412][ T9942] do_fast_syscall_32+0x33/0x70 [ 706.131406][ T9942] do_SYSENTER_32+0x1b/0x20 [ 706.136206][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 706.142854][ T9942] [ 706.145250][ T9942] Uninit was stored to memory at: [ 706.150440][ T9942] __get_compat_msghdr+0x514/0x750 [ 706.155827][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 706.160805][ T9942] ___sys_recvmsg+0x19d/0x890 [ 706.165756][ T9942] do_recvmmsg+0x682/0x1180 [ 706.170392][ T9942] __sys_recvmmsg+0x113/0x450 [ 706.175353][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 706.181740][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 706.187151][ T9942] do_fast_syscall_32+0x33/0x70 [ 706.192226][ T9942] do_SYSENTER_32+0x1b/0x20 [ 706.196851][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 706.203459][ T9942] [ 706.205849][ T9942] Local variable msg_sys created at: [ 706.211214][ T9942] do_recvmmsg+0x5c/0x1180 [ 706.215898][ T9942] __sys_recvmmsg+0x113/0x450 [ 706.719904][ T9978] gfs2: Bad value for 'statfs_quantum' [ 707.165711][ T9942] not chained 150000 origins [ 707.170428][ T9942] CPU: 0 PID: 9942 Comm: syz-executor.1 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 707.180641][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 707.190823][ T9942] Call Trace: [ 707.194184][ T9942] [ 707.197192][ T9942] dump_stack_lvl+0x1c8/0x256 [ 707.202051][ T9942] dump_stack+0x1a/0x1c [ 707.206357][ T9942] kmsan_internal_chain_origin+0x78/0x120 [ 707.212250][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 707.218685][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 707.224668][ T9942] ? ____sys_recvmsg+0x5c1/0x810 [ 707.229753][ T9942] ? __get_compat_msghdr+0x5b/0x750 [ 707.235091][ T9942] ? get_compat_msghdr+0x8c/0x1c0 [ 707.240257][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 707.246249][ T9942] ? __get_compat_msghdr+0x5b/0x750 [ 707.251584][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 707.257557][ T9942] ? should_fail+0x3f/0x810 [ 707.262207][ T9942] ? __stack_depot_save+0x21/0x4b0 [ 707.267445][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 707.273800][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 707.279769][ T9942] __msan_chain_origin+0xbd/0x140 [ 707.284921][ T9942] __get_compat_msghdr+0x514/0x750 [ 707.290116][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 707.295052][ T9942] ? ___sys_recvmsg+0xa9/0x890 [ 707.299945][ T9942] ? do_recvmmsg+0x682/0x1180 [ 707.304738][ T9942] ___sys_recvmsg+0x19d/0x890 [ 707.309486][ T9942] ? do_recvmmsg+0x6e4/0x1180 [ 707.314262][ T9942] ? __stack_depot_save+0x21/0x4b0 [ 707.319501][ T9942] ? kmsan_internal_check_memory+0x94/0x530 [ 707.325530][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 707.331476][ T9942] do_recvmmsg+0x682/0x1180 [ 707.336065][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 707.342417][ T9942] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 707.348968][ T9942] __sys_recvmmsg+0x113/0x450 [ 707.353745][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 707.360134][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 707.365335][ T9942] ? exit_to_user_mode_prepare+0x119/0x220 [ 707.371223][ T9942] do_fast_syscall_32+0x33/0x70 [ 707.376161][ T9942] do_SYSENTER_32+0x1b/0x20 [ 707.380797][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 707.387279][ T9942] RIP: 0023:0xf7f29549 [ 707.391423][ T9942] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 707.412386][ T9942] RSP: 002b:00000000f7f035cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 707.420919][ T9942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 707.429068][ T9942] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 707.437123][ T9942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 707.445190][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.453243][ T9942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 707.461360][ T9942] [ 707.468845][ T9942] Uninit was stored to memory at: [ 707.474575][ T9942] __get_compat_msghdr+0x514/0x750 [ 707.479832][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 707.484903][ T9942] ___sys_recvmsg+0x19d/0x890 [ 707.489711][ T9942] do_recvmmsg+0x682/0x1180 [ 707.494419][ T9942] __sys_recvmmsg+0x113/0x450 [ 707.499251][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 707.505733][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 707.510990][ T9942] do_fast_syscall_32+0x33/0x70 [ 707.516131][ T9942] do_SYSENTER_32+0x1b/0x20 [ 707.520803][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 707.527385][ T9942] [ 707.529768][ T9942] Uninit was stored to memory at: [ 707.535071][ T9942] __get_compat_msghdr+0x514/0x750 [ 707.540311][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 707.545414][ T9942] ___sys_recvmsg+0x19d/0x890 [ 707.550211][ T9942] do_recvmmsg+0x682/0x1180 [ 707.554933][ T9942] __sys_recvmmsg+0x113/0x450 [ 707.559724][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 707.566193][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 707.571454][ T9942] do_fast_syscall_32+0x33/0x70 [ 707.576618][ T9942] do_SYSENTER_32+0x1b/0x20 [ 707.581273][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 707.587851][ T9942] [ 707.590225][ T9942] Uninit was stored to memory at: [ 707.595522][ T9942] __get_compat_msghdr+0x514/0x750 [ 707.600747][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 707.605848][ T9942] ___sys_recvmsg+0x19d/0x890 [ 707.610662][ T9942] do_recvmmsg+0x682/0x1180 [ 707.615435][ T9942] __sys_recvmmsg+0x113/0x450 [ 707.620244][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 707.626694][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 707.632105][ T9942] do_fast_syscall_32+0x33/0x70 [ 707.637110][ T9942] do_SYSENTER_32+0x1b/0x20 [ 707.641740][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 707.648290][ T9942] [ 707.650666][ T9942] Uninit was stored to memory at: [ 707.656000][ T9942] __get_compat_msghdr+0x514/0x750 [ 707.661223][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 707.666261][ T9942] ___sys_recvmsg+0x19d/0x890 [ 707.671048][ T9942] do_recvmmsg+0x682/0x1180 [ 707.675773][ T9942] __sys_recvmmsg+0x113/0x450 [ 707.680604][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 707.687099][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 707.692441][ T9942] do_fast_syscall_32+0x33/0x70 [ 707.697413][ T9942] do_SYSENTER_32+0x1b/0x20 [ 707.702106][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 707.708578][ T9942] [ 707.710959][ T9942] Uninit was stored to memory at: [ 707.716278][ T9942] __get_compat_msghdr+0x514/0x750 [ 707.721523][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 707.726608][ T9942] ___sys_recvmsg+0x19d/0x890 [ 707.731418][ T9942] do_recvmmsg+0x682/0x1180 [ 707.736145][ T9942] __sys_recvmmsg+0x113/0x450 [ 707.740949][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 707.747388][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 707.752727][ T9942] do_fast_syscall_32+0x33/0x70 [ 707.757703][ T9942] do_SYSENTER_32+0x1b/0x20 [ 707.762418][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 707.768900][ T9942] [ 707.771251][ T9942] Uninit was stored to memory at: [ 707.776582][ T9942] __get_compat_msghdr+0x514/0x750 [ 707.781815][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 707.786888][ T9942] ___sys_recvmsg+0x19d/0x890 [ 707.791683][ T9942] do_recvmmsg+0x682/0x1180 [ 707.796403][ T9942] __sys_recvmmsg+0x113/0x450 [ 707.801214][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 707.807734][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 707.813068][ T9942] do_fast_syscall_32+0x33/0x70 [ 707.818035][ T9942] do_SYSENTER_32+0x1b/0x20 [ 707.822745][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 707.829242][ T9942] [ 707.831606][ T9942] Uninit was stored to memory at: [ 707.837014][ T9942] __get_compat_msghdr+0x514/0x750 [ 707.842335][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 707.847303][ T9942] ___sys_recvmsg+0x19d/0x890 [ 707.852193][ T9942] do_recvmmsg+0x682/0x1180 [ 707.856827][ T9942] __sys_recvmmsg+0x113/0x450 [ 707.861615][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 707.868167][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 707.873552][ T9942] do_fast_syscall_32+0x33/0x70 [ 707.878532][ T9942] do_SYSENTER_32+0x1b/0x20 [ 707.883255][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 707.889718][ T9942] [ 707.892226][ T9942] Local variable msg_sys created at: [ 707.897598][ T9942] do_recvmmsg+0x5c/0x1180 [ 707.902270][ T9942] __sys_recvmmsg+0x113/0x450 [ 708.171502][ T9942] not chained 160000 origins [ 708.176289][ T9942] CPU: 0 PID: 9942 Comm: syz-executor.1 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 708.186495][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 708.196658][ T9942] Call Trace: [ 708.200012][ T9942] [ 708.203017][ T9942] dump_stack_lvl+0x1c8/0x256 [ 708.207873][ T9942] dump_stack+0x1a/0x1c [ 708.212178][ T9942] kmsan_internal_chain_origin+0x78/0x120 [ 708.218052][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 708.224460][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 708.230418][ T9942] ? ____sys_recvmsg+0x5c1/0x810 [ 708.235486][ T9942] ? __get_compat_msghdr+0x5b/0x750 [ 708.240807][ T9942] ? get_compat_msghdr+0x8c/0x1c0 [ 708.245961][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 708.251918][ T9942] ? __get_compat_msghdr+0x5b/0x750 [ 708.257249][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 708.263215][ T9942] ? should_fail+0x3f/0x810 [ 708.267861][ T9942] ? __stack_depot_save+0x21/0x4b0 [ 708.273117][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 708.279515][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 708.285474][ T9942] __msan_chain_origin+0xbd/0x140 [ 708.290641][ T9942] __get_compat_msghdr+0x514/0x750 [ 708.295914][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 708.300893][ T9942] ? ___sys_recvmsg+0xa9/0x890 [ 708.305785][ T9942] ? do_recvmmsg+0x682/0x1180 [ 708.310592][ T9942] ___sys_recvmsg+0x19d/0x890 [ 708.315403][ T9942] ? do_recvmmsg+0x6e4/0x1180 [ 708.320225][ T9942] ? __stack_depot_save+0x21/0x4b0 [ 708.325488][ T9942] ? kmsan_internal_check_memory+0x94/0x530 [ 708.331541][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 708.337513][ T9942] do_recvmmsg+0x682/0x1180 [ 708.342167][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 708.348572][ T9942] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 708.355148][ T9942] __sys_recvmmsg+0x113/0x450 [ 708.359969][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 708.366365][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 708.371613][ T9942] ? exit_to_user_mode_prepare+0x119/0x220 [ 708.377566][ T9942] do_fast_syscall_32+0x33/0x70 [ 708.382554][ T9942] do_SYSENTER_32+0x1b/0x20 [ 708.387198][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 708.393678][ T9942] RIP: 0023:0xf7f29549 [ 708.397840][ T9942] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 708.417608][ T9942] RSP: 002b:00000000f7f035cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 708.426164][ T9942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 708.434252][ T9942] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 708.442329][ T9942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.450402][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.458475][ T9942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.466572][ T9942] [ 708.475173][ T9942] Uninit was stored to memory at: [ 708.480384][ T9942] __get_compat_msghdr+0x514/0x750 [ 708.486344][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 708.491320][ T9942] ___sys_recvmsg+0x19d/0x890 [ 708.496204][ T9942] do_recvmmsg+0x682/0x1180 [ 708.500825][ T9942] __sys_recvmmsg+0x113/0x450 [ 708.505710][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 708.512179][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 708.517416][ T9942] do_fast_syscall_32+0x33/0x70 [ 708.522476][ T9942] do_SYSENTER_32+0x1b/0x20 [ 708.527098][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 708.533724][ T9942] [ 708.536110][ T9942] Uninit was stored to memory at: [ 708.541297][ T9942] __get_compat_msghdr+0x514/0x750 [ 708.546666][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 708.551638][ T9942] ___sys_recvmsg+0x19d/0x890 [ 708.556577][ T9942] do_recvmmsg+0x682/0x1180 [ 708.561206][ T9942] __sys_recvmmsg+0x113/0x450 [ 708.566128][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 708.572587][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 708.577832][ T9942] do_fast_syscall_32+0x33/0x70 [ 708.582925][ T9942] do_SYSENTER_32+0x1b/0x20 [ 708.587553][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 708.594161][ T9942] [ 708.596542][ T9942] Uninit was stored to memory at: [ 708.601729][ T9942] __get_compat_msghdr+0x514/0x750 [ 708.607111][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 708.612279][ T9942] ___sys_recvmsg+0x19d/0x890 [ 708.617083][ T9942] do_recvmmsg+0x682/0x1180 [ 708.621710][ T9942] __sys_recvmmsg+0x113/0x450 [ 708.626646][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 708.633119][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 708.638365][ T9942] do_fast_syscall_32+0x33/0x70 [ 708.643466][ T9942] do_SYSENTER_32+0x1b/0x20 [ 708.648099][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 708.654721][ T9942] [ 708.657107][ T9942] Uninit was stored to memory at: [ 708.662401][ T9942] __get_compat_msghdr+0x514/0x750 [ 708.667640][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 708.672754][ T9942] ___sys_recvmsg+0x19d/0x890 [ 708.677552][ T9942] do_recvmmsg+0x682/0x1180 [ 708.682254][ T9942] __sys_recvmmsg+0x113/0x450 [ 708.687058][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 708.693579][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 708.698833][ T9942] do_fast_syscall_32+0x33/0x70 [ 708.703975][ T9942] do_SYSENTER_32+0x1b/0x20 [ 708.708605][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 708.715213][ T9942] [ 708.717599][ T9942] Uninit was stored to memory at: [ 708.722912][ T9942] __get_compat_msghdr+0x514/0x750 [ 708.728159][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 708.733264][ T9942] ___sys_recvmsg+0x19d/0x890 [ 708.738069][ T9942] do_recvmmsg+0x682/0x1180 [ 708.742775][ T9942] __sys_recvmmsg+0x113/0x450 [ 708.747572][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 708.754091][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 708.759862][ T9942] do_fast_syscall_32+0x33/0x70 [ 708.764973][ T9942] do_SYSENTER_32+0x1b/0x20 [ 708.769598][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 708.776215][ T9942] [ 708.778599][ T9942] Uninit was stored to memory at: [ 708.783938][ T9942] __get_compat_msghdr+0x514/0x750 [ 708.789176][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 708.794295][ T9942] ___sys_recvmsg+0x19d/0x890 [ 708.799112][ T9942] do_recvmmsg+0x682/0x1180 [ 708.803870][ T9942] __sys_recvmmsg+0x113/0x450 [ 708.808677][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 708.815204][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 708.820455][ T9942] do_fast_syscall_32+0x33/0x70 [ 708.825570][ T9942] do_SYSENTER_32+0x1b/0x20 [ 708.830195][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 708.836841][ T9942] [ 708.839230][ T9942] Uninit was stored to memory at: [ 708.844553][ T9942] __get_compat_msghdr+0x514/0x750 [ 708.849790][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 708.854946][ T9942] ___sys_recvmsg+0x19d/0x890 [ 708.859806][ T9942] do_recvmmsg+0x682/0x1180 [ 708.864577][ T9942] __sys_recvmmsg+0x113/0x450 [ 708.869381][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 708.875908][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 708.881158][ T9942] do_fast_syscall_32+0x33/0x70 [ 708.886280][ T9942] do_SYSENTER_32+0x1b/0x20 [ 708.890919][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 708.897528][ T9942] [ 708.899911][ T9942] Local variable msg_sys created at: [ 708.905415][ T9942] do_recvmmsg+0x5c/0x1180 [ 708.909953][ T9942] __sys_recvmmsg+0x113/0x450 [ 709.181553][ T9942] not chained 170000 origins [ 709.186386][ T9942] CPU: 0 PID: 9942 Comm: syz-executor.1 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 709.196590][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 709.206749][ T9942] Call Trace: [ 709.210125][ T9942] [ 709.213129][ T9942] dump_stack_lvl+0x1c8/0x256 [ 709.217999][ T9942] dump_stack+0x1a/0x1c [ 709.222316][ T9942] kmsan_internal_chain_origin+0x78/0x120 [ 709.228188][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 709.234594][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 709.240557][ T9942] ? ____sys_recvmsg+0x5c1/0x810 [ 709.245635][ T9942] ? __get_compat_msghdr+0x5b/0x750 [ 709.250966][ T9942] ? get_compat_msghdr+0x8c/0x1c0 [ 709.256115][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 709.262079][ T9942] ? __get_compat_msghdr+0x5b/0x750 [ 709.267425][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 709.273652][ T9942] ? should_fail+0x3f/0x810 [ 709.278328][ T9942] ? __stack_depot_save+0x21/0x4b0 [ 709.283589][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 709.289986][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 709.295947][ T9942] __msan_chain_origin+0xbd/0x140 [ 709.301110][ T9942] __get_compat_msghdr+0x514/0x750 [ 709.306382][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 709.311364][ T9942] ? ___sys_recvmsg+0xa9/0x890 [ 709.316250][ T9942] ? do_recvmmsg+0x682/0x1180 [ 709.321060][ T9942] ___sys_recvmsg+0x19d/0x890 [ 709.325862][ T9942] ? do_recvmmsg+0x6e4/0x1180 [ 709.330678][ T9942] ? __stack_depot_save+0x21/0x4b0 [ 709.335935][ T9942] ? kmsan_internal_check_memory+0x94/0x530 [ 709.341982][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 709.347953][ T9942] do_recvmmsg+0x682/0x1180 [ 709.352607][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 709.359010][ T9942] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 709.365581][ T9942] __sys_recvmmsg+0x113/0x450 [ 709.370398][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 709.376799][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 709.382044][ T9942] ? exit_to_user_mode_prepare+0x119/0x220 [ 709.387992][ T9942] do_fast_syscall_32+0x33/0x70 [ 709.392971][ T9942] do_SYSENTER_32+0x1b/0x20 [ 709.397595][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 709.404064][ T9942] RIP: 0023:0xf7f29549 [ 709.408237][ T9942] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 709.428094][ T9942] RSP: 002b:00000000f7f035cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 709.436642][ T9942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 709.444725][ T9942] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 709.452805][ T9942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 709.460884][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.468955][ T9942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 709.477049][ T9942] [ 709.484280][ T9942] Uninit was stored to memory at: [ 709.489489][ T9942] __get_compat_msghdr+0x514/0x750 [ 709.495189][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 709.500177][ T9942] ___sys_recvmsg+0x19d/0x890 [ 709.505850][ T9942] do_recvmmsg+0x682/0x1180 [ 709.510487][ T9942] __sys_recvmmsg+0x113/0x450 [ 709.515419][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 709.521812][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 709.527197][ T9942] do_fast_syscall_32+0x33/0x70 [ 709.532252][ T9942] do_SYSENTER_32+0x1b/0x20 [ 709.536880][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 709.543483][ T9942] [ 709.545872][ T9942] Uninit was stored to memory at: [ 709.551072][ T9942] __get_compat_msghdr+0x514/0x750 [ 709.556386][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 709.561367][ T9942] ___sys_recvmsg+0x19d/0x890 [ 709.566386][ T9942] do_recvmmsg+0x682/0x1180 [ 709.571010][ T9942] __sys_recvmmsg+0x113/0x450 [ 709.575941][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 709.582405][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 709.587650][ T9942] do_fast_syscall_32+0x33/0x70 [ 709.592745][ T9942] do_SYSENTER_32+0x1b/0x20 [ 709.597453][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 709.603996][ T9942] [ 709.606381][ T9942] Uninit was stored to memory at: [ 709.611565][ T9942] __get_compat_msghdr+0x514/0x750 [ 709.616930][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 709.621909][ T9942] ___sys_recvmsg+0x19d/0x890 [ 709.626835][ T9942] do_recvmmsg+0x682/0x1180 [ 709.631462][ T9942] __sys_recvmmsg+0x113/0x450 [ 709.636404][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 709.642863][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 709.648106][ T9942] do_fast_syscall_32+0x33/0x70 [ 709.653231][ T9942] do_SYSENTER_32+0x1b/0x20 [ 709.657863][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 709.664420][ T9942] [ 709.666804][ T9942] Uninit was stored to memory at: [ 709.672113][ T9942] __get_compat_msghdr+0x514/0x750 [ 709.677352][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 709.682457][ T9942] ___sys_recvmsg+0x19d/0x890 [ 709.687260][ T9942] do_recvmmsg+0x682/0x1180 [ 709.691887][ T9942] __sys_recvmmsg+0x113/0x450 [ 709.696822][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 709.703343][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 709.708588][ T9942] do_fast_syscall_32+0x33/0x70 [ 709.713687][ T9942] do_SYSENTER_32+0x1b/0x20 [ 709.718315][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 709.724882][ T9942] [ 709.727273][ T9942] Uninit was stored to memory at: [ 709.732581][ T9942] __get_compat_msghdr+0x514/0x750 [ 709.738160][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 709.743213][ T9942] ___sys_recvmsg+0x19d/0x890 [ 709.748037][ T9942] do_recvmmsg+0x682/0x1180 [ 709.752796][ T9942] __sys_recvmmsg+0x113/0x450 [ 709.757599][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 709.764116][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 709.769363][ T9942] do_fast_syscall_32+0x33/0x70 [ 709.774491][ T9942] do_SYSENTER_32+0x1b/0x20 [ 709.779117][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 709.785718][ T9942] [ 709.788102][ T9942] Uninit was stored to memory at: [ 709.793428][ T9942] __get_compat_msghdr+0x514/0x750 [ 709.798666][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 709.803764][ T9942] ___sys_recvmsg+0x19d/0x890 [ 709.808566][ T9942] do_recvmmsg+0x682/0x1180 [ 709.813273][ T9942] __sys_recvmmsg+0x113/0x450 [ 709.818085][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 709.824599][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 709.829848][ T9942] do_fast_syscall_32+0x33/0x70 [ 709.834961][ T9942] do_SYSENTER_32+0x1b/0x20 [ 709.839593][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 709.846186][ T9942] [ 709.848566][ T9942] Uninit was stored to memory at: [ 709.853826][ T9942] __get_compat_msghdr+0x514/0x750 [ 709.859067][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 709.864169][ T9942] ___sys_recvmsg+0x19d/0x890 [ 709.868978][ T9942] do_recvmmsg+0x682/0x1180 [ 709.873738][ T9942] __sys_recvmmsg+0x113/0x450 [ 709.878542][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 709.885071][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 709.890343][ T9942] do_fast_syscall_32+0x33/0x70 [ 709.895429][ T9942] do_SYSENTER_32+0x1b/0x20 [ 709.900066][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 709.906639][ T9942] [ 709.909102][ T9942] Local variable msg_sys created at: [ 709.914559][ T9942] do_recvmmsg+0x5c/0x1180 [ 709.919102][ T9942] __sys_recvmmsg+0x113/0x450 [ 710.203008][ T9942] not chained 180000 origins [ 710.207701][ T9942] CPU: 1 PID: 9942 Comm: syz-executor.1 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 710.217854][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 710.227968][ T9942] Call Trace: [ 710.231285][ T9942] [ 710.234252][ T9942] dump_stack_lvl+0x1c8/0x256 [ 710.239035][ T9942] dump_stack+0x1a/0x1c [ 710.243279][ T9942] kmsan_internal_chain_origin+0x78/0x120 [ 710.249110][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 710.255488][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 710.261459][ T9942] ? ____sys_recvmsg+0x5c1/0x810 [ 710.266535][ T9942] ? __get_compat_msghdr+0x5b/0x750 [ 710.271847][ T9942] ? get_compat_msghdr+0x8c/0x1c0 [ 710.276945][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 710.282837][ T9942] ? __get_compat_msghdr+0x5b/0x750 [ 710.288118][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 710.294046][ T9942] ? should_fail+0x3f/0x810 [ 710.298644][ T9942] ? __stack_depot_save+0x21/0x4b0 [ 710.303872][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 710.310281][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 710.316224][ T9942] __msan_chain_origin+0xbd/0x140 [ 710.321340][ T9942] __get_compat_msghdr+0x514/0x750 [ 710.326547][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 710.331467][ T9942] ? ___sys_recvmsg+0xa9/0x890 [ 710.336735][ T9942] ? do_recvmmsg+0x682/0x1180 [ 710.341499][ T9942] ___sys_recvmsg+0x19d/0x890 [ 710.346242][ T9942] ? do_recvmmsg+0x6e4/0x1180 [ 710.350997][ T9942] ? __stack_depot_save+0x21/0x4b0 [ 710.356215][ T9942] ? kmsan_internal_check_memory+0x94/0x530 [ 710.362250][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 710.368173][ T9942] do_recvmmsg+0x682/0x1180 [ 710.372832][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 710.379163][ T9942] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 710.385670][ T9942] __sys_recvmmsg+0x113/0x450 [ 710.390422][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 710.396750][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 710.401931][ T9942] ? exit_to_user_mode_prepare+0x119/0x220 [ 710.407868][ T9942] do_fast_syscall_32+0x33/0x70 [ 710.412857][ T9942] do_SYSENTER_32+0x1b/0x20 [ 710.417467][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 710.423872][ T9942] RIP: 0023:0xf7f29549 [ 710.427983][ T9942] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 710.447675][ T9942] RSP: 002b:00000000f7f035cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 710.456174][ T9942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 710.464265][ T9942] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 710.472310][ T9942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 710.480366][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.488389][ T9942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 710.496423][ T9942] [ 710.503889][ T9942] Uninit was stored to memory at: [ 710.509102][ T9942] __get_compat_msghdr+0x514/0x750 [ 710.514876][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 710.519857][ T9942] ___sys_recvmsg+0x19d/0x890 [ 710.524765][ T9942] do_recvmmsg+0x682/0x1180 [ 710.529386][ T9942] __sys_recvmmsg+0x113/0x450 [ 710.534295][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 710.540693][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 710.546062][ T9942] do_fast_syscall_32+0x33/0x70 [ 710.551044][ T9942] do_SYSENTER_32+0x1b/0x20 [ 710.555761][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 710.562340][ T9942] [ 710.564726][ T9942] Uninit was stored to memory at: [ 710.569914][ T9942] __get_compat_msghdr+0x514/0x750 [ 710.575255][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 710.580237][ T9942] ___sys_recvmsg+0x19d/0x890 [ 710.585140][ T9942] do_recvmmsg+0x682/0x1180 [ 710.589773][ T9942] __sys_recvmmsg+0x113/0x450 [ 710.594668][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 710.601052][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 710.606407][ T9942] do_fast_syscall_32+0x33/0x70 [ 710.611385][ T9942] do_SYSENTER_32+0x1b/0x20 [ 710.616092][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 710.622665][ T9942] [ 710.625047][ T9942] Uninit was stored to memory at: [ 710.630234][ T9942] __get_compat_msghdr+0x514/0x750 [ 710.635562][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 710.640535][ T9942] ___sys_recvmsg+0x19d/0x890 [ 710.645436][ T9942] do_recvmmsg+0x682/0x1180 [ 710.650055][ T9942] __sys_recvmmsg+0x113/0x450 [ 710.654955][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 710.661337][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 710.666680][ T9942] do_fast_syscall_32+0x33/0x70 [ 710.671661][ T9942] do_SYSENTER_32+0x1b/0x20 [ 710.676382][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 710.682933][ T9942] [ 710.685313][ T9942] Uninit was stored to memory at: [ 710.690493][ T9942] __get_compat_msghdr+0x514/0x750 [ 710.695834][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 710.700813][ T9942] ___sys_recvmsg+0x19d/0x890 [ 710.705712][ T9942] do_recvmmsg+0x682/0x1180 [ 710.710341][ T9942] __sys_recvmmsg+0x113/0x450 [ 710.715244][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 710.721630][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 710.726970][ T9942] do_fast_syscall_32+0x33/0x70 [ 710.731945][ T9942] do_SYSENTER_32+0x1b/0x20 [ 710.736724][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 710.743299][ T9942] [ 710.745683][ T9942] Uninit was stored to memory at: [ 710.750877][ T9942] __get_compat_msghdr+0x514/0x750 [ 710.756217][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 710.761237][ T9942] ___sys_recvmsg+0x19d/0x890 [ 710.766143][ T9942] do_recvmmsg+0x682/0x1180 [ 710.770802][ T9942] __sys_recvmmsg+0x113/0x450 [ 710.775724][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 710.782316][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 710.787564][ T9942] do_fast_syscall_32+0x33/0x70 [ 710.792651][ T9942] do_SYSENTER_32+0x1b/0x20 [ 710.797369][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 710.803941][ T9942] [ 710.806337][ T9942] Uninit was stored to memory at: [ 710.811524][ T9942] __get_compat_msghdr+0x514/0x750 [ 710.816865][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 710.821844][ T9942] ___sys_recvmsg+0x19d/0x890 [ 710.826731][ T9942] do_recvmmsg+0x682/0x1180 [ 710.831357][ T9942] __sys_recvmmsg+0x113/0x450 [ 710.836267][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 710.842740][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 710.847983][ T9942] do_fast_syscall_32+0x33/0x70 [ 710.853068][ T9942] do_SYSENTER_32+0x1b/0x20 [ 710.857704][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 710.864281][ T9942] [ 710.866669][ T9942] Uninit was stored to memory at: [ 710.871862][ T9942] __get_compat_msghdr+0x514/0x750 [ 710.877198][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 710.882268][ T9942] ___sys_recvmsg+0x19d/0x890 [ 710.887070][ T9942] do_recvmmsg+0x682/0x1180 [ 710.891720][ T9942] __sys_recvmmsg+0x113/0x450 [ 710.896618][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 710.903088][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 710.909026][ T9942] do_fast_syscall_32+0x33/0x70 [ 710.914159][ T9942] do_SYSENTER_32+0x1b/0x20 [ 710.918796][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 710.925423][ T9942] [ 710.927819][ T9942] Local variable msg_sys created at: [ 710.933330][ T9942] do_recvmmsg+0x5c/0x1180 [ 710.937953][ T9942] __sys_recvmmsg+0x113/0x450 [ 711.156118][ T9942] not chained 190000 origins [ 711.160809][ T9942] CPU: 1 PID: 9942 Comm: syz-executor.1 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 711.170952][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 711.181083][ T9942] Call Trace: [ 711.184393][ T9942] [ 711.187373][ T9942] dump_stack_lvl+0x1c8/0x256 [ 711.192243][ T9942] dump_stack+0x1a/0x1c [ 711.196492][ T9942] kmsan_internal_chain_origin+0x78/0x120 [ 711.202324][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 711.208717][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 711.214694][ T9942] ? ____sys_recvmsg+0x5c1/0x810 [ 711.219746][ T9942] ? __get_compat_msghdr+0x5b/0x750 [ 711.225015][ T9942] ? get_compat_msghdr+0x8c/0x1c0 [ 711.230102][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 711.235998][ T9942] ? __get_compat_msghdr+0x5b/0x750 [ 711.241265][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 711.247167][ T9942] ? should_fail+0x3f/0x810 [ 711.251747][ T9942] ? __stack_depot_save+0x21/0x4b0 [ 711.256963][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 711.263369][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 711.269408][ T9942] __msan_chain_origin+0xbd/0x140 [ 711.274507][ T9942] __get_compat_msghdr+0x514/0x750 [ 711.279700][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 711.284634][ T9942] ? ___sys_recvmsg+0xa9/0x890 [ 711.289480][ T9942] ? do_recvmmsg+0x682/0x1180 [ 711.294299][ T9942] ___sys_recvmsg+0x19d/0x890 [ 711.299150][ T9942] ? do_recvmmsg+0x6e4/0x1180 [ 711.303951][ T9942] ? __stack_depot_save+0x21/0x4b0 [ 711.309213][ T9942] ? kmsan_internal_check_memory+0x94/0x530 [ 711.315207][ T9942] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 711.321193][ T9942] do_recvmmsg+0x682/0x1180 [ 711.325788][ T9942] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 711.332116][ T9942] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 711.338626][ T9942] __sys_recvmmsg+0x113/0x450 [ 711.343380][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 711.349716][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 711.354924][ T9942] ? exit_to_user_mode_prepare+0x119/0x220 [ 711.360875][ T9942] do_fast_syscall_32+0x33/0x70 [ 711.365862][ T9942] do_SYSENTER_32+0x1b/0x20 [ 711.370470][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 711.376872][ T9942] RIP: 0023:0xf7f29549 [ 711.380986][ T9942] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 711.400710][ T9942] RSP: 002b:00000000f7f035cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 711.409225][ T9942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 711.417313][ T9942] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 711.425340][ T9942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 711.433361][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.441380][ T9942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 711.449415][ T9942] [ 711.456599][ T9942] Uninit was stored to memory at: [ 711.461813][ T9942] __get_compat_msghdr+0x514/0x750 [ 711.467675][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 711.472746][ T9942] ___sys_recvmsg+0x19d/0x890 [ 711.477554][ T9942] do_recvmmsg+0x682/0x1180 [ 711.482313][ T9942] __sys_recvmmsg+0x113/0x450 [ 711.487113][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 711.493625][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 711.498878][ T9942] do_fast_syscall_32+0x33/0x70 [ 711.503980][ T9942] do_SYSENTER_32+0x1b/0x20 [ 711.508593][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 711.515183][ T9942] [ 711.517553][ T9942] Uninit was stored to memory at: [ 711.522873][ T9942] __get_compat_msghdr+0x514/0x750 [ 711.528110][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 711.533244][ T9942] ___sys_recvmsg+0x19d/0x890 [ 711.538034][ T9942] do_recvmmsg+0x682/0x1180 [ 711.542779][ T9942] __sys_recvmmsg+0x113/0x450 [ 711.547583][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 711.554125][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 711.559379][ T9942] do_fast_syscall_32+0x33/0x70 [ 711.564483][ T9942] do_SYSENTER_32+0x1b/0x20 [ 711.569096][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 711.575635][ T9942] [ 711.578004][ T9942] Uninit was stored to memory at: [ 711.583322][ T9942] __get_compat_msghdr+0x514/0x750 [ 711.588561][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 711.593697][ T9942] ___sys_recvmsg+0x19d/0x890 [ 711.598504][ T9942] do_recvmmsg+0x682/0x1180 [ 711.603226][ T9942] __sys_recvmmsg+0x113/0x450 [ 711.608054][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 711.614618][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 711.619852][ T9942] do_fast_syscall_32+0x33/0x70 [ 711.624906][ T9942] do_SYSENTER_32+0x1b/0x20 [ 711.629538][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 711.636078][ T9942] [ 711.638448][ T9942] Uninit was stored to memory at: [ 711.643765][ T9942] __get_compat_msghdr+0x514/0x750 [ 711.649025][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 711.654170][ T9942] ___sys_recvmsg+0x19d/0x890 [ 711.658958][ T9942] do_recvmmsg+0x682/0x1180 [ 711.663659][ T9942] __sys_recvmmsg+0x113/0x450 [ 711.668449][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 711.674947][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 711.680248][ T9942] do_fast_syscall_32+0x33/0x70 [ 711.685326][ T9942] do_SYSENTER_32+0x1b/0x20 [ 711.689955][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 711.696501][ T9942] [ 711.698888][ T9942] Uninit was stored to memory at: [ 711.704163][ T9942] __get_compat_msghdr+0x514/0x750 [ 711.709382][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 711.714471][ T9942] ___sys_recvmsg+0x19d/0x890 [ 711.719270][ T9942] do_recvmmsg+0x682/0x1180 [ 711.723951][ T9942] __sys_recvmmsg+0x113/0x450 [ 711.728694][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 711.735189][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 711.740531][ T9942] do_fast_syscall_32+0x33/0x70 [ 711.745606][ T9942] do_SYSENTER_32+0x1b/0x20 [ 711.750231][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 711.756814][ T9942] [ 711.759194][ T9942] Uninit was stored to memory at: [ 711.764501][ T9942] __get_compat_msghdr+0x514/0x750 [ 711.769746][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 711.774848][ T9942] ___sys_recvmsg+0x19d/0x890 [ 711.779638][ T9942] do_recvmmsg+0x682/0x1180 [ 711.784407][ T9942] __sys_recvmmsg+0x113/0x450 [ 711.789210][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 711.795718][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 711.800970][ T9942] do_fast_syscall_32+0x33/0x70 [ 711.806086][ T9942] do_SYSENTER_32+0x1b/0x20 [ 711.810713][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 711.817272][ T9942] [ 711.819646][ T9942] Uninit was stored to memory at: [ 711.824954][ T9942] __get_compat_msghdr+0x514/0x750 [ 711.830183][ T9942] get_compat_msghdr+0x8c/0x1c0 [ 711.835281][ T9942] ___sys_recvmsg+0x19d/0x890 [ 711.840090][ T9942] do_recvmmsg+0x682/0x1180 [ 711.844885][ T9942] __sys_recvmmsg+0x113/0x450 [ 711.849675][ T9942] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 711.856170][ T9942] __do_fast_syscall_32+0xa2/0x100 [ 711.861442][ T9942] do_fast_syscall_32+0x33/0x70 [ 711.866518][ T9942] do_SYSENTER_32+0x1b/0x20 [ 711.871136][ T9942] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 711.877710][ T9942] [ 711.880108][ T9942] Local variable msg_sys created at: [ 711.885579][ T9942] do_recvmmsg+0x5c/0x1180 [ 711.890124][ T9942] __sys_recvmmsg+0x113/0x450 14:59:15 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_pwait2(r0, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000140), 0x0, 0x0) 14:59:15 executing program 0: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) 14:59:15 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x210a00, 0x0) 14:59:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000000010200f3000040"]) 14:59:15 executing program 5: msgget(0x1, 0x782) 14:59:15 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)={[{@statfs_quantum={'statfs_quantum', 0x2c}}]}) [ 712.203353][ T9986] gfs2: Bad value for 'statfs_quantum' 14:59:15 executing program 5: getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/255, 0xff) 14:59:15 executing program 4: r0 = inotify_init() r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 14:59:15 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)={[{@statfs_quantum={'statfs_quantum', 0x2c}}]}) 14:59:15 executing program 5: stat(&(0x7f0000000140)='.\x00', &(0x7f0000000180)) 14:59:15 executing program 0: semget(0x1, 0x2, 0x1) 14:59:15 executing program 1: msgsnd(0x0, &(0x7f0000000140)={0x0, "ba9cc2a3a3cef543ca36910f7d7788186c7a1a95f82c34cc9dfa4bd93280770debe990bacbd5d7e3e25e233ca4709afb971e00e15f3cc277c9bf1271fe71867905bb42ecc182d24a11e66ef84c57f349b5449ca11c336ef10e7a92393a41726f5c366b9d2b9c0e1bf1fd9eb4371d169517bd69b232bdbea82b39a0f3d7ed683c86"}, 0x89, 0x0) 14:59:15 executing program 3: mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) 14:59:15 executing program 4: pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x4}, 0x0, 0x0, 0x0) [ 712.938506][T10004] gfs2: Bad value for 'statfs_quantum' 14:59:16 executing program 0: r0 = semget(0x1, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000140)=""/231) 14:59:16 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) 14:59:16 executing program 1: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000000)=""/121) 14:59:16 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)={[{@statfs_quantum={'statfs_quantum', 0x2c}}]}) 14:59:16 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) 14:59:16 executing program 4: r0 = getpgrp(0x0) sched_getaffinity(r0, 0x0, 0x0) 14:59:16 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x345000, 0x0) 14:59:16 executing program 1: r0 = msgget(0x3, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1, "dfca904807698cfa9bec3782b114f11e95e64f383d735348017bf6f805d2c981ad8bc225d9966b644037004fb248e94b43ff8dc71ed2c79db44fcd70688e5a45554d9527df92da3d617fed7a5918208371272696d11f9528f681720c4f2101bcf250db460c85c01d89ed9a16847ce03d5264c835a73e67bb468360db5fc0fca63e"}, 0x89, 0x0) 14:59:16 executing program 5: r0 = getpgrp(0x0) ptrace(0xffffffffffffffff, r0) [ 713.590514][T10020] gfs2: Bad value for 'statfs_quantum' 14:59:16 executing program 3: epoll_wait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) 14:59:16 executing program 2: syz_mount_image$gfs2(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)={[{@statfs_quantum={'statfs_quantum', 0x2c}}]}) 14:59:16 executing program 4: mq_open(&(0x7f0000000080)=':-\x00', 0x2, 0x0, 0x0) 14:59:16 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 14:59:17 executing program 1: mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 14:59:17 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000001140), 0x940, 0x0) 14:59:17 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x52000, 0x0) 14:59:17 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/120, 0x78) 14:59:17 executing program 2: syz_mount_image$gfs2(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)={[{@statfs_quantum={'statfs_quantum', 0x2c}}]}) 14:59:17 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/239) 14:59:17 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80640, 0x0) 14:59:17 executing program 5: futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}) 14:59:17 executing program 4: r0 = eventfd(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000016c0)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 14:59:17 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_gettime(r0, 0x0) 14:59:17 executing program 0: mount$fuse(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 14:59:17 executing program 2: syz_mount_image$gfs2(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)={[{@statfs_quantum={'statfs_quantum', 0x2c}}]}) 14:59:18 executing program 1: mq_open(&(0x7f0000000200)='./cgroup.net/syz0\x00', 0x9b2f57dcb962271f, 0x0, 0x0) 14:59:18 executing program 5: sysinfo(&(0x7f0000000000)=""/19) 14:59:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev, 0x2}, 0x1c) 14:59:18 executing program 0: syz_open_procfs(0x0, &(0x7f0000020080)='comm\x00') 14:59:18 executing program 4: lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x54f115746ba246f4) 14:59:18 executing program 1: r0 = semget(0x1, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) 14:59:18 executing program 5: sysinfo(&(0x7f0000000000)=""/19) [ 715.580190][T10068] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:59:18 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)={[{@statfs_quantum={'statfs_quantum', 0x2c}}]}) 14:59:18 executing program 3: symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00') 14:59:18 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 14:59:19 executing program 4: sched_setscheduler(0x0, 0x0, &(0x7f0000003380)=0x6) 14:59:19 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0xc16ddf4b1b1b2f4e) 14:59:19 executing program 5: sysinfo(&(0x7f0000000000)=""/19) 14:59:19 executing program 3: socket(0x1, 0x0, 0xc837) 14:59:19 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x1}, 0x18) 14:59:19 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)={[{@statfs_quantum={'statfs_quantum', 0x2c}}]}) 14:59:19 executing program 0: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @random="c952a1070b3e", @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @loopback, @local}, {{0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ecca72", 0x0, "ee29b7"}}}}}}, 0x0) 14:59:19 executing program 5: sysinfo(&(0x7f0000000000)=""/19) 14:59:19 executing program 1: r0 = socket(0xa, 0x6, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) 14:59:19 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 14:59:19 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 14:59:19 executing program 0: r0 = msgget(0x1, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/172) 14:59:20 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)={[{@statfs_quantum={'statfs_quantum', 0x2c}}]}) 14:59:20 executing program 1: r0 = socket(0x18, 0x800, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 14:59:20 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000540)={&(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/4085, 0x1000}, {&(0x7f0000000180)=""/128, 0x80}, {&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000001640)=""/217, 0xffffff8b}], 0x4, &(0x7f0000000440)=""/253, 0xfd}, 0x0) 14:59:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x60, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x60}}, 0x0) 14:59:20 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x20) 14:59:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x8, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:20 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@statfs_quantum={'statfs_quantum', 0x2c}}]}) 14:59:20 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) write$cgroup_freezer_state(r0, 0x0, 0x0) 14:59:20 executing program 1: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8943, &(0x7f0000000000)={'vxcan1\x00'}) 14:59:20 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x6, 0x4) 14:59:20 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 14:59:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x25, r1, 0x203, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) 14:59:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001580)=ANY=[@ANYBLOB="2c0000000a0637"], 0x2c}}, 0x0) 14:59:21 executing program 1: r0 = socket$inet(0x2, 0x6, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x10}, 0x0) 14:59:21 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@statfs_quantum={'statfs_quantum', 0x2c}}]}) 14:59:21 executing program 0: syz_emit_ethernet(0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038100000086dd60c7a4ac004a2f00fe8000000000000000000000000000aafe"], 0x0) 14:59:21 executing program 3: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x29, &(0x7f0000000000), &(0x7f0000000040)=0x30) 14:59:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xef5334ac37a88a65}, 0x14}}, 0x0) [ 718.401511][T10134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 14:59:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x101}, 0x14}}, 0x0) 14:59:21 executing program 5: syz_emit_ethernet(0x116, &(0x7f0000000040)=ANY=[@ANYBLOB="1fa74a01f213bbbbbbbbbbbb8100000086dd60c7a4ac00dc2f0000000000000000000000ffffac1effffffff"], 0x0) 14:59:21 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@statfs_quantum={'statfs_quantum', 0x2c}}]}) 14:59:21 executing program 0: r0 = socket(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89e2, 0x0) 14:59:21 executing program 3: r0 = socket(0xa, 0x6, 0x0) bind$xdp(r0, 0x0, 0x0) 14:59:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x9, 0x4) 14:59:22 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private}}}}}, 0x0) 14:59:22 executing program 5: r0 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 14:59:22 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) 14:59:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) 14:59:22 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x29, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}}}, 0x0) 14:59:22 executing program 4: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}}}, 0x0) 14:59:22 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000080)="6ab968853ac847398b0e45c6d661e863c1816b4a274c5e2f588c93819dd22347839ff1ff9f7f746212d9af44020c82780869be756ab092005abdebd3cee37bfeaf86a226b37362e0e2c8dad410257fa6bba899050ac9f1682b072735107e4dd0cb6c1322383b5104f7ab8fb24896edd944d2c1db17ee8780d460059323a658b3d5174b2a8e92610f90b4925b2ee53d0ccc8b2ea2884aa8d582f1e7cf8b6e967ce732e2", 0xa3, 0x4, &(0x7f0000000180)={0xa, 0x0, 0x9, @empty, 0x3, 0x4}, 0x20) 14:59:22 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, &(0x7f0000000000)={'vxcan1\x00'}) 14:59:22 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) 14:59:22 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x29, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}}}, 0x0) 14:59:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "e17ad2f759c0a42c"}}]}, 0x30}}, 0x0) 14:59:22 executing program 4: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0xf0ff7f}}, 0x0) 14:59:23 executing program 1: r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002380)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x38, 0x0) 14:59:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x0, 0x4, 0x3f, 0x104}, 0x48) 14:59:23 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) 14:59:23 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x29, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}}}, 0x0) 14:59:23 executing program 0: r0 = socket(0x2, 0x6, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="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", 0x219}], 0x1}, 0x0) 14:59:23 executing program 4: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x9, 0x0, &(0x7f0000000040)) 14:59:23 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x13, 0x0, 0x2b) 14:59:23 executing program 1: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x10d, 0xc0, &(0x7f0000000000), &(0x7f0000000040)=0x30) 14:59:23 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x29, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}}}, 0x0) 14:59:23 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)) 14:59:23 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @rand_addr=0x64010100}}}}}, 0x0) 14:59:23 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000380), 0xc) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) 14:59:24 executing program 5: r0 = socket(0x1e, 0x1, 0x0) getsockname$qrtr(r0, 0x0, 0x0) 14:59:24 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) 14:59:24 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 14:59:24 executing program 4: r0 = socket(0x29, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x0) [ 721.237351][T10201] gfs2: not a GFS2 filesystem 14:59:24 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 14:59:24 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)) 14:59:24 executing program 5: syz_emit_ethernet(0x116, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x3, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[@routing={0x0, 0x12, 0x0, 0x0, 0x0, [@remote, @mcast1, @remote, @loopback, @mcast2, @private1, @ipv4, @private2, @local]}]}}}}}, 0x0) 14:59:24 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 14:59:24 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e0000000100001"], 0xe0}}, 0x0) 14:59:25 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a2, &(0x7f0000000000)={'vxcan1\x00'}) 14:59:25 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x700}}, 0x0) [ 721.980346][T10218] gfs2: not a GFS2 filesystem 14:59:25 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 14:59:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000080005"], 0x1c}}, 0x0) 14:59:25 executing program 2: syz_mount_image$gfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)) 14:59:25 executing program 0: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001000)=ANY=[@ANYRES64]) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r2, 0x4, 0xf6, 0x9, 0x9, 0x8, @private2, @loopback, 0x700, 0x20, 0x2, 0xffff}}) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x541b, &(0x7f0000001080)) [ 722.549956][T10231] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 14:59:25 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {}, 0xff}, 0x18) [ 722.684084][T10234] gfs2: not a GFS2 filesystem 14:59:25 executing program 1: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8922, &(0x7f0000000000)={'vcan0\x00'}) 14:59:25 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 14:59:26 executing program 4: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}}}, 0x0) 14:59:26 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8923, &(0x7f0000000000)={'vxcan0\x00'}) 14:59:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000012c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x28}}, 0x0) 14:59:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1a1189}, 0x0) 14:59:26 executing program 2: syz_emit_ethernet(0x12b, &(0x7f0000000180)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0xfffffffffffffdbb, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[@routing={0x0, 0x12, 0x0, 0x0, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @empty}, @remote, @loopback, @mcast2, @private1, @ipv4={'\x00', '\xff\xff', @local}, @private2, @local]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x13, 0x0, [0x0], "80d36565f20400000067164d995d34f0579a2c"}, {}, {}, {}, {}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 14:59:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000800000014"], 0x28}}, 0x0) 14:59:26 executing program 2: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) 14:59:26 executing program 4: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x10d, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x30) 14:59:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 14:59:26 executing program 0: bpf$BPF_BTF_LOAD(0x2, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x0, 0x1a}, 0x20) 14:59:26 executing program 3: r0 = socket(0x23, 0x5, 0x0) sendmsg$qrtr(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x1c8}, 0x38) [ 723.797564][T10257] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 14:59:26 executing program 2: syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x4c, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[@routing={0x0, 0x0, 0x0, 0x0, 0x4c00}]}}}}}, 0x0) 14:59:27 executing program 1: r0 = socket(0x2, 0x6, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x29, 0x0, 0x0) 14:59:27 executing program 5: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x3, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}}}, 0x0) 14:59:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000010c0)=0x7, 0x4) 14:59:27 executing program 0: bpf$MAP_CREATE(0x18, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 14:59:27 executing program 3: r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 14:59:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, r2, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x18}}, 0x0) 14:59:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000006000000080003"], 0x1c}}, 0x0) 14:59:27 executing program 4: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @random="c952a1070b3e", @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2c, 0x0, @loopback, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ecca72", 0x0, "ee29b7"}}}}}}, 0x0) 14:59:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x0, {0x18}}, 0x14}}, 0x0) 14:59:27 executing program 3: r0 = socket(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89e2, &(0x7f0000000980)={'batadv_slave_0\x00'}) 14:59:27 executing program 0: mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x149030, 0xffffffffffffffff, 0x0) 14:59:28 executing program 2: syz_emit_ethernet(0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038100000086dd60c7a4ac004a0400fe8000000000000000000000000000aafe"], 0x0) 14:59:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r1, 0x203, 0x0, 0x0, {{}, {0x0, 0x2}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) 14:59:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x18}, 0x0) 14:59:28 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 14:59:28 executing program 5: r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 14:59:28 executing program 0: r0 = socket(0x23, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x0) 14:59:28 executing program 2: r0 = socket(0x1, 0x5, 0x0) getpeername$qrtr(r0, 0x0, 0x0) 14:59:28 executing program 1: r0 = socket(0xa, 0x3, 0x3) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 14:59:28 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) 14:59:28 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8922, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 14:59:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x211}, 0x1c}}, 0x0) 14:59:28 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001580)) 14:59:28 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, {[@rr={0x7, 0xb, 0x0, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0x0, [@local, @dev, @loopback, @remote]}]}}}}}) sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e0000000100001"], 0xe0}}, 0x0) 14:59:29 executing program 1: syz_emit_ethernet(0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038100000086dd60c7a4ac004a3a00fe8000000000000000000000000000aafe"], 0x0) 14:59:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000080003"], 0x1c}}, 0x0) 14:59:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x5) 14:59:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, r1, 0x7648b26add2afa2d}, 0x14}}, 0x0) 14:59:29 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) 14:59:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x8000, 0x14}, 0x48) 14:59:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0x38c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "da8b594a508106262d3c21aaabf45a17fceec940d8d56a068b057d0be9eb8881"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4d4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x2d4, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a3788cb29fba962b63568accb312ad4fe02ac22def151219ee7931fa7e1dd9e4"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f48b54c433739325e9ddf5be58e9dd08b4b448067afa645b89679fdde096fe4a"}, @WGPEER_A_FLAGS={0x8}]}, {0x4e4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x470, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "77ad0ede23044c8d2ee5778e014758216ae1ea1cb479f6d8a7277eb71435a8c6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}]}]}]}]}, 0xfffffdef}}, 0x0) 14:59:29 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, 0x0) 14:59:29 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 14:59:30 executing program 1: r0 = socket(0xa, 0x1, 0x0) getsockname$qrtr(r0, 0x0, &(0x7f0000000080)) 14:59:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008"], 0x1c}}, 0x0) 14:59:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, r1, 0x7648b26add2afa2d}, 0x14}}, 0x0) 14:59:30 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) 14:59:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x7, 0x8}, 0x48) 14:59:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x10, 0x0, 0x0, 0x523b}, 0x48) 14:59:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}}, 0x0) 14:59:30 executing program 2: r0 = socket(0x2, 0x5, 0x0) connect$qrtr(r0, 0x0, 0x0) 14:59:30 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010102}}}}}, 0x0) 14:59:30 executing program 0: r0 = socket(0x29, 0x5, 0x0) sendmsg$netlink(r0, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003240)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x0) 14:59:30 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x9, 0x3, &(0x7f0000000640)=@framed={{0x61}}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 14:59:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x3, 0x0, 0x1f}, 0x48) 14:59:31 executing program 2: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x10d, 0xbf, &(0x7f0000000000), &(0x7f0000000040)=0x30) 14:59:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14}, 0x14}, 0x8}, 0x0) 14:59:31 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x2020, 0x0, 0x0) 14:59:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=@raw=[@cb_func, @cb_func], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x8e, &(0x7f00000000c0)=""/142, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:31 executing program 3: r0 = socket(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) 14:59:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x8041) 14:59:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) 14:59:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x10001, 0x4, 0x40}, 0x48) 14:59:31 executing program 5: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x30) 14:59:31 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}}}, 0x0) 14:59:32 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet(0x2, 0x3, 0x77c6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8922, &(0x7f0000000000)={'vxcan1\x00'}) 14:59:32 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) 14:59:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000011"], 0x20}}, 0x0) 14:59:32 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0xfffffffffffffe9f, 0x0, &(0x7f0000000080)={0xa, 0x0, @rand_addr, 0x1001}, 0x25) 14:59:32 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="bf0000000002"], &(0x7f0000000200)=""/230, 0x1a, 0xe6, 0x1}, 0x20) 14:59:32 executing program 0: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @random="c952a1070b3e", @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ecca72", 0x0, "ee29b7"}}}}}}, 0x0) [ 729.318692][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 14:59:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x3, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 14:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0) 14:59:32 executing program 1: r0 = socket(0x23, 0x5, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 14:59:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r1, 0x203, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) 14:59:32 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 14:59:32 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x5, 0x0, 0x3}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 729.800069][T10402] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 14:59:32 executing program 2: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}, 0x0) 14:59:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0x38c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "da8b594a508106262d3c21aaabf45a17fceec940d8d56a068b057d0be9eb8881"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4d4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x2d4, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a3788cb29fba962b63568accb312ad4fe02ac22def151219ee7931fa7e1dd9e4"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f48b54c433739325e9ddf5be58e9dd08b4b448067afa645b89679fdde096fe4a"}, @WGPEER_A_FLAGS={0x8}]}, {0x4e4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x470, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "77ad0ede23044c8d2ee5778e014758216ae1ea1cb479f6d8a7277eb71435a8c6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}]}]}]}]}, 0x33fe0}}, 0x0) 14:59:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0x38c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "da8b594a508106262d3c21aaabf45a17fceec940d8d56a068b057d0be9eb8881"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4d4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x2d4, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a3788cb29fba962b63568accb312ad4fe02ac22def151219ee7931fa7e1dd9e4"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f48b54c433739325e9ddf5be58e9dd08b4b448067afa645b89679fdde096fe4a"}, @WGPEER_A_FLAGS={0x8}]}, {0x4e4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x470, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "77ad0ede23044c8d2ee5778e014758216ae1ea1cb479f6d8a7277eb71435a8c6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}]}]}]}]}, 0x33fe0}}, 0x0) [ 729.985354][T10405] tipc: Enabling of bearer rejected, failed to enable media 14:59:33 executing program 4: r0 = socket(0x23, 0x5, 0x0) connect$qrtr(r0, 0x0, 0xf) 14:59:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x39, 0x3, 0xc000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 14:59:33 executing program 1: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x10d, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x30) 14:59:33 executing program 2: r0 = socket(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a0, &(0x7f0000000980)={'batadv_slave_0\x00'}) 14:59:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000032"], 0x20}}, 0x0) 14:59:33 executing program 4: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x14, 0x0, &(0x7f0000000040)) 14:59:34 executing program 1: r0 = socket(0x25, 0x1, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x845) 14:59:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:59:34 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, 0x0) 14:59:34 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x0, 0x585382797a3a41a7}, 0x10) [ 731.046314][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 14:59:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0903"], 0x24}}, 0x0) 14:59:34 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x7ffffffff000, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 14:59:34 executing program 4: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000040)) 14:59:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x39, 0x3, 0xc000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 14:59:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x7900, 0x4, 0xc0}, 0x48) 14:59:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 14:59:35 executing program 3: r0 = socket(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 14:59:35 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x894c, 0x0) 14:59:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x3, 0x0, 0x4}, 0x48) 14:59:35 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89b0, &(0x7f0000000000)={'vxcan1\x00'}) 14:59:35 executing program 5: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x2, 0x0, &(0x7f0000000040)) 14:59:35 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x2) 14:59:35 executing program 1: r0 = socket(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 14:59:35 executing program 4: socket(0x1, 0x80005, 0x0) 14:59:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x7900, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 14:59:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001900)={0x10}, 0x10}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}], 0x20}, 0x0) 14:59:36 executing program 1: socketpair(0x2, 0x80006, 0x0, &(0x7f0000000080)) 14:59:36 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @random="c952a1070b3e", @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x6000, 0x0, 0x21, 0x0, @loopback, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ecca72", 0x0, "ee29b7"}}}}}}, 0x0) 14:59:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x8000, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 14:59:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xc, 0x8, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x20}, 0x300}, 0x0) 14:59:36 executing program 2: r0 = socket(0x1e, 0x4, 0x0) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) 14:59:36 executing program 3: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 14:59:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, r1, 0x7648b26add2afa2d}, 0x14}}, 0x0) 14:59:36 executing program 5: r0 = socket(0x11, 0x3, 0x0) getsockname$qrtr(r0, 0x0, 0x0) 14:59:36 executing program 4: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5452, &(0x7f0000000000)={'vxcan1\x00'}) 14:59:36 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x9, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 14:59:36 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0xf) 14:59:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 14:59:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}], 0x10) 14:59:37 executing program 5: syz_emit_ethernet(0x116, &(0x7f0000000140)=ANY=[@ANYBLOB="1fa74a01f213bbbbbbbbbbbb8100000086dd60c7a4ac00dc2f0000000000000000000000ffffac1e0001fe8000000000000000000000000012"], 0x0) 14:59:37 executing program 3: r0 = socket(0x10, 0x3, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) 14:59:37 executing program 2: syz_emit_ethernet(0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038100000086dd60c7a4ac004a2b00fe8000000000000000000000000000aafe"], 0x0) 14:59:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 14:59:37 executing program 2: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20004854) 14:59:37 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000240)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "80b756", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@dstopts]}}}}}, 0x0) 14:59:37 executing program 5: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}}}, 0x0) 14:59:37 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, 0x0, 0x0) 14:59:37 executing program 0: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x6, 0x0, &(0x7f0000000040)) 14:59:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a"], 0x20}}, 0x0) 14:59:38 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 14:59:38 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x1, {0x0, 0xf0}}, 0x18) 14:59:38 executing program 5: r0 = socket(0xa, 0x5, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 14:59:38 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/time\x00') ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 14:59:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="40020000", @ANYRES16=r1, @ANYBLOB="010126bd7000ffdbdf270e00000008000300", @ANYRES32, @ANYBLOB="5c000e8055"], 0x240}}, 0x0) [ 735.440422][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:59:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x33fe0}}, 0x0) 14:59:38 executing program 2: r0 = socket(0x1e, 0x4, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x89e1, 0x0) 14:59:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000760000000c00990d"], 0x20}}, 0x0) 14:59:38 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0x0) 14:59:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0xe6d77ece842c915f, 0x0, 0x0, {}, [@L2TP_ATTR_COOKIE={0xc}]}, 0x20}}, 0x0) 14:59:39 executing program 1: syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x4c, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[@routing={0x0, 0x0, 0x0, 0x0, 0x1000000}]}}}}}, 0x0) 14:59:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 14:59:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:59:39 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x5, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 14:59:39 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 14:59:39 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x8, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000000)=@raw=[@initr0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 14:59:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000000)="f0948d8972a0bfb8", 0x8) 14:59:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x8000, 0x4}, 0x48) 14:59:39 executing program 2: r0 = socket(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) 14:59:39 executing program 0: r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00'}) 14:59:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000080005"], 0x1c}}, 0x0) 14:59:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x101, 0x3, 0x7fc0000}, 0x48) 14:59:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r1, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 14:59:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000000000001f"], 0x20}}, 0x0) 14:59:40 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000080)='j', 0x1, 0x4, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0x3, 0x4}, 0x20) 14:59:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x5, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) [ 737.433963][T10560] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 14:59:40 executing program 3: r0 = socket(0x29, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x40080) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 14:59:40 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7fff}, 0x20) 14:59:40 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000340)={@link_local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "4f2cec", 0x44, 0x2f, 0x0, @local, @empty}}}}, 0x0) 14:59:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 14:59:40 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9e7053", 0x10, 0x21, 0x0, @ipv4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @ni}}}}}, 0x0) 14:59:41 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0957d19f8993662, 0x0) 14:59:41 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7fff}, 0x20) 14:59:42 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x425c0, 0x0) 14:59:42 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x8084) 14:59:42 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000340)={@link_local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @loopback}}}}}, 0x0) 14:59:42 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 14:59:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}, 0x36f}) 14:59:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x7, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 14:59:42 executing program 1: recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 14:59:42 executing program 4: r0 = socket(0x2, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 14:59:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05"], 0x14}}, 0x0) 14:59:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x39, 0x3, 0x104, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 14:59:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev}, @in={0x2, 0x0, @remote}], 0xff9b) 14:59:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x0, 0x0, 0x1ff, 0x0, 0x1}, 0x48) 14:59:43 executing program 1: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09050000000000000000060000000600030000e9ffff050003"], 0x24}}, 0x0) 14:59:43 executing program 4: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}, 0x0) 14:59:43 executing program 0: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0xa, 0x0, &(0x7f0000000040)) 14:59:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000012c0)={0x18, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x18}}, 0x0) 14:59:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0xa, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 14:59:43 executing program 5: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x12, 0x0, &(0x7f0000000040)) 14:59:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x1, 0x1f, 0x802}, 0x48) [ 741.324819][T10620] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 14:59:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}, 0x36f, 0x0, 0x0, 0x0, 0x2}) 14:59:44 executing program 4: r0 = socket(0x23, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) 14:59:44 executing program 1: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @random="c952a1070b3e", @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ecca72", 0x0, "ee29b7"}}}}}}, 0x0) 14:59:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r1, 0x203, 0x0, 0x0, {{}, {}, {0xa, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) 14:59:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 14:59:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x18, r1, 0x1, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 14:59:45 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 14:59:45 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000540)) 14:59:45 executing program 3: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x21, 0x0, &(0x7f0000000040)) 14:59:45 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x700}}, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000000100)=""/46, 0x2e}], 0x3}, 0x61) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180048af57b17925c4659aa4fde75d19b9b3453672a1dfd3"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x9, 0x4) 14:59:45 executing program 5: mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1fffff, 0x0, 0xa0033, 0xffffffffffffffff, 0x0) 14:59:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x101}, 0x1c}}, 0x0) 14:59:45 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) 14:59:46 executing program 5: r0 = socket(0x1e, 0x4, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 14:59:46 executing program 4: r0 = socket(0x2, 0x3, 0x4) recvmsg$qrtr(r0, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x62, 0x0) 14:59:46 executing program 3: r0 = socket(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000980)={'batadv_slave_0\x00'}) 14:59:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x9, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:46 executing program 1: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x15, 0x0, &(0x7f0000000040)) 14:59:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x9, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 743.609522][T10661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 14:59:46 executing program 4: syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x7, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[@routing]}}}}}, 0x0) 14:59:46 executing program 2: r0 = socket(0x23, 0x5, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) 14:59:46 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x0, 0x0, 0x3e}, 0x48) 14:59:47 executing program 1: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0xe, 0x0, &(0x7f0000000040)) 14:59:47 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), 0x4) 14:59:47 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_mreqn(r0, 0x10d, 0x0, 0x0, 0x0) 14:59:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r1, 0x203, 0x0, 0x0, {{}, {0x0, 0x5}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0) 14:59:47 executing program 5: sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x8000, 0x4e02}, 0x48) 14:59:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x39, 0x3, 0x4}, 0x48) 14:59:47 executing program 1: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x10d, 0x2, 0x0, &(0x7f0000000340)=0x62) 14:59:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) bind$bt_hci(r0, 0x0, 0x0) 14:59:48 executing program 2: syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x4c, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[@routing={0x0, 0x0, 0x0, 0x0, 0x6000}]}}}}}, 0x0) 14:59:48 executing program 4: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f0000000040)="2577b05166964419769e24", 0xb) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @dev}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x8, 0x0}}, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x4}) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) 14:59:48 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x9, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000680)='GPL\x00', 0x0, 0x92020000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$can_j1939(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40002003) 14:59:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 14:59:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x20, 0x6}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) 14:59:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0x38c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback={0x700}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "da8b594a508106262d3c21aaabf45a17fceec940d8d56a068b057d0be9eb8881"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4d4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x2d4, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a3788cb29fba962b63568accb312ad4fe02ac22def151219ee7931fa7e1dd9e4"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f48b54c433739325e9ddf5be58e9dd08b4b448067afa645b89679fdde096fe4a"}, @WGPEER_A_FLAGS={0x8}]}, {0x4e4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x470, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "77ad0ede23044c8d2ee5778e014758216ae1ea1cb479f6d8a7277eb71435a8c6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}]}]}]}]}, 0x33fe0}}, 0x0) 14:59:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x0, 0x1440}, 0x48) 14:59:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}}, 0x0) 14:59:54 executing program 2: syz_emit_ethernet(0x87, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x4d, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x8, 0x6558, 0x0, "aa97f93c7ad1c8b261"}}}}}}}, 0x0) 14:59:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000020"], 0x20}}, 0x0) 14:59:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x28}, 0x10}, 0x0) 14:59:54 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) 14:59:54 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pressure(r0, 0x0, 0x0) 14:59:54 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x39, 0x3, 0x4}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 14:59:54 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 14:59:54 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 14:59:54 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) 14:59:54 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, &(0x7f0000000000)={'vxcan1\x00'}) 14:59:57 executing program 0: unshare(0x10000000) 14:59:57 executing program 5: socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0) 14:59:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)={0x10}, 0x10}], 0x1, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @rights={{0x10}}], 0x30}, 0x0) 14:59:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 14:59:57 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) 14:59:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0558f36c07f9e9e1c64212"], 0x50}}, 0x0) 14:59:58 executing program 0: syz_emit_ethernet(0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038100000086dd60c7a4ac004a1100fe8000000000000000000000000000aafe8001"], 0x0) 14:59:58 executing program 4: r0 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 14:59:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x1, 0x9, &(0x7f0000000240)="3cfacfda", 0x4) 14:59:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x20, 0x6}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) [ 755.304108][T10743] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 14:59:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "e17ad2f759c0a42c"}}]}, 0x28}}, 0x0) 14:59:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000040)={0x10}, 0x10}], 0x1, &(0x7f0000003bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0x20}, 0x0) 14:59:58 executing program 4: mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xa0033, 0xffffffffffffffff, 0x0) 14:59:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:59:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_COOKIE={0xc}]}, 0x33fe0}}, 0x0) 14:59:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000000000006b"], 0x20}}, 0x0) 14:59:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000760000000c"], 0x20}}, 0x0) 14:59:59 executing program 4: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@multicast, @random="c952a1070b3e", @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @loopback, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ecca72", 0x0, "ee29b7"}}}}}}, 0x0) 14:59:59 executing program 1: r0 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 14:59:59 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x700}}, 0x0) [ 756.247900][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:59:59 executing program 5: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x29, 0x0, &(0x7f0000000040)) 14:59:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x9, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:59:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000080006"], 0x1c}}, 0x0) 14:59:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0xe6d77ece842c915f, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 14:59:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x101, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) 14:59:59 executing program 4: r0 = socket(0x2, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) 14:59:59 executing program 5: r0 = socket(0x23, 0x5, 0x0) connect$qrtr(r0, 0x0, 0x0) 15:00:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 15:00:00 executing program 0: r0 = socket(0xa, 0x6, 0x0) connect$caif(r0, &(0x7f0000001040)=@dbg, 0x18) 15:00:00 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}}}, 0x0) 15:00:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x113}, 0x14}}, 0x0) 15:00:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0x17, &(0x7f0000000040)={0x0, 0x2}, 0xe) 15:00:00 executing program 2: r0 = socket(0x2, 0x5, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, 0x0) 15:00:00 executing program 5: ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) pipe(&(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000200)="110c76741f194e61a97fdd7e04a37413efba8310e4c30427918421672bccb5deeae73430dbeca5c80a0c9f7a991a6fa24cc197c3d7702d7439a2476cc4df662369369afac9a9b03a0bd41d247412a776df9edc320f57e59c11d653eb84f1f2fa564487bb89d00e56433739a1d736034e2c2890280b0421d98f89c27b5cdf7cade1807c301748b4da141b103fdca315d2c26920144112c4f25d48dff52d7dc8d0dc9e454c5d167cd90f38", &(0x7f0000000300)=@udp6, 0x2}, 0x20) socket$netlink(0x10, 0x3, 0x13) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r2, 0x8940, &(0x7f0000000000)) 15:00:00 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8919, &(0x7f0000000000)={'vxcan1\x00'}) 15:00:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0123d8231f26006136000b"], 0x14}}, 0x0) 15:00:00 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @qipcrtr, @qipcrtr}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000540)) 15:00:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 15:00:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x39, 0x3, 0x301, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 15:00:01 executing program 5: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}}}, 0x0) 15:00:01 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 15:00:01 executing program 4: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x10d, 0x487, 0x0, &(0x7f0000000040)) 15:00:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r1, 0x42b6cb78494da4fd}, 0x14}}, 0x0) 15:00:01 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x8905, 0x0) 15:00:01 executing program 2: syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "56010f", 0x18, 0x6, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x0) 15:00:01 executing program 1: r0 = socket(0x1e, 0x4, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/199, 0xc7}], 0x1}, 0x0) 15:00:01 executing program 5: syz_emit_ethernet(0x1cc, &(0x7f0000000240)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "56010f", 0x192, 0x6, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0x0, 0xa, 0x0, 0x7, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0xf}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @routing={0x89, 0x2, 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1b}]}, @dstopts={0x73, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x1}}, @enc_lim]}, @srh={0x2b, 0xc, 0x4, 0x6, 0x0, 0x8, 0x100, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @loopback, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x0, 0x6, 0x4, 0x3, 0x0, 0x40, 0x401, [@mcast1, @mcast2, @rand_addr=' \x01\x00']}, @hopopts={0x0, 0x2, '\x00', [@generic={0x40, 0x15, "1ec4776ec8068c2e3a36b1815e1897426ec518c8b2"}]}, @fragment={0x29, 0x0, 0x8e, 0x0, 0x0, 0x12, 0x64}, @routing={0x3b, 0x4, 0x0, 0x3f, 0x0, [@dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], @payload_conn={{{0x1a, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, 0x2, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80, 0x7, 0x4, 0x0, 0x4e20}}, [0x0, 0x0]}}}}}}, 0x0) 15:00:01 executing program 4: r0 = socket(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 15:00:01 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000800000014"], 0x28}}, 0x0) 15:00:01 executing program 0: r0 = socket(0xa, 0x6, 0x0) connect$caif(r0, &(0x7f0000000040), 0x18) 15:00:01 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000000)={'vxcan1\x00'}) 15:00:02 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) [ 759.148655][T10834] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 15:00:02 executing program 5: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000380), 0xc) recvmsg$qrtr(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x38, 0x0) 15:00:02 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 15:00:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_COOKIE={0xc}]}, 0x9}}, 0x0) 15:00:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 15:00:02 executing program 4: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @random="c952a1070b3e", @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ecca72", 0x0, "ee29b7"}}}}}}, 0x0) 15:00:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) 15:00:03 executing program 0: syz_emit_ethernet(0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038100000086dd60c7a4ac004a1100fe8000000000000000020000000000aafe"], 0x0) 15:00:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x8000, 0x104}, 0x48) 15:00:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 760.116811][T10850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:00:03 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x10}}], 0x10}, 0x0) 15:00:03 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 15:00:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r1, 0x21, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x28}}, 0x0) 15:00:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc0, 0x8000, 0xffffffff}, 0x48) 15:00:03 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$rxrpc(r0, 0x0, 0x0) 15:00:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 760.746290][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 760.755960][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 15:00:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) 15:00:04 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 15:00:04 executing program 4: socket$inet(0x2, 0x6, 0x0) pselect6(0x40, &(0x7f0000002280)={0x9}, 0x0, 0x0, 0x0, 0x0) [ 761.133023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:00:04 executing program 5: syz_emit_ethernet(0x96, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x5c, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@mcast1]}]}}}}}, 0x0) 15:00:05 executing program 3: syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaaaa8100000086dd60c7a4ac000721"], 0x0) 15:00:05 executing program 2: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}, 0x0) 15:00:05 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x8, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff85}}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x9, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:05 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000240)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "80b756", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@dstopts={0x0, 0x1, '\x00', [@jumbo, @pad1]}]}}}}}, 0x0) 15:00:05 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1804000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 762.172961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:00:05 executing program 4: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x80000200) 15:00:05 executing program 5: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}}}, 0x0) 15:00:05 executing program 0: r0 = socket(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x10d, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) 15:00:05 executing program 1: r0 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'caif0\x00', {'wg1\x00'}, 0x9}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001500), &(0x7f00000001c0)=0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001500), &(0x7f0000001540)=0x14) setsockopt(r2, 0x8c9d, 0x5, &(0x7f0000000100)="1f50b76b5d37eafd0e5920f27f95c3c13ed2d903676410edcb5e7eaa8be5cb7adfe48a7a5919a5af4b4de2929c1fe98ffaf94083af5e259c2af3b12cc640e99b6f21a82a458a45ceb5662edcc0fc1d10f0d3240c6910a755f132e88ba7214d2a742f71e8a8ded2dbd57e1e5c088e365b5e7eeadf93459780c5e7fe69db04e477add8c5805a0b721c560c509127a2c17fb0655fad85aad5f7ee5a5e035732e4e836a269b7", 0xa4) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, @in={0x2, 0x4e24, @multicast1}, @hci={0x1f, 0x7, 0x3}, @sco, 0x671e, 0x0, 0x0, 0x0, 0x8fd4, &(0x7f0000001480)='veth1\x00', 0x9, 0x3, 0x2}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000380)={"41339e3b9d20c749cde29cd931bb23b6", 0x0, 0x0, {0x200, 0x2}, {0x401, 0x1}, 0xffffffffffff8916, [0x4, 0x7, 0x8000000000000001, 0x8, 0x10001, 0x7, 0x1, 0x6, 0x7d3, 0x1, 0x3, 0x2, 0x8, 0x3, 0x40, 0x8]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000480)={{r3}, r4, 0x18, @unused=[0xf8, 0x4, 0x58c, 0x200], @subvolid=0x4}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000200)={0x8, 'veth1_to_bond\x00', {'tunl0\x00'}, 0x7}) connect$qrtr(r0, 0x0, 0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x6, 0x3, 0x3, 0x4}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000010) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)) 15:00:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x18}}, 0x14}}, 0x0) 15:00:06 executing program 4: r0 = socket(0x29, 0x5, 0x0) recvmsg$qrtr(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x38, 0x0) 15:00:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x10001, 0x5, 0x2, 0x0, 0x1}, 0x48) 15:00:06 executing program 5: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@random="1fa74a01f213", @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "c7a4ac", 0x44, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}}}}, 0x0) 15:00:06 executing program 1: r0 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'caif0\x00', {'wg1\x00'}, 0x9}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000001500), &(0x7f00000001c0)=0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001500), &(0x7f0000001540)=0x14) setsockopt(r2, 0x8c9d, 0x5, &(0x7f0000000100)="1f50b76b5d37eafd0e5920f27f95c3c13ed2d903676410edcb5e7eaa8be5cb7adfe48a7a5919a5af4b4de2929c1fe98ffaf94083af5e259c2af3b12cc640e99b6f21a82a458a45ceb5662edcc0fc1d10f0d3240c6910a755f132e88ba7214d2a742f71e8a8ded2dbd57e1e5c088e365b5e7eeadf93459780c5e7fe69db04e477add8c5805a0b721c560c509127a2c17fb0655fad85aad5f7ee5a5e035732e4e836a269b7", 0xa4) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, @in={0x2, 0x4e24, @multicast1}, @hci={0x1f, 0x7, 0x3}, @sco, 0x671e, 0x0, 0x0, 0x0, 0x8fd4, &(0x7f0000001480)='veth1\x00', 0x9, 0x3, 0x2}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000380)={"41339e3b9d20c749cde29cd931bb23b6", 0x0, 0x0, {0x200, 0x2}, {0x401, 0x1}, 0xffffffffffff8916, [0x4, 0x7, 0x8000000000000001, 0x8, 0x10001, 0x7, 0x1, 0x6, 0x7d3, 0x1, 0x3, 0x2, 0x8, 0x3, 0x40, 0x8]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000480)={{r3}, r4, 0x18, @unused=[0xf8, 0x4, 0x58c, 0x200], @subvolid=0x4}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000200)={0x8, 'veth1_to_bond\x00', {'tunl0\x00'}, 0x7}) connect$qrtr(r0, 0x0, 0xf) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x6, 0x3, 0x3, 0x4}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000010) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)) 15:00:06 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 15:00:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x48) 15:00:07 executing program 2: bpf$MAP_CREATE(0x16, &(0x7f0000000ac0)=@bloom_filter, 0x48) 15:00:07 executing program 5: socketpair(0x26, 0x5, 0x8, &(0x7f0000000080)) 15:00:07 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)="d8", 0x1}, {&(0x7f00000010c0)="a0", 0x1}], 0x2}, 0x0) 15:00:07 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0xf, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2ddb}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100}, @alu={0x7, 0x0, 0x2, 0x1, 0xb, 0x50, 0xf93123e5e22a22e0}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000800)='syzkaller\x00', 0x7f, 0x9c, &(0x7f0000000840)=""/156, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x0, 0x9}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x5, 0x4, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff]}, 0x80) 15:00:07 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 15:00:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)) 15:00:07 executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002c000b12d25a80648c2594f90124fc6010000b4046000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 15:00:07 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000900)=@framed, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:07 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x6, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@alu, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000800)='syzkaller\x00', 0x7f, 0x9c, &(0x7f0000000840)=""/156, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:07 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000380)=@framed={{}, [@jmp]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x9a, &(0x7f0000000440)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:07 executing program 0: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}, 0x38) 15:00:07 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) [ 764.861179][T10930] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 764.869773][T10930] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 764.878258][T10930] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.2'. 15:00:08 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001200)={&(0x7f0000000080)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000001180)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x30}, 0x0) 15:00:08 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{0x0}, {0x0}], 0x2, &(0x7f0000001180)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 15:00:08 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001100)=""/4096, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x9, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:08 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002c000b12d25a80648c2594f90124fc601000064046000000053582c137153e3702480b8000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 15:00:08 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0x14, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8}, 0xc) 15:00:08 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00), 0x10}, 0x80) 15:00:08 executing program 1: bpf$MAP_UPDATE_BATCH(0x2, 0x0, 0x0) 15:00:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x0, 0xfffffffd, 0x80000}, 0x48) [ 765.636292][T10952] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 765.644870][T10952] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 765.653461][T10952] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.0'. 15:00:08 executing program 4: bpf$MAP_CREATE(0xb, 0x0, 0x0) 15:00:08 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0x6, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8}, 0xc) 15:00:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000380)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x9a, &(0x7f0000000440)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f0000000580)=""/4090, 0x1a, 0xffa, 0x1}, 0x20) 15:00:09 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) 15:00:09 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:09 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000200)=@raw=[@func, @func], &(0x7f0000000280)='syzkaller\x00', 0x1, 0xf2, &(0x7f00000002c0)=""/242, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) 15:00:09 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 15:00:09 executing program 2: bpf$MAP_UPDATE_BATCH(0x3, 0x0, 0x0) 15:00:09 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) 15:00:09 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 15:00:09 executing program 0: bpf$MAP_CREATE(0x2, &(0x7f0000000ac0)=@bloom_filter, 0x48) 15:00:09 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000100)='GPL\x00', 0x7, 0x84, &(0x7f0000000140)=""/132, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:10 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) 15:00:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x0, 0x0, 0xffff4c5a}, 0x48) 15:00:10 executing program 0: socketpair(0x11, 0x0, 0x0, &(0x7f0000000680)) 15:00:10 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) 15:00:10 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000a80)=""/134, 0x26, 0x86, 0x1}, 0x20) 15:00:10 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f00000002c0)='./file0/file0\x00'}, 0x10) 15:00:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e40), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001e80)={'pimreg1\x00'}) 15:00:10 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x45300, 0x0) 15:00:10 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002c000b12d25a80648c2594f90124fc6010000a4046000000053582c137153e370248088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 15:00:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) 15:00:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{0xffffffffffffffff}], 0x1}, 0x0) 15:00:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x0, 0x0, 0x0, 0xc40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) 15:00:11 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000400)='GPL\x00', 0x4, 0x9a, &(0x7f0000000440)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:11 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) [ 768.076151][T11006] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 768.085840][T11006] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 768.094236][T11006] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.0'. 15:00:11 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) 15:00:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 15:00:11 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002c000b12d25a80648c2594f90124fc6010000a4046000000053582c137153e370248088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 15:00:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x0, 0x2, &(0x7f0000001480)=@raw=[@map_fd], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:11 executing program 2: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) 15:00:11 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf34a378abdfeb4e6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:11 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, 0x0}, 0x0) 15:00:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280), 0x4) [ 768.763294][T11021] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 768.771675][T11021] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 768.781094][T11021] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.0'. 15:00:12 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002c000b12d25a80648c2594f90124fc6010000a4046000000053582c137153e370248088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 15:00:12 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002c000b12d25a80648c2594f90124fc601000064046000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 15:00:12 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000340)) 15:00:12 executing program 2: bpf$MAP_LOOKUP_BATCH(0x1d, 0x0, 0x0) 15:00:12 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x9, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2ddb, 0x0, 0x0, 0x0, 0x10000}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc, @alu={0x7, 0x0, 0x2, 0x0, 0xb, 0x50, 0xf93123e5e22a22e0}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000800)='syzkaller\x00', 0x7f, 0x9c, &(0x7f0000000840)=""/156, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x0, 0x9}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x5, 0x4, 0x401}, 0x10}, 0x80) [ 769.325186][T11033] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 769.333718][T11033] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 769.342200][T11033] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.0'. 15:00:12 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x5) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, &(0x7f0000000380)=""/181, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 769.494802][T11037] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.4'. 15:00:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x8}, 0x48) 15:00:12 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002c000b12d25a80648c2594f90324fc60", 0x14}], 0x1}, 0x0) 15:00:12 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) 15:00:12 executing program 3: bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x9000) 15:00:13 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002c000b12d25a80648c2594f90124fc601000044046000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 15:00:13 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000009c0)={&(0x7f0000000380)=@name, 0x10, 0x0}, 0x59) 15:00:13 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x6, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@alu, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000800)='syzkaller\x00', 0x7f, 0x9c, &(0x7f0000000840)=""/156, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:13 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) 15:00:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000940)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14}}], 0x30}, 0x95) 15:00:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x5}, 0x48) [ 770.307899][T11053] validate_nla: 2 callbacks suppressed [ 770.307961][T11053] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 770.322144][T11053] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 770.330401][T11053] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.5'. 15:00:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x1, &(0x7f0000000540)=@raw=[@call], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0xbf, &(0x7f0000000600)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:13 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0x10, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8}, 0xc) 15:00:13 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000340)) 15:00:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@bloom_filter, 0x48) 15:00:13 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) 15:00:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth1_vlan\x00', 0x1}) 15:00:13 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001680)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) 15:00:14 executing program 2: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)={0x0}, 0x10) 15:00:14 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002c000b12d25a80648c2594f90324fc601000024002000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 15:00:14 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1470}, 0x0) 15:00:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x10001, 0x5, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 15:00:14 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 15:00:14 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000000c0)='Z', 0x1}, {&(0x7f0000000140)="8c", 0x1}], 0x2}, 0x0) 15:00:14 executing program 2: r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001440)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) [ 771.508372][T11081] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 771.517447][T11081] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 771.525875][T11081] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.5'. 15:00:14 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0), 0x8, 0x10, 0x0}, 0x80) 15:00:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1}, 0x48) 15:00:14 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="a8", &(0x7f00000012c0)}, 0x48) 15:00:14 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001500055bd25a80648c63940d1324fc60100010400a000a00053582c137153e370800038047020000d1bd", 0x33fe0}], 0x1}, 0x0) 15:00:14 executing program 2: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x8, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2ddb, 0x0, 0x0, 0x0, 0x10000}, [@btf_id, @alu={0x0, 0x0, 0x0, 0x0, 0xb}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000800)='syzkaller\x00', 0x7f, 0x9c, &(0x7f0000000840)=""/156, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)}, 0x80) 15:00:15 executing program 4: bpf$MAP_CREATE(0x8, &(0x7f0000000ac0)=@bloom_filter, 0x48) 15:00:15 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000001b40)='\t', 0x1}], 0x1, &(0x7f0000005980)=ANY=[], 0x1470}, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x4a8d0) 15:00:15 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x20}, 0x0) 15:00:15 executing program 3: socketpair(0x22, 0x0, 0x7ff, &(0x7f0000000040)) 15:00:15 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x6, &(0x7f0000000780)=@framed={{}, [@alu, @map_val]}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:15 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x75d7f720579f456c}, 0x14) 15:00:15 executing program 2: bpf$PROG_LOAD(0x5, 0xffffffffffffffff, 0x0) 15:00:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}}, &(0x7f0000000a80)=""/134, 0x26, 0x86, 0x1}, 0x20) 15:00:15 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 15:00:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x16, 0x0, 0x6, 0x4, 0x84, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 15:00:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x48) 15:00:15 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r1}) 15:00:16 executing program 5: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x22}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) 15:00:16 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x6, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2ddb}, [@alu, @map_val]}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:16 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000140)="a8", &(0x7f00000012c0)="1b"}, 0x48) 15:00:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000080)=""/171, 0x2e, 0xab, 0x1}, 0x20) 15:00:16 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0xdd, &(0x7f0000000400)=""/221, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:16 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x5, &(0x7f0000000780)=@framed={{}, [@map_val]}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:16 executing program 5: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff78, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002c000b12d25a80648c2594f90324fc601000024046000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 15:00:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000640)) 15:00:16 executing program 1: socketpair(0x2c, 0x3, 0x4992, &(0x7f0000000000)) [ 773.820914][T11138] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 773.829836][T11138] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 773.838261][T11138] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.5'. 15:00:16 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x3f}]}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xf8, &(0x7f0000000140)=""/248, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000001340)={'full', 0x20, 0x2, 0x20, 0x100000}, 0x2f) 15:00:17 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0xf8, &(0x7f0000000140)=""/248, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:17 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1, &(0x7f0000000040)=@raw=[@initr0], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xf8, &(0x7f0000000140)=""/248, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:17 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f00000003c0)='GPL\x00', 0x6, 0xdd, &(0x7f0000000040)=""/221, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:00:17 executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0xf8, &(0x7f0000000140)=""/248, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 15:00:17 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002ac0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000009dc0)=ANY=[@ANYBLOB="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"], 0x768, 0x0) 15:00:17 executing program 2: mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', 0x0, 0x40000, 0x0) 15:00:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_delroute={0x28, 0x12, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) 15:00:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1}, 0x1c}}, 0x0) 15:00:17 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3, 0x678}]}]}}, &(0x7f0000000480)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 15:00:17 executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0xf8, &(0x7f0000000140)=""/248, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) [ 774.853376][T11159] ===================================================== [ 774.860688][T11159] BUG: KMSAN: uninit-value in p9_client_write+0xb23/0xee0 [ 774.868182][T11159] p9_client_write+0xb23/0xee0 [ 774.873212][T11159] v9fs_fid_xattr_set+0x201/0x3a0 [ 774.883182][T11159] v9fs_xattr_handler_set+0xf8/0x170 [ 774.889125][T11159] __vfs_setxattr+0x671/0x770 [ 774.894093][T11159] __vfs_setxattr_noperm+0x24d/0xa40 [ 774.899541][T11159] __vfs_setxattr_locked+0x43c/0x470 [ 774.905189][T11159] vfs_setxattr+0x2a1/0x680 [ 774.909848][T11159] setxattr+0x560/0x5d0 [ 774.914237][T11159] path_setxattr+0x202/0x3f0 [ 774.918980][T11159] __ia32_sys_setxattr+0xf0/0x170 [ 774.924254][T11159] __do_fast_syscall_32+0xa2/0x100 [ 774.929525][T11159] do_fast_syscall_32+0x33/0x70 [ 774.934596][T11159] do_SYSENTER_32+0x1b/0x20 [ 774.939260][T11159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 774.945837][T11159] [ 774.948228][T11159] Uninit was created at: [ 774.952781][T11159] kmem_cache_alloc_trace+0x69e/0xdf0 [ 774.958310][T11159] p9_fid_create+0x5e/0x400 [ 774.963046][T11159] p9_client_walk+0xdc/0xdb0 [ 774.967840][T11159] v9fs_fid_xattr_set+0xf9/0x3a0 [ 774.973077][T11159] v9fs_xattr_handler_set+0xf8/0x170 [ 774.978544][T11159] __vfs_setxattr+0x671/0x770 [ 774.983459][T11159] __vfs_setxattr_noperm+0x24d/0xa40 [ 774.988895][T11159] __vfs_setxattr_locked+0x43c/0x470 [ 774.994453][T11159] vfs_setxattr+0x2a1/0x680 [ 774.999102][T11159] setxattr+0x560/0x5d0 [ 775.003504][T11159] path_setxattr+0x202/0x3f0 [ 775.008247][T11159] __ia32_sys_setxattr+0xf0/0x170 [ 775.013642][T11159] __do_fast_syscall_32+0xa2/0x100 [ 775.018898][T11159] do_fast_syscall_32+0x33/0x70 [ 775.023984][T11159] do_SYSENTER_32+0x1b/0x20 [ 775.028635][T11159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 775.035196][T11159] [ 775.037600][T11159] CPU: 0 PID: 11159 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 775.047978][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 775.058320][T11159] ===================================================== [ 775.065428][T11159] Disabling lock debugging due to kernel taint [ 775.074175][T11159] Kernel panic - not syncing: kmsan.panic set ... [ 775.080675][T11159] CPU: 0 PID: 11159 Comm: syz-executor.4 Tainted: G B 5.19.0-syzkaller-32655-g1b070a5d1a2c #0 [ 775.092362][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 775.102518][T11159] Call Trace: [ 775.105948][T11159] [ 775.108944][T11159] dump_stack_lvl+0x1c8/0x256 [ 775.113792][T11159] dump_stack+0x1a/0x1c [ 775.118099][T11159] panic+0x4d3/0xc69 [ 775.122148][T11159] kmsan_report+0x2cc/0x2d0 [ 775.126790][T11159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 775.133179][T11159] ? __msan_warning+0x92/0x110 [ 775.138060][T11159] ? p9_client_write+0xb23/0xee0 [ 775.143134][T11159] ? v9fs_fid_xattr_set+0x201/0x3a0 [ 775.148480][T11159] ? v9fs_xattr_handler_set+0xf8/0x170 [ 775.154083][T11159] ? __vfs_setxattr+0x671/0x770 [ 775.159053][T11159] ? __vfs_setxattr_noperm+0x24d/0xa40 [ 775.164648][T11159] ? __vfs_setxattr_locked+0x43c/0x470 [ 775.170233][T11159] ? vfs_setxattr+0x2a1/0x680 [ 775.175027][T11159] ? setxattr+0x560/0x5d0 [ 775.179481][T11159] ? path_setxattr+0x202/0x3f0 [ 775.184370][T11159] ? __ia32_sys_setxattr+0xf0/0x170 [ 775.189696][T11159] ? __do_fast_syscall_32+0xa2/0x100 [ 775.195105][T11159] ? do_fast_syscall_32+0x33/0x70 [ 775.200248][T11159] ? do_SYSENTER_32+0x1b/0x20 [ 775.205039][T11159] ? entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 775.211688][T11159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 775.217644][T11159] ? preempt_count_sub+0x7d/0x280 [ 775.222888][T11159] ? _raw_spin_unlock_irqrestore+0x34/0x50 [ 775.228855][T11159] ? __stack_depot_save+0x38d/0x4b0 [ 775.234189][T11159] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 775.240577][T11159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 775.246530][T11159] __msan_warning+0x92/0x110 [ 775.251238][T11159] p9_client_write+0xb23/0xee0 [ 775.256167][T11159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 775.262119][T11159] v9fs_fid_xattr_set+0x201/0x3a0 [ 775.267322][T11159] v9fs_xattr_handler_set+0xf8/0x170 [ 775.272760][T11159] ? v9fs_xattr_handler_get+0x170/0x170 [ 775.278458][T11159] __vfs_setxattr+0x671/0x770 [ 775.283287][T11159] __vfs_setxattr_noperm+0x24d/0xa40 [ 775.288724][T11159] __vfs_setxattr_locked+0x43c/0x470 [ 775.294155][T11159] vfs_setxattr+0x2a1/0x680 [ 775.298805][T11159] setxattr+0x560/0x5d0 [ 775.303107][T11159] ? preempt_count_sub+0x7d/0x280 [ 775.308270][T11159] ? __mnt_want_write+0x262/0x350 [ 775.313439][T11159] ? __mnt_want_write+0x300/0x350 [ 775.318609][T11159] ? kmsan_get_shadow_origin_ptr+0x49/0xa0 [ 775.324572][T11159] path_setxattr+0x202/0x3f0 [ 775.329309][T11159] __ia32_sys_setxattr+0xf0/0x170 [ 775.334476][T11159] __do_fast_syscall_32+0xa2/0x100 [ 775.339727][T11159] do_fast_syscall_32+0x33/0x70 [ 775.344711][T11159] do_SYSENTER_32+0x1b/0x20 [ 775.349335][T11159] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 775.355807][T11159] RIP: 0023:0xf7fb4549 [ 775.359974][T11159] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 775.379730][T11159] RSP: 002b:00000000f7faf5cc EFLAGS: 00000296 ORIG_RAX: 00000000000000e2 [ 775.388268][T11159] RAX: ffffffffffffffda RBX: 00000000200006c0 RCX: 0000000020000700 [ 775.396342][T11159] RDX: 0000000020009dc0 RSI: 0000000000000768 RDI: 0000000000000000 [ 775.404406][T11159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 775.412468][T11159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.420530][T11159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 775.428616][T11159] [ 775.431864][T11159] Kernel Offset: disabled [ 775.436253][T11159] Rebooting in 86400 seconds..