bc91b0f80f4664d66b73e6489bd6be416cd7cdb552aff110343791ce87221eb16b1c960681bc130bd8eebafe48f2af360d4abfeaec642027f6ba5c2280c5c55fb534b6892cf5eac718f1df7929d7f28f6f31ba6e122f5228dd079d7a1817212999ea2f0717c26aba9ebdc1e29e3a5434e55911d279746bc71a47093ff41903814e1be56978a0d6b94490d89d8d532aaef71645369fca2949b77c7195bfc4399327656cb25c52e119793bc97debb60476e45042ff271384a0be6167017ec358fb9de33f1883752fea33d409b8ba2a7c701b37340df133109f78d2f6efe6a9bbc31e61a671b311284a28389c0d038ef9e7a8674323b090b9ea23bf9a811b2adc2c30614cbaa01553f63bed9da4bdf502799b1c1a590178f37816aba6b0b6a7d17d2ba340537d4c808dc271aa19c682b0b3678ebfbc5c34f1d917bfc64dc767e7132a2b3b4988aaa3e0d1fa189e691bc3662f575abf06dfd347695b2a451718484f556e1d4c8879c94dd1b3eb3cade420d012c82982f50c0cca729b0b98d2cd1c01a6ce51fc1ff371a022177b9f627a14f84321e5903e3c32b9ec3f027e6a23d22aa77bb1276ee40ea9fc546da61a92e430ef3effa474fa3151a43761e8ae6eb96184f3b9c9ef3b98a73babde6bf1c0a9a9305c87f7e4af84fbf2329d44762dcd4daaac840662f3554608de84e428081e5782d26f542e6719236ecc5fc2a63972c9b64cf6c1cfe78547c22867afddc083ceb9726a7342b23ac1fdbd6d978baf678b590081377cc62dc2418e44fff52536fcca19590f5ef0d01481f0f046d2829e946475cdf72e5704b7bb406eb34940813acb5ef9ac34667697c5e44f9c6788af8007d04f5a056ba63ecb4fa3c61bc569a52723237fec799a0d856382726ecc958beca8cebb3f1817d5b92d89549b7203294c66a93e60402b686a7e3a0c5527c9da2d09bb128628f35bbbcba83c566ca3316c61d9d346c11cdba199de85bd3bcc7e1b1e460776dfb4d01f662a0012f293aecaa6d6234e5b02b2fe44ebd274f541f7c525b5f098cb58d99ccad01a9790ccc463ffd313d09c3d1cc28a7444b851ab35ccef84bba71f70926f383a3b88aab0571a093c2de5448833b92929d67326bc21b1f88aedf872ac6e96077627c2082f82c28d1e827a8d659695487e3ba9b0e8555e709b1c10874af84d2dfdf3d5cc6a470ba7a98e97e831286755c179ee156cb1ac1819a9c1885ca27553890d916a023a9c222940c2f8d3ccda62005a7ded3285486786a0bc6cf76c8f2f8d48f52f700d1a9c652af030e13f958f7b50bc72853d4487a021e91420fd52731ca318289de92177b8b1e259606cb6e600bf449eac08af89ae524d101eee8f8cc68c69de0bdf4644914b1383aa376b1b0efcdd3f044a6d2ca2e626bffb24ca79d44e4c99ed9519aab5f43cdb8545089f394a3e79bb743025174207df36396130208ed79c928a74bc9409b5e86124d9d110d89a321c455ad3c31b597debb3df97951ba72cdffc7e39e07f9d7d6e9ea1234bec458f55ca2f46937185cfc36e752a2c9633b8087b27bdc4c97339aaa9c49ce0943d48962084027969661d300340cf059f3a61e42634069b5c5bfc5a5a6fe2eb14acf8f55b4b2d69a616e0bb254b2f61f57fb4ea0caea166e5919c71895d7f765fcb93b3e472d8939381f4f8ac700432b4914dbd508c4e33d4885fabe6d1a21f843bc7a8a5c970c1ce1d98982bac5abc2c74ae33d32bd2f98adbe71d944201ff35590f69f88814ffc0532b596364f47f9a7ed05840a1066b0326522855a30476397616741a9ec4bd3c1d20373100a0cb8fb6e1bb17d619f86e0314aad7c34fb5edca941aad98bac40ad97ab8709af3d133db3dd0e6ec210711665c20d9f8cb6a0a10e9149512343a894af6470b59813de38d1243b9ca025a740dc2dc95f8f96ee4f7eefdc55aac797bd8f3cc19e20ec8794eed9fb029b0205eadee50f93c7aa588c5f693961ebef483cf086ae051e60aad1ccc7bb7e859bfd4237c87506db95b1ba6680a387d49bd876cec94cea74b734c2c35dabf8c1c672b7bb32d6002317e10da0e0f597895e7f56ce502213a6aafa0ee3df234c7e2b194b6f155728dbca52a19b7338c3ab283b5f7d3439cc3df5af454d90c7494ed4ff001446afee2e0452c1cf40dacc851384417574f7ad8cfa79e52140f95825786af957d9cee271160101e62ea6a91846c457e21f33a6499cc1fbbd66360f23a05d79e83b2239b99f0be72df884e038f173dc16180eb43dd19b6a40e7e3e3fc8386754c03b4f9a92db7c6d389683ded144524343fc4dc6298846718a796281fea63f544a1895eaf2e762ab5b22fa83fcdb89dc99a23080c1964ca595e311d00f2e82013d971c13add2503c62969afe8bdb3593f6eb0c7a9a5f9ed3bed321f6420330b11786595b97efa094b2566ec1f575cd48bbc67e2f07d0b882be24336003f243f1c73f7204257f5ca9d3894d522198c88572269091ffa224eef3c3d22da1982542695c910c3a3f268808bd8f5d3870c1e509e0daf325a4e679ca5499eafc35c093c33e211cf843d355fab9c9065415a4383da94938d33de4ce5236164d9b0f382c9bb6454c63df252f25defb75f1fa5902e7e727181b346f8ecb2039546e924d8fe9c733ffca068fdd18191cf2fd0445978c014bf06612925e18507c9dc74f5776fe1bcf8d7c0752ea9c38122d46098faa1ccaa399cc36b2a08c321f2b9b0e41e60d73aafbfadbb735ba2b05561a8879785838f09d51815f72802c509d58ffe8f8708cd405e97f477dc1743dde6fbddc248d21786824013e9e3462701ee25423bb99a4f2e8c48096bf265442f25497b14c5cb781581ed28c29159b71971205bc450cc28459fd0b488ce92c411beb28f501e737f3ec8f865b5c52c8499bb463fc851269f30c71467ee47913cd2fc2e1a2a595e4788bcca93201583f81bbc7f8dca58da036f5ee0d47abf1de70c8c150f70b60288a24975823fe3b9a73d8c5e20bad6de6da076d3741639c67e88a8ca2b994df64a00397586893dcbdab64899ca9c3247a286d608630f53882f1f10a0cbd797a388069599bc3395dfd2a4c332d98136c30664d8a7aa99228da35ae42d8dfa376f8c77805b17fb5b3e86add8e81ed39b3a7d39378cdee981913fb31e1bb332cf4be530d9e2ff0d1f734062c749f12264d131c6b4f96bc89c12ef66cfa7c30cd5dca25c48f11263ca238345220e6a8fee378cb3f3a6f0efecfb099fd7247a9b320194d2ea99beef7600b22831f1bda1c8840938bdc201b1da2b19a4f1181acb84b8088faed39d92d18bc83d12216d369e507f89dfb1943159a9591b344907e5ecc2e42269802ec4b6fd40c1250e6a360680134c453bdd03cbbbae7ac5987d7159e38da0fac43b11bb82652e4b05d367cd2f08198576abe535da5c40f8a2dd4d77c7db2fb9b4544833b4ec09d004229493fbf74e4387ecae91849731c468c20800a83587181ea0974b2522e94308058c96abae8818e858e87dec0eb57e1d429794affa849a60b2c06e885a1b27139223148c43bdf04e11a8d1a09614c3604492ee0f0bcd8a2023738cbd04a917b3c623e3108b620903656e057a78e4eea9a5ef137e4161cb089e19f1b105df2ed5b401a40042f269df119a07b9de99240fb40673e00a8b79d0abe4f8022d08c93353d365d4e795d8b83f8ff716baed878d353301166600760873268a10c3ca3b900d58b2150783f31e09fc577a0eff73b45e88aa86bedc44aaf0a3304f556ac00560ce97f81455b561b383a2f855625c66302dc614b8c4e31897c0692df518bf866c35287a3639108e2e14661ac0781ee075d9971b9d40c3c6c7cf6838c22390e42299e66e49ab5b8d35d95ecaaecbb46fa25382e0abe7fe9e7296b458a3564f48ba75df3635d08dfe7006489ea86bbcf3eb29c69c92d957ad82a688a34459469ce17b56f473e37534b946003017e8d6a4adfd9370870cbd20fec0ac8b2751cd0d7c412a91b778eeaaf11faa316524fae207844c89301bd568ed300e471ca6e3153118d7a5a6be85e49947f6e868fdaf8d3f29b008302f87eb1b09b37a5bdcfbf11d246a8dca59a767f75f2294b09aefb52b3f5a46e7f21db10d80fd09a340f03155270cb3bf7c9e455ccbcf49f34682dbd0e586a087c32852f4840e6b366783ca9cce7e459e9776784af06ac3482a62c76b58f80c9c9fba3e52e511a7dbe68688177b59ab67e37ba1c9928b17b387bc0d557b7d740e4370969ef05bc3f8fad087d770838bfa305eaa84a77010989bf82c96313cba66ef84e146a3ba34a7796fdf887e25bdebd660435c142a1fd508c209a5e1238c7b8b0215cb046c231a5bf1dc3044a841f9a0f515097cadbb41a66e10a410f1241552d9a06b60a8054c8c388d061c109047216ae611bed0a55cdf0627a81f27e37331dea8572505fb927fb075b023393c6a3933ec5921842b5f4986a1e130a2abef95624580e9112873df70a4b6cf409c3951d22e4c1539dba2c84fa537c907173e384d4a2a54cdfc51bd7ad6ae35b96e36607b67e1ec9ac958bdf5b9fd9ee5e446149fea9ed5012e8d84ba6f1f1d6e008f90bdc43baa601fa64f9be410c1011887ac8d6c44fae1e081748d1cdbed7492cac3a5231941e9b126546001b59d853b50de49f66aedd5662958226562beab72f4767eb3f6adbd7badc559e5b8"}, @ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "2813c54cec4365ede5a38c4f6c37d61837ef2acf1beececa9330b3255429f73e67acbdd4501190ef2985834727f4a25049a6b4fe5070098023b7ccb8a3699eceec8d996215fea37ce8a3ff149bc6e86598ef58561ce369245e734393c148275a32ad06adab7d2d5602e20bc15924dd4053652b1a764c6ec17729035970b70fb9bf5e5b5d568185de81be0f6faed5c31ce692213d36fa014ab9005f3e"}, @ETHTOOL_A_BITSET_MASK={0x75, 0x5, "9467f5a554af12de682caf3dee7c974ac169b2c87d39e6af796455f2ad41cb4438b303609781f00c1d74c09426f2ea371343d427044f5d01628dfc55f2169aa727ac1f18a91ffccf33e323d2c65693e6d5b01e908b208dbd5aca4812afb4d19807549961334d706012cc01a6795066ba9e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_FEATURES_WANTED={0xbf4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0xbe9, 0x4, "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"}]}]}, 0x1ec4}, 0x1, 0x0, 0x0, 0x40}, 0x800) 05:23:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x0) 05:23:44 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0) 05:23:44 executing program 1: syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) 05:23:44 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)='y', 0x1}, {&(0x7f0000000140)="fb", 0x1}], 0x3}}], 0x1, 0x0) 05:23:44 executing program 5: syz_open_dev$cec(&(0x7f0000000580)='/dev/cec#\x00', 0x3, 0x2) 05:23:44 executing program 4: socket$inet6(0xa, 0x1, 0x7) 05:23:44 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) 05:23:44 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 05:23:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000000e40)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xeb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x55, 0x5, "36e1ae6b38813d9cd38fd5c17b2eac18e62495560fc43bd45f6e93b7ce81689aed4b91175a6d36bca7fe57cd6878120dcf89accefe3dd6720f1f772a0bce38dea46a416cae645c51a5d1efd9e2fa44f77c"}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '&:-}-{#:\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+\'\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':{/,+]#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd39, 0x4, "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"}]}]}, 0xec4}}, 0x0) 05:23:44 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00;D']) 05:23:44 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="426eb6927f15a31de32686d71e2d24", 0xf}, {0x0}, {&(0x7f0000000140)="fb", 0x1}], 0x3}}], 0x1, 0x0) 05:23:44 executing program 2: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3f0000000]}, 0x8}) 05:23:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2c}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) 05:23:44 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, &(0x7f0000000180)) 05:23:44 executing program 3: mq_open(0x0, 0x0, 0x0, &(0x7f00000088c0)) 05:23:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000000e40)={0x1ec4, 0x0, 0x4, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x12b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x55, 0x5, "36e1ae6b38813d9cd38fd5c17b2eac18e62495560fc43bd45f6e93b7ce81689aed4b91175a6d36bca7fe57cd6878120dcf89accefe3dd6720f1f772a0bce38dea46a416cae645c51a5d1efd9e2fa44f77c"}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '&:-}-{#:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+\'\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':{/,+]#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0xa0, 0x4, "2813c54cec4365ede5a38c4f6c37d61837ef2acf1beececa9330b3255429f73e67acbdd4501190ef2985834727f4a25049a6b4fe5070098023b7ccb8a3699eceec8d996215fea37ce8a3ff149bc6e86598ef58561ce369245e734393c148275a32ad06adab7d2d5602e20bc15924dd4053652b1a764c6ec17729035970b70fb9bf5e5b5d568185de81be0f6faed5c31ce692213d36fa014ab9005f3e"}, @ETHTOOL_A_BITSET_MASK={0x75, 0x5, "9467f5a554af12de682caf3dee7c974ac169b2c87d39e6af796455f2ad41cb4438b303609781f00c1d74c09426f2ea371343d427044f5d01628dfc55f2169aa727ac1f18a91ffccf33e323d2c65693e6d5b01e908b208dbd5aca4812afb4d19807549961334d706012cc01a6795066ba9e"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_FEATURES_WANTED={0xbfc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0xbf3, 0x4, "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"}]}]}, 0x1ec4}}, 0x0) 05:23:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/ip6_tables_targets\x00') fcntl$getown(r0, 0x9) 05:23:44 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000040)={0x0, "f2686d6f1a8a7839794df478f3928712eebede54cd47b1e85cb740f1bafc90d7"}) 05:23:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_u8={{0x11}}], 0x18}, 0x20000004) 05:23:44 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fork() ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) sendmsg$unix(r0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x38}, 0x0) 05:23:44 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x0, 0x3938700}) 05:23:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f00000001c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0x0, [@dev, @broadcast, @empty, @broadcast]}]}}}], 0x28}}], 0x1, 0x0) 05:23:44 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) 05:23:44 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)) 05:23:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r1, 0x401, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) 05:23:44 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 05:23:44 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x0) 05:23:44 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=0xffffffffffffffff) 05:23:44 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:23:44 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f00000057c0)='/dev/audio1\x00', 0x0, 0x0) 05:23:45 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002bc0)='/dev/snd/timer\x00', 0x0) 05:23:45 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 05:23:45 executing program 3: syz_emit_ethernet(0x101a, &(0x7f0000000080)=ANY=[], &(0x7f00000010c0)) 05:23:45 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg$inet(r0, &(0x7f00000030c0)=[{{&(0x7f0000000000), 0x10, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x24000001) [ 123.262273][T11688] binder: 11685:11688 ioctl c0306201 0 returned -14 05:23:45 executing program 4: syz_open_dev$I2C(&(0x7f0000000000)='/dev/i2c-#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001580)='net/ip6_tables_targets\x00') 05:23:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000003940)={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 05:23:45 executing program 5: mq_open(&(0x7f0000008880)='/proc/capi/capi20ncci\x00', 0x0, 0x0, &(0x7f00000088c0)) 05:23:45 executing program 1: sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0xc4e8724aea0d9662) 05:23:45 executing program 3: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x726c}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3f0000000]}, 0x8}) [ 123.377210][T11701] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 05:23:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'veth0_virt_wifi\x00'}) 05:23:45 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='smaps\x00') 05:23:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x30}, 0x0) [ 123.430383][T11701] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:45 executing program 5: io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]) 05:23:45 executing program 3: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200)='mptcp_pm\x00', r0) 05:23:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'ip6_vti0\x00', {0x2, 0x0, @private}}) 05:23:45 executing program 0: ioprio_set$pid(0x2, 0x0, 0x4004) 05:23:45 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) getsockname$l2tp(r0, 0x0, 0x0) 05:23:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000002980)={0x1d, @dev={0xac, 0x14, 0x14, 0x3b}, 0x4e22, 0x0, 'lblcr\x00'}, 0x2c) 05:23:45 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x200000) [ 123.586031][T11731] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f000000d140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 05:23:45 executing program 4: clock_gettime(0x0, &(0x7f0000004240)) 05:23:45 executing program 1: syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00', 0xffffffffffffffff) [ 123.658011][T11743] IPVS: set_ctl: invalid protocol: 29 172.20.20.59:20002 05:23:45 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x82080, 0x0) 05:23:45 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 05:23:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:45 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000140), 0x4) 05:23:45 executing program 1: syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') 05:23:45 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000004900)='/dev/audio\x00', 0x8202, 0x0) 05:23:45 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x1f, 0x0, 0x0, &(0x7f0000001fc0)) 05:23:45 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 05:23:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 05:23:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001100)=[{{&(0x7f0000000000)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x18}}], 0x1, 0x0) [ 123.846791][T11763] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001100)=[{{&(0x7f0000000000)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x20, 0x0, 0x7, {[@end, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @ra={0x94, 0x4}]}}}], 0x20}}], 0x1, 0x0) 05:23:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x208}}, 0x0) 05:23:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:45 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/net/tun\x00', 0x0, 0x0) 05:23:45 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fork() sendmsg$unix(r0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}], 0x30, 0x20000002}, 0x1004) 05:23:45 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/net/tun\x00', 0x149100, 0x0) 05:23:45 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x10000}) 05:23:45 executing program 4: socket(0xa, 0x6, 0x0) 05:23:45 executing program 3: write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28}, 0x28) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) 05:23:45 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x41, 0x0) [ 124.052851][T11786] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000000e40)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xeb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x55, 0x5, "36e1ae6b38813d9cd38fd5c17b2eac18e62495560fc43bd45f6e93b7ce81689aed4b91175a6d36bca7fe57cd6878120dcf89accefe3dd6720f1f772a0bce38dea46a416cae645c51a5d1efd9e2fa44f77c"}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '&:-}-{#:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+\'\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':{/,+]#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd4d, 0x4, "ef922857cd01a11239985f38b2843ee79a4270581c114300053387629722babd88e7ddc760c48ae91addfcfe414146b24a7542896a5ee5e2f829ebaa0f1aeb2f7fbfc66a5ab45f8a0be5ce4491b11fa2aeb91e2508104ff1176514488f14f956e25a47bbb3b21c62769266a0073108e236f5675bba9b3777c313a30b420451c582bb44ba51c701c1cc80558a00a7f5430b07051401da42458522576f908bef0e155e95de7238e1753f6636110630c9af7a6771dd6b89a4bf8e7b392eae5517dbcc8426815178e8ef301fb1bcf172b9d3e01f389f29df985e1355c3f92d9b95ff4a5535b1613771e9c8ec84225e8e031a1e9674d29d49886eaed16e2bc5679e2d2ff8d7aa81cb04d2724681b23a1f1ec03b30fed7bb2a5347e428714133f77cbb0bad3e80a9d34d4d09ec4287d3b54551ab552f7b447a54708300dd6f171b2c9bd0e6ea544657130a4c9c48f6b40f070646a9794f879c9d37efcc6be0c4634e091d69a4ea7d80e6602374a20958ea8be54988c05fccad4042d783d5087548f4659741d521cc6849497ee84e2312b9c938225714957ef53f9b8686c4dd093170d9495c19469186009b8926871394a075f78a81979ad13404022ca6e1c0aceda466885c7e9d08cb23d6287f7fb8e94b623932655b345c60be6d792d91ee463f41df099adbe4fb0b9f35e42368b0da0cf9215f87da2dd5c924238759dee604cd60eeb822a67a9fba8e6d39f23dc09aee93e4f53fdf44a6fb7fc5dd6e02ee1ad71d8f8da3d8a0d346afd348622760be4c1d3c9aad4b391d332ea6195dc967f000884aad238543470b29cf12474d310074c178a47b2adee609abe261f3082f36d1e1f6986f00475129afd6d04e041d65034be94b8dc1c0fcc080ec93abd63a2c13a814cd264f212357965b1fd4821649bbfb3fdadaca4080b24a427369935e3dfde948f8e9c26e49de804a8154ca568f29d31f9268812256e07817009e6e16288ef75752d13c4a4ced967a959347e8f1b5cfda5bf0b739394042e7eacb8bc1bd3b10e4f4761facfb5d228beecfb892953b824de70faedcbe3d5025583c92f83bc91b0f80f4664d66b73e6489bd6be416cd7cdb552aff110343791ce87221eb16b1c960681bc130bd8eebafe48f2af360d4abfeaec642027f6ba5c2280c5c55fb534b6892cf5eac718f1df7929d7f28f6f31ba6e122f5228dd079d7a1817212999ea2f0717c26aba9ebdc1e29e3a5434e55911d279746bc71a47093ff41903814e1be56978a0d6b94490d89d8d532aaef71645369fca2949b77c7195bfc4399327656cb25c52e119793bc97debb60476e45042ff271384a0be6167017ec358fb9de33f1883752fea33d409b8ba2a7c701b37340df133109f78d2f6efe6a9bbc31e61a671b311284a28389c0d038ef9e7a8674323b090b9ea23bf9a811b2adc2c30614cbaa01553f63bed9da4bdf502799b1c1a590178f37816aba6b0b6a7d17d2ba340537d4c808dc271aa19c682b0b3678ebfbc5c34f1d917bfc64dc767e7132a2b3b4988aaa3e0d1fa189e691bc3662f575abf06dfd347695b2a451718484f556e1d4c8879c94dd1b3eb3cade420d012c82982f50c0cca729b0b98d2cd1c01a6ce51fc1ff371a022177b9f627a14f84321e5903e3c32b9ec3f027e6a23d22aa77bb1276ee40ea9fc546da61a92e430ef3effa474fa3151a43761e8ae6eb96184f3b9c9ef3b98a73babde6bf1c0a9a9305c87f7e4af84fbf2329d44762dcd4daaac840662f3554608de84e428081e5782d26f542e6719236ecc5fc2a63972c9b64cf6c1cfe78547c22867afddc083ceb9726a7342b23ac1fdbd6d978baf678b590081377cc62dc2418e44fff52536fcca19590f5ef0d01481f0f046d2829e946475cdf72e5704b7bb406eb34940813acb5ef9ac34667697c5e44f9c6788af8007d04f5a056ba63ecb4fa3c61bc569a52723237fec799a0d856382726ecc958beca8cebb3f1817d5b92d89549b7203294c66a93e60402b686a7e3a0c5527c9da2d09bb128628f35bbbcba83c566ca3316c61d9d346c11cdba199de85bd3bcc7e1b1e460776dfb4d01f662a0012f293aecaa6d6234e5b02b2fe44ebd274f541f7c525b5f098cb58d99ccad01a9790ccc463ffd313d09c3d1cc28a7444b851ab35ccef84bba71f70926f383a3b88aab0571a093c2de5448833b92929d67326bc21b1f88aedf872ac6e96077627c2082f82c28d1e827a8d659695487e3ba9b0e8555e709b1c10874af84d2dfdf3d5cc6a470ba7a98e97e831286755c179ee156cb1ac1819a9c1885ca27553890d916a023a9c222940c2f8d3ccda62005a7ded3285486786a0bc6cf76c8f2f8d48f52f700d1a9c652af030e13f958f7b50bc72853d4487a021e91420fd52731ca318289de92177b8b1e259606cb6e600bf449eac08af89ae524d101eee8f8cc68c69de0bdf4644914b1383aa376b1b0efcdd3f044a6d2ca2e626bffb24ca79d44e4c99ed9519aab5f43cdb8545089f394a3e79bb743025174207df36396130208ed79c928a74bc9409b5e86124d9d110d89a321c455ad3c31b597debb3df97951ba72cdffc7e39e07f9d7d6e9ea1234bec458f55ca2f46937185cfc36e752a2c9633b8087b27bdc4c97339aaa9c49ce0943d48962084027969661d300340cf059f3a61e42634069b5c5bfc5a5a6fe2eb14acf8f55b4b2d69a616e0bb254b2f61f57fb4ea0caea166e5919c71895d7f765fcb93b3e472d8939381f4f8ac700432b4914dbd508c4e33d4885fabe6d1a21f843bc7a8a5c970c1ce1d98982bac5abc2c74ae33d32bd2f98adbe71d944201ff35590f69f88814ffc0532b596364f47f9a7ed05840a1066b0326522855a30476397616741a9ec4bd3c1d20373100a0cb8fb6e1bb17d619f86e0314aad7c34fb5edca941aad98bac40ad97ab8709af3d133db3dd0e6ec210711665c20d9f8cb6a0a10e9149512343a894af6470b59813de38d1243b9ca025a740dc2dc95f8f96ee4f7eefdc55aac797bd8f3cc19e20ec8794eed9fb029b0205eadee50f93c7aa588c5f693961ebef483cf086ae051e60aad1ccc7bb7e859bfd4237c87506db95b1ba6680a387d49bd876cec94cea74b734c2c35dabf8c1c672b7bb32d6002317e10da0e0f597895e7f56ce502213a6aafa0ee3df234c7e2b194b6f155728dbca52a19b7338c3ab283b5f7d3439cc3df5af454d90c7494ed4ff001446afee2e0452c1cf40dacc851384417574f7ad8cfa79e52140f95825786af957d9cee271160101e62ea6a91846c457e21f33a6499cc1fbbd66360f23a05d79e83b2239b99f0be72df884e038f173dc16180eb43dd19b6a40e7e3e3fc8386754c03b4f9a92db7c6d389683ded144524343fc4dc6298846718a796281fea63f544a1895eaf2e762ab5b22fa83fcdb89dc99a23080c1964ca595e311d00f2e82013d971c13add2503c62969afe8bdb3593f6eb0c7a9a5f9ed3bed321f6420330b11786595b97efa094b2566ec1f575cd48bbc67e2f07d0b882be24336003f243f1c73f7204257f5ca9d3894d522198c88572269091ffa224eef3c3d22da1982542695c910c3a3f268808bd8f5d3870c1e509e0daf325a4e679ca5499eafc35c093c33e211cf843d355fab9c9065415a4383da94938d33de4ce5236164d9b0f382c9bb6454c63df252f25defb75f1fa5902e7e727181b346f8ecb2039546e924d8fe9c733ffca068fdd18191cf2fd0445978c014bf06612925e18507c9dc74f5776fe1bcf8d7c0752ea9c38122d46098faa1ccaa399cc36b2a08c321f2b9b0e41e60d73aafbfadbb735ba2b05561a8879785838f09d51815f72802c509d58ffe8f8708cd405e97f477dc1743dde6fbddc248d21786824013e9e3462701ee25423bb99a4f2e8c48096bf265442f25497b14c5cb781581ed28c29159b71971205bc450cc28459fd0b488ce92c411beb28f501e737f3ec8f865b5c52c8499bb463fc851269f30c71467ee47913cd2fc2e1a2a595e4788bcca93201583f81bbc7f8dca58da036f5ee0d47abf1de70c8c150f70b60288a24975823fe3b9a73d8c5e20bad6de6da076d3741639c67e88a8ca2b994df64a00397586893dcbdab64899ca9c3247a286d608630f53882f1f10a0cbd797a388069599bc3395dfd2a4c332d98136c30664d8a7aa99228da35ae42d8dfa376f8c77805b17fb5b3e86add8e81ed39b3a7d39378cdee981913fb31e1bb332cf4be530d9e2ff0d1f734062c749f12264d131c6b4f96bc89c12ef66cfa7c30cd5dca25c48f11263ca238345220e6a8fee378cb3f3a6f0efecfb099fd7247a9b320194d2ea99beef7600b22831f1bda1c8840938bdc201b1da2b19a4f1181acb84b8088faed39d92d18bc83d12216d369e507f89dfb1943159a9591b344907e5ecc2e42269802ec4b6fd40c1250e6a360680134c453bdd03cbbbae7ac5987d7159e38da0fac43b11bb82652e4b05d367cd2f08198576abe535da5c40f8a2dd4d77c7db2fb9b4544833b4ec09d004229493fbf74e4387ecae91849731c468c20800a83587181ea0974b2522e94308058c96abae8818e858e87dec0eb57e1d429794affa849a60b2c06e885a1b27139223148c43bdf04e11a8d1a09614c3604492ee0f0bcd8a2023738cbd04a917b3c623e3108b620903656e057a78e4eea9a5ef137e4161cb089e19f1b105df2ed5b401a40042f269df119a07b9de99240fb40673e00a8b79d0abe4f8022d08c93353d365d4e795d8b83f8ff716baed878d35330116660076087326"}]}]}, 0xec4}}, 0x0) 05:23:45 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x726c}, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x3f0000000]}, 0x8}) 05:23:45 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)) 05:23:45 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x84000) 05:23:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000019c0)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000000c0)="d90854c49cb91e378fdba70d8af6540d3ed0e1529069d4bb60607bb92d308698544e08ebf7b84234f52f588dd0835335c1d52caf2ce5f933021d7af95b609ade612079a40c6ef15b33b208ca60e2f80020a7f21fe52bd61bed7541652473ae2bc0c843df3fa26045", 0x68}, {&(0x7f0000000140)="5827575b0b6afafa19d970ca756a19b7480938c4c0215a86912a24df563297c4ab3a91d511764175c5262cb51d89ba4d4f922e14923c173ad84c748e2ef00335763e70cbfec3705866cb0575066e2f33775b9d0d4ad3001e3080fe49ac59929e4396a8096b2018cf1de91faa9db64a9ef415530c0e62507a8ffefb89c4354b65ff2069e80b59ccc9f4e4ac48e3611017c794c7caca3d01a4f88de06b66f088abae", 0xa1}, {&(0x7f0000000200)="5dfdf30a15df096f0df0c5c5acce625888ecf508ea3aa01776c446cb35c8808a767cc00cfa900462b30d3494146fb134c09353560b5caff415734aec1f8ba8069a8de0a17a042ca18b41688f75e8c501afed02f99cd225695b93dac658", 0x5d}, {&(0x7f00000002c0)="76e16e478dfef9638acfdf53a9687c687addf828575fb170cbd7d5b7bfd2a0590b73b450bee6a20cadacbeead362c0e93415cef72805a41e619a1c89eff0276b7b7bd692449bb361c89dbd238d458d4d38644f5ad2c8984e466e4d0bfcd10f7c840ca088f971ad4d731ed6d514f613383229bb6c4dba1e51bf1e0f7934c6ef41613a729bdac84e66248d1de7f3", 0x8d}, {&(0x7f0000000380)="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", 0xcce}], 0x5}], 0x1, 0x0) 05:23:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000019c0)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0}], 0x1, 0x0) 05:23:45 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg$inet(r0, &(0x7f00000030c0)=[{{&(0x7f0000000000), 0x10, 0x0}}], 0x1, 0x24000001) 05:23:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={0x0}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) 05:23:45 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 05:23:46 executing program 4: r0 = gettid() sched_getaffinity(0x0, 0x0, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/mnt\x00') syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00') [ 124.229002][T11816] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:46 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000005600)={0x0, 0x0, 0x0}, 0x0) 05:23:46 executing program 1: syz_open_dev$media(&(0x7f0000000d40)='/dev/media#\x00', 0x0, 0x4000) 05:23:46 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {0x5f02}]}) 05:23:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:46 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x335001, 0x0) 05:23:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00', r0) 05:23:46 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000003180)='/proc/bus/input/devices\x00', 0x0, 0x0) 05:23:46 executing program 1: select(0x40, &(0x7f0000000000)={0xaba0}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) 05:23:46 executing program 3: r0 = getpgid(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time\x00') 05:23:46 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 05:23:46 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x8}]}) 05:23:46 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_netdev_private(r0, 0x89f3, 0x0) 05:23:46 executing program 3: syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@random="d8", 0x1, 0x0) 05:23:46 executing program 5: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000006280)='TIPCv2\x00', 0xffffffffffffffff) [ 124.523513][T11850] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x401, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) 05:23:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:46 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) 05:23:46 executing program 4: openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair(0x0, 0x4, 0x0, &(0x7f0000001fc0)) 05:23:46 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:23:46 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)={0x14, r0, 0x4650d4ec08e3e70d}, 0x14}}, 0x0) 05:23:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, 0x0) [ 124.648830][T11872] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:46 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/net/tun\x00', 0x2ae101, 0x0) 05:23:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:46 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/bsg\x00', 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000001a00)='SMC_PNETID\x00', r0) 05:23:46 executing program 3: openat$sysctl(0xffffffffffffff9c, &(0x7f0000001040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) 05:23:46 executing program 1: socketpair(0x2a, 0x2, 0x0, &(0x7f0000004540)) 05:23:46 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:23:46 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x5c00, 0x0) 05:23:46 executing program 4: getresuid(&(0x7f0000004800), 0x0, 0x0) 05:23:46 executing program 1: epoll_create(0x1000) 05:23:46 executing program 5: openat$vimc2(0xffffffffffffff9c, &(0x7f0000001880)='/dev/video2\x00', 0x2, 0x0) 05:23:46 executing program 3: timer_create(0x2, &(0x7f0000000000)={0x0, 0x22}, &(0x7f0000000040)) 05:23:46 executing program 0: select(0x40, &(0x7f0000000000)={0xaba0}, 0x0, 0x0, 0x0) 05:23:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="8802"], 0x208}}, 0x0) [ 124.896252][T11897] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:46 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) 05:23:46 executing program 0: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x4000) 05:23:46 executing program 3: socketpair(0x29, 0x0, 0x0, &(0x7f00000000c0)) 05:23:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @private}, 0x80, 0x0}}], 0x1, 0x0, &(0x7f0000004040)) 05:23:46 executing program 4: prctl$PR_SET_NO_NEW_PRIVS(0x1b, 0x1) 05:23:46 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x200000) 05:23:46 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) 05:23:46 executing program 4: io_uring_setup(0x16d7, &(0x7f0000002780)={0x0, 0x0, 0x8}) 05:23:46 executing program 3: mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) 05:23:46 executing program 5: syz_open_dev$I2C(&(0x7f0000000000)='/dev/i2c-#\x00', 0x5, 0x101800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = getpgid(r0) syz_open_procfs(r1, &(0x7f0000000280)='fd/4\x00') 05:23:46 executing program 0: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x50040) [ 125.097786][T11932] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:46 executing program 3: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x80000000) 05:23:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:46 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r0, 0x8000000) 05:23:46 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) [ 125.224559][T11954] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:47 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fork() ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) sendmsg$unix(r0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x0) 05:23:47 executing program 5: sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0) 05:23:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', 0x0}) 05:23:47 executing program 0: select(0x40, &(0x7f0000000000)={0xaba0}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) 05:23:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:47 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dri/renderD128\x00', 0x24000, 0x0) 05:23:47 executing program 5: syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x0) 05:23:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f00000001c0)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x13, 0x74, [@dev, @broadcast, @empty, @broadcast]}, @cipso={0x86, 0x16, 0x0, [{0x0, 0xb, "0af31ab466fb993eaf"}, {0x0, 0x5, "d7f5c8"}]}]}}}, @ip_tos_u8={{0x11}}], 0x58}}], 0x1, 0x0) 05:23:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:23:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:47 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x680c1, 0x0) 05:23:47 executing program 1: memfd_create(0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 05:23:47 executing program 3: syz_genetlink_get_family_id$team(&(0x7f0000003480)='team\x00', 0xffffffffffffffff) 05:23:47 executing program 5: syz_open_dev$I2C(&(0x7f0000000000)='/dev/i2c-#\x00', 0x5, 0x0) 05:23:47 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0xfd94) 05:23:47 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000002e80)='/dev/audio\x00', 0x4200, 0x0) 05:23:47 executing program 5: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf141b3519839cb19) 05:23:47 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x141140, 0x0) 05:23:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, 0x0) 05:23:47 executing program 0: syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000280)='fd/4\x00') 05:23:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:47 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x3, 'gretap0\x00'}) 05:23:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x208}}, 0x0) 05:23:47 executing program 5: connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) 05:23:47 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000061c0)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) 05:23:48 executing program 0: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x22001) [ 126.243522][ T3236] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.249817][ T3236] ieee802154 phy1 wpan1: encryption failed: -22 05:23:48 executing program 1: socketpair(0x2b, 0x0, 0x0, &(0x7f0000000280)) 05:23:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) 05:23:48 executing program 4: syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x412002) 05:23:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz0\x00') 05:23:48 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18}, 0x18) 05:23:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) 05:23:48 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 05:23:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) 05:23:48 executing program 4: r0 = gettid() syz_open_procfs$userns(r0, 0x0) 05:23:48 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x0) 05:23:48 executing program 3: socket$inet(0x2, 0x5, 0x2) 05:23:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2}, 0x40) 05:23:48 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) 05:23:48 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x300, 0x0) 05:23:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000d80)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 05:23:48 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003180)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 05:23:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) 05:23:48 executing program 0: r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000100)='net/stat\x00') 05:23:48 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100)) 05:23:48 executing program 4: fsmount(0xffffffffffffffff, 0x0, 0x4) 05:23:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="94030000", @ANYRES16=0x0, @ANYBLOB='s'], 0x394}}, 0x0) 05:23:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 05:23:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:48 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 05:23:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001100)=[{{&(0x7f0000000000)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0) 05:23:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00', r0) 05:23:48 executing program 3: socketpair(0x2a, 0x0, 0x0, &(0x7f00000004c0)) 05:23:48 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 05:23:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:48 executing program 1: r0 = getpgid(0x0) r1 = getpgid(0x0) rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x3}) 05:23:48 executing program 4: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) 05:23:48 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 05:23:48 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000004300)='/dev/dsp\x00', 0x4000, 0x0) 05:23:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e00)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 05:23:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @mcast1}}) 05:23:48 executing program 4: timer_create(0x2, &(0x7f0000000000)={0x0, 0x22, 0x2}, &(0x7f0000000040)) 05:23:48 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0xff00, 0x0) 05:23:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:48 executing program 0: syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00', 0xffffffffffffffff) 05:23:48 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/230, 0xe6) 05:23:48 executing program 4: ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttynull\x00', 0x145000, 0x0) 05:23:48 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x200000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 05:23:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000023c0)={0x0, 0x0, 0x0}, 0x1) 05:23:48 executing program 0: openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x40000) 05:23:48 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$sock(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 05:23:48 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4400ae8f, &(0x7f0000000040)) 05:23:48 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 05:23:48 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 05:23:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x38}, 0x0) 05:23:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000001380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10}}, 0x90) 05:23:48 executing program 1: r0 = getpgid(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') 05:23:48 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4400ae8f, &(0x7f0000000040)) 05:23:48 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\x00\x00') 05:23:48 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) 05:23:48 executing program 0: io_uring_setup(0x0, &(0x7f00000000c0)) 05:23:48 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 05:23:48 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) 05:23:49 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4400ae8f, &(0x7f0000000040)) 05:23:49 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/meminfo\x00', 0x0, 0x0) 05:23:49 executing program 0: syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = getpgid(0x0) syz_open_procfs(r0, 0x0) 05:23:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 05:23:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 05:23:49 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x0, 0x0}) 05:23:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x401}, 0x14}}, 0x0) 05:23:49 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4400ae8f, &(0x7f0000000040)) 05:23:49 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:23:49 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000100)) 05:23:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001100)=[{{&(0x7f0000000000)={0x2, 0x4e22}, 0x10, 0x0}}], 0x1, 0x0) 05:23:49 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4400ae8f, &(0x7f0000000040)) 05:23:49 executing program 1: io_uring_setup(0x6d31, &(0x7f00000000c0)) 05:23:49 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='wlan1\x00') 05:23:49 executing program 5: openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:23:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast1}}) 05:23:49 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x142, 0x0) 05:23:49 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4400ae8f, &(0x7f0000000040)) 05:23:49 executing program 4: alarm(0x10000000009aa) 05:23:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2100, &(0x7f0000002200)={0x0, 0x989680}) 05:23:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4845) 05:23:49 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000061c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) 05:23:49 executing program 0: io_uring_setup(0x16d7, &(0x7f0000002780)={0x0, 0xb8b9, 0x8}) 05:23:49 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 05:23:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:49 executing program 1: openat$mice(0xffffffffffffff9c, 0x0, 0x401200) 05:23:49 executing program 0: socket$nl_crypto(0x10, 0x3, 0x15) 05:23:49 executing program 5: syz_open_dev$I2C(&(0x7f0000000000)='/dev/i2c-#\x00', 0xa646, 0x0) 05:23:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000000e40)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xeb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x55, 0x5, "36e1ae6b38813d9cd38fd5c17b2eac18e62495560fc43bd45f6e93b7ce81689aed4b91175a6d36bca7fe57cd6878120dcf89accefe3dd6720f1f772a0bce38dea46a416cae645c51a5d1efd9e2fa44f77c"}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '&:-}-{#:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+\'\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':{/,+]#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd34, 0x4, "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"}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x40}, 0x800) 05:23:49 executing program 3: syz_open_dev$I2C(&(0x7f0000000000)='/dev/i2c-#\x00', 0x7, 0x0) 05:23:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private2}, 0x14) 05:23:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x20}}, 0x0) 05:23:49 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) 05:23:49 executing program 4: syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x41) 05:23:49 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8}) 05:23:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001100)=[{{&(0x7f0000000000)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}}], 0x1, 0x0) 05:23:49 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000051c0)) 05:23:49 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) 05:23:49 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4400ae8f, &(0x7f0000000040)) 05:23:49 executing program 3: syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x0) 05:23:49 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) 05:23:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f000000d140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0xb0, 0x0, 0x0, "902d916b4ea24f6e0344c3da4b915f452709b57be3f79d19562cc35c089216097c52e1d1fb05dd61e07355f1ad3513cbe053b0e3bf9174e05c7e4563e6efd85c8670f5685563d5c16f5b2e4dd2f887e954d36d8f874617dc60c67bea504ab439d15b6e798f9ba3b2fa9a869f86ad72cd2c03072fd435f1debe6976230166bd5d3a1c5909fc1d12a0cffeee8adfcc28756c7b6f8ad9910e1b97"}, {0x108, 0x0, 0x0, "7c0d7b8c473198fab5a313ad2af679ab681ce817c7d50c52c402d844ca11a6318b18479867abced1772de6f2952add07d1b8986d91684c039c4da7f9b9349e8d6f4184e4937a58e4fc7b5bcb70f743208f263e13ca92d00d08c16ee99a193943be8eae6af3dcdb617af8968bec10e28daa8853750d04090e9dca54f7cf7d6ad78876237e2edfc2de3c28a904540c78d3bd8ae297dda9a69a2bc96062cd79c738e39bddc27aa1c27023cec2850bb7d467de692b87a44241f029aeb061fe8953aa2f06db07422e9738f0253bde5e34d5edf91b5f94ab3ca7774098df8e238ba2d8e36f1de884fcd6d5f34f185c749d52ccc7"}, {0xb0, 0x0, 0x0, "32e8d5f501d770c4e32e6acd330c87650c9e1bc76e0853af3dec23c1a82dadf2a54bbfa2337f511ae602ca464803ce7b07cc4683f78f258a81b31ed2f93d58d87064e99e89870fabd98c9387936310b98e39389e533891ef25bc81b7804524ab8a90201f6839bdc393718742a5b0014d666facd52436e398ab84556c502142228567470be31e81a75b21fc9cac3a9504dffb691463a146ae03"}, {0x18, 0x0, 0x0, "c4"}, {0xf8, 0x0, 0x0, "ff9d67425e0d86c66952b29c23220a2dd82fcb671d8d8188f4d76ab30536a1cc203234068ba0ca072fb7313f05d1f3d67d4008002d55ac5463bfe1d36f626a584f7a66ca60bdc4ccab9fcd6a05a72f9d491a93d3b46160234df20656647d47ee4d24aaaa551e7dc1c036680d94570aab05aad772c348559f7a1ea853ef76697130d94f78ed47afc02cb523264f8015a1c6597fa2a8b1c565cd45ecd373781a962b42d6d1ca72cbc2ee46481b291a61b31e3757547c6c2358d1d5810acb888521d48b687ed907a88845177716de613d7d7c00565226e37d0834b7af454edd9bb7ee"}, {0x1010, 0x0, 0x0, "252a427e31168b99a05bffb003134fc020a5d25644032795ded8d0d960fc9c312e4df27a42a3d9051c515563952acdaa5ea3e534d576ba57d67fc355d48b8dacc54b4e12f7e4c8c8740b84c3a912c35cd56e5be9ae9b591f0db63038a90c53fd471aca1c283a838b8651b657a1d1e3115b25ed5cd4c4de1010854b7c5900948323f68f5342e24543b8a01f6b3efb8d726a40b1e67fea04e0352d9daa4a2bd2e58759b4d5254ee196c71da05275f31707bfd96bc10e0a44146398b51ae2d54be9df7a59ada405d7f930cf8d611089316d11f10a5a18fca91915fd1d95233d4bd99f07d655afc6ddd6238f125dfb0e6e86c7ff2f1e294b633b567999a04ecfd6ec46907acb4c026249b370c8f6b2ee2f14944ae6c435b15bb0442beb20d06b4c0c83b3175999eab428e245487daf85327fc9d9d248e693c51b28a2b99c6e78494f51b9c5e1d081b0505bb67b2d69382cd45bc82580a2142a58582dca778343f4556399e25108820b4854cedde9164b8c36fde5820c7b36c04af4d904537ac3dc11e98af0557a61466704e8effe8190a261a3562a95dfe3ad4c726fd15e7110ee64efaa48b214d4975843f40f7119ad952b3501c07f35e312ad4267ea0a581d23b450d96c3e766f6b6862559e0b7e5f1c393604240402c28299ba67379bf56793dd73bcc87d1e6052499434a670849aa6bc0a79564f42f7759e02d8b338ad7b23104c207fd2c6da10c9099b656d13c6e96c1789674c96becd2438f9b8e31fcc4fe333cba13b40a2d5b3811aacf5ec58f06ee10e1c9633a0923c6efabc5f5b10c2b0fbca30246eca10cd50df51ffeb4b14003d8a7d33e1097b92df1aca1524eddc51ff9e4756962dadcab358dece8ad20414fb35f027552f17ea2124a83ee6b37dbb84ef60c5af543cdd9b4a3c997d476e3ab4cfbec6cb35b81ce7c83dc4890f3d68acf168227aa7ac2258f7337b71356cc4d24a93f64d6df3a40f742db87e6caadd45001de9b9b96e99fff8be8bdc3c2f7ed93d364102547f7bedadd1f80c12e24030c65867e648053b39d9d3769783d9fd1d25a248672241877732def19c57802e16bf4f7c9d238e3dbba22b292cc483e3e9b8e28ddc0bef7461beb547425eb0c9e771370b516eb8fef4c65ac86c513a60d43e25ba38eabceab19fafd03337329075b864cb5c1077b5cc8057b86eca9789af2be85970d1066646e9809fcec2375b91b856c93543522e02a7107c035401709be5627c08f2ddf1f69e78ae39d7df87c8138f89110958f92f6aa157c31833469556374758756f647f55e7ab12c697c0f37ab18e477c8514d362f5a7fcb6e39831d1720a36a4ff0450236eb6be658ad05eb49b9c7859b64873ec5e44040aa3a8c3c70c991f7a036373034c384fb84e1909ca92b0a248bb8463ddac5289af7485965b5c374a949578ab0a38448686e7c9a865d7b71cff7b847c87a3f89e3182b62fd63e855fb0d1d0a5a6ad84474f79d3bd56f658fd477451c900ca33a75f98e7ce0c753acdd40772652c624f30002eae1c9dbb441b8a34501f5710346adaf43c09cc08a6c2d2ae798e80b9043492dbe4aa2efdaf34819a0f02ac569366b82f4fe4f804ed8803688b27bb8a30485337353c3d21a21edea65f0ba39464062a45c196e4a9c32aa445c7f4ecc9fd6885c92e11c57ba6116843bf43d155d3f626c7d44a71ad9297c30e642e9d781a94d807e23678280938e36fb25d2ef1f889c27a86064fdbf0cc9044d76d1b2b44f781c62797238cbced5b589faeb09dca80bdf303e8c7915ee65b65a24ca1a13661c6172077ff7dd6def6b6ed6fde85a979f34aba143b5c252410a48af9a93f2164480fc8b64dbff83ece4ad1c963328ac076cd5311f397f9ac7cc361ff9bf9d746899fc9ad26735c82d30f414c39a2f9d20afe4cd3bfe523665c12ab82fd48ac8ceb080afb5948a5ca500f6a1cbaa9e5c9b775c59c8cbcdabb23f5fcceb7f398f2168216c01c04555b40015c528184f78183b40c7362f7598ddbc957ffbb73c89c38babb79fab006d3a15a12474ba538c8000f795af91feb7817cf89a9c37123952e81588ca13be3d6eaf1110b3f197c6f9649a3c898f431fb16d56551d5dc2ad0684a429996d8edf9248a74410f73ee5d2ac85b7ecf6ae4315dbfd8f4965bb091177de67d9a56d9da6b70390542499dec455f48f2e90ab37bdefb0710de94440f04c3a96fb0d7d47fda59177757ee442c08f1d28fc2e6de724132bdd4159c81430f8fd71ea4a43a426801273eacee8287ba0f36240a5dbef0174cba4c847d297fbad3a6b1ab770222e1e18e3225f5e6de0fa138e039dea8569c21b510c93ff034428b331b93e5b9222f75bffc98eb9bf78bfd50233656d22963b36788b4d1b4f8b031d1aa2ea613e3c12be8ae0fefdea29074c48782a173d8821be8920050dacaa3e4baa857a9536d1326d136ff57d7dcc57d6650908ec4e73f7618cc966f62cfa6cb86e0e93b130fa276e108e63ae255152ae127435903913feb7e610b0ddc742759d921fa767b4d741d03a9496952d758ecc8582b2dee9ce9cf9fd67e5ddd76f42896c01bf34397ea91583502d71d06898bcaf84ba1a365c3b2c633a29ce5c6f23089f51b7ed43acbe0e06e72e01d3f3612789faf028b95a80b4dc8e0e350489edb8636a2e13cb5a705bc98d12df71cca74e8e20dd19c13c66cdb3872475a2fedd75885a0311c76a06dea184254ff6602959d27b38d9136e590755bf57031249754ab769792d8a639a5ffa02bada4bef6fc059190520c70f56daee5f6bc7ccaab9a6f1dd0276cc4e8ec37a33ce61a924068814764326477620ff48929984aee5edc3e8255e6ea04e99bc89a508df1e583b33fe8d843c9eed9f9769d7caed61b0fd0a4dcd8492da5eb5233ca0643d5dc83a0b4d340e5ee931dfec6c61a6dff8059b07969940f04d98dfadbdeeffacc74c097f12fb54def5a6d4fe32e122da78651cc2460d1389ac8ef37f3d6a690fa108f4daf586000b031f9a3d576ca237135bd1d8f12f588dcf606e11090127dcf95a8e7ce7041555c1ab0af169a2d163dfce073e398b9e250766cdde33226b7736220c0661a6c7fa45da95e4200b5c4970ff5dab441ccedcffa370ccf214977f7ec33ce79b6d45583eff2f3f1841e542d5e929daeb1089374ee51849fd3dbdd9a8b6be37ba9fb797d08e59dfd01e22c1b5c1d7384152c1d5493ed220b8d74c590d6ecaeff75d827104eb851247d6b0486a117545d6e8eec268b1ac1a8858c5b51668fd458267d4b22afc0d4e4341ae00e79c13d480c7c945301baee34c51ef249c4fec0010af858f6434fa5c6714e52c973404677da6ac85d91d14f58c968f582bdb132f367bad4cadab46e99ffe38205216a696ea9cfdc4d254efc4d1ee01cfac9218676bb40e424c5c6a5b78fedeff4c3be3ea7e96384ed46ab09e418714b1dc687aa6b2e395d481429331185cf0c7d6693a9b5829941b9703e89ccb5e0d303ce216e7963445783780585d5b0049ac095c8ba041b97100b2bf5ae8cc2b21670f7d37a7fbb82a4a63b5a2cbd121b350c8862c3691cda18ef1e76cfb63f55e2931ef2bb9a37a3be543924627d01fda6e9282b98259608b1cd49f3b8f2502b0fc37d9d1ce6eec09b5c1cf8c8a79e420925fd01fff1284eea0f0b9cf878211a34724ee14385ad3ee10bb511ae785e5e69e1a7a03d4256f0e25ddfdf183f16ff3f374d267f2f501e34b7368a47ecd5783e10928e550ecbb1e77ab62de8389f43b95f88c21e3caf8fbd6f6a2414c3688cdf9d54799bf00aca44bdb1c0a283a789ba64b55baf6d5c3653df5b968e37f74518d16e92ab0b3c67d426374c1d09b716ca1d0cb3420215834972b213130096d85108c1ecb1806eeb214d89591615e72ed430687c962b4571f42bbcda0b48b9d9ef12506ab712399ed31b13183d5fe3c98f982c48c9ded69b7f76997cb8cf6c03edf189f8a6fc662473b88b46f484c779f5931df6a44ef9eb8ba1c03de43c10a4586e551a4bcdee81358aada1979c827cdc9491e17ca9eda1ccf3f4a899f95a4d369190c26558b1cb9274f9d81c3cec23ef3fcd56a0b21b7d013116310495ab1b85e14ea284eebe3c44bfd1f732cc7930caa4a066e67c8c17d3973a8a111c5380513220c60b2bb943e2bf295958dae15ad5a49c147aa5e863c0870c578613d2f9532da4fbd28ad82593e4b0aaef589fecc8d583a08613c51131afdba6e51ced3a1bec877522ebd1f1d06fc1af6132e0b3d31a2a47626cc1520fe7142e11a503d72298eea6247f8fca5f3ad7c5bf23b904f6b699fbd6e54b97e6e7444729c32fef46f52bd6fe4c771754efb422486daf3f07bb13f7710941bea7ebbd101ba48961398b5bd7fac0e50af6b7966ec9a7ef26144f42cf9a074f922870e4da5ea9b7b88864f7554a98830691ea69c45fd94f3de054844b5c9cfc6f1fcc985c551e3a930d176a657b36bacd4b4a24ce2354c0bbdf037e6b8873ae5a9861b7999fd10e8256c7a6a0570fca7626de333302323787f39f13634bb8699a4f98d0d8d1b7394b3c7d45d957d196cbc0a06725969d131131a154242b23a80cddc96ef797c4d1defd5a63d8af52c5ad8be7dcc3de855fa699a4aea6b2d17a8f613b93d672c9bec0512794c5376d37050fc1a7b6b2b82fbe3bd7f39d1481b6e2a9bad166fcb669d2d664484507124d20be1e336151e1daf90d53a96dd814cfc1890703c723df450147c8a7c578e0f5620c3045d42603d25e92a208f1034032da35b292a1b78280de3965b9f9e2d4a623ae3c88223a42724651b5adc0332034037c2a662193ccdd3d2e694d2a48c3c16f27aa128ce01d972f262a0d0fb37422466e0b87080b34f8182a341dca3977f4e3e446034f35224deb16e7a8224945b196691b87cd2d5d806d19846279bcfc83fb0f4870ed15bedb288a09d3e58b724f97fcd7d16bba42b999f28043d912e95fedcbaec1a1c410f59b829dc04a543b699944c672eedf3105b0d8b96bb9d16c155c4e8b94ecb154249465ed3b0f6b20d0f78d1c182dca84b282ebe0d3c628eca649c65965c0be9ca232a75905cf59cd237ecf99c4197e3e1bf5e594c9cb59aa06a0314bb664f90492181c72100a3139330449205f567a2adbf4f780492c71920a91150c7851c570877694d2618fdf2e6c8d0af384b2e66932b93b7d8bab0dab3889f3304daf8e430be4f94260bf348982695ae5ba2e306a7ed1bb820208d0997e19fe047a51affa5b0d686c04b8d2890a1d53c92161f8eddbd6500e3cf3bbcd4b4380d2dfe7a77c9a61c29dd0bf15b86ca2c8a7a4c50b4f52e83ff56f4e1c46409ae220a5f5bf7bfd989c71ebcc4cc143f84e83486173d3924b62283e18591eb2907777f9752017b9f950ec1db6723a0664f41f6466a3ea9f6011abc692e001ec9198f541afcbde96e3244005feead0f883133550fc858f7a9f8c0b32b5211e7aaf66ab5da39edde5b59a943b7b9dd33967dbc421292eb7c4e43fb0374877683f43c5f0d7110fa9e817cceb1e5dad2774b44ce67375072e425ddbdd1869a22c4e2aac3e54d594c0633f0de4eb63bfdc6dc290f6f7718ed44553aca107d99f29eb8e999fbae13203c81174c37305490274b4cc90a631d330d994722166e78c78acb859dcec5ba36b342c8bfdcf7014f0d0c86de7f473b384b9c9ca0fc81982d727934dda3485e2a37f78134d0523c33e8daea66a29b029b89427ccba3c244341a5283f51d27e83c0bea9320b4b875e0ab51cabff4526d2a185"}, {0xc80, 0x0, 0x0, "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"}], 0x2008}}], 0x1, 0x20004805) 05:23:49 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3f}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8}) 05:23:49 executing program 0: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x80) 05:23:49 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 05:23:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 05:23:49 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4400ae8f, &(0x7f0000000040)) 05:23:49 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 05:23:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000019c0)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000000c0)="d9", 0x1}, {0x0}, {&(0x7f0000001480)='X', 0x1}], 0x3}], 0x1, 0x0) 05:23:49 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004ac0)={0x0, 0x1, &(0x7f0000004940)=@raw=[@ldst], &(0x7f0000004980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:23:49 executing program 0: io_uring_setup(0x696c, &(0x7f0000002780)) 05:23:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@rand_addr=0x64010102, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@local}}, 0xe8) 05:23:49 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4400ae8f, &(0x7f0000000040)) 05:23:49 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 05:23:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 05:23:49 executing program 0: getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) 05:23:49 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x11d}) 05:23:50 executing program 4: socketpair(0xb, 0x0, 0x0, &(0x7f0000004340)) 05:23:50 executing program 1: syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) 05:23:50 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fork() getgid() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x40}, 0x0) 05:23:50 executing program 5: r0 = gettid() r1 = getpgid(0x0) tgkill(r1, r0, 0x100039) 05:23:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 05:23:50 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000240)='K') 05:23:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000008a00)={0x0, 0x0, &(0x7f00000089c0)={&(0x7f0000008a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) 05:23:50 executing program 5: openat$vcsu(0xffffffffffffff9c, &(0x7f000000a2c0)='/dev/vcsu\x00', 0x105600, 0x0) 05:23:50 executing program 0: openat$mice(0xffffffffffffff9c, 0x0, 0x0) socket(0xa, 0x6, 0x1) 05:23:50 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000280), 0xc, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001900", @ANYRES32=r0, @ANYBLOB], 0x15c}}, 0x0) getpgid(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttynull\x00', 0x145000, 0x0) 05:23:50 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 05:23:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0) read$usbfs(r0, 0x0, 0x0) 05:23:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:50 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x14) setuid(0x0) 05:23:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x2}]}}}]}, 0x3c}}, 0x0) 05:23:50 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) 05:23:50 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f0000002380)='./file0\x00', 0xf6a) 05:23:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x17, &(0x7f0000000000), 0x4) 05:23:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x0, 0x0, "5b6e292720ad1c122716751da9bf189513d61d4796c07a6a60c48e0a829f91b97739809d64e869ae16798a44aad614fac6a21d3dcf2b3e871587f53cd809f98e", "f8b699c929b92ee722240b5b4c44a41eb88c87cff1866be0bec480ebc5c2189e"}) 05:23:50 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6}]}) 05:23:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 128.618371][ T37] audit: type=1800 audit(1617600230.343:3): pid=12378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14101 res=0 errno=0 05:23:50 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 128.688988][ T37] audit: type=1800 audit(1617600230.393:4): pid=12378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14080 res=0 errno=0 05:23:50 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xe0, 0xf, 0x6a, 0x8, 0x41e, 0x4038, 0x9514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x22, 0xa4, 0x3}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x1, 'd'}, 0x0, 0x0, 0x0, 0x0}) 05:23:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) [ 128.749442][ T37] audit: type=1326 audit(1617600230.473:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12401 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:23:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}, @IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @local}}]}, 0x40}}, 0x0) [ 128.802796][ T37] audit: type=1326 audit(1617600230.503:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12388 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:23:50 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002940)=ANY=[@ANYBLOB="12010000d84bf120300927020000000000010902120001070000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000980)={0x0, 0x0, 0x1, '\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x18, &(0x7f0000000840)={0x0, 0x0, 0x14, "4e48aec48f467586f13b529906cb7dbfd6033559"}, 0x0, 0x0, 0x0, 0x0}) 05:23:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r1, 0x0, 0x30}, &(0x7f00000000c0)=0x18) 05:23:50 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000000c0)="23000000420081a3f623cef9c4ece0000000b6ff07000000000000000000000000004f", 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c200)=[{&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f000000a0c0)=""/74, 0x4a}, {&(0x7f00000001c0)=""/4104, 0x1008}, {&(0x7f000000b140)=""/4096, 0x1000}, {&(0x7f0000002280)=""/152, 0x98}], 0x5}, 0x0) 05:23:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:50 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140), 0x0, 0x0) 05:23:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 129.029328][T12445] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.045645][T12451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.063052][ T8843] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.183023][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.363043][ T8843] usb 1-1: Using ep0 maxpacket: 8 [ 129.463102][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 129.493065][ T8843] usb 1-1: New USB device found, idVendor=041e, idProduct=4038, bcdDevice=95.14 [ 129.502102][ T8843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.523584][ T8843] usb 1-1: config 0 descriptor?? [ 129.565225][ T8843] gspca_main: sq930x-2.14.0 probing 041e:4038 [ 129.602014][ T37] audit: type=1326 audit(1617600231.323:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12401 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 129.635569][ T7] usb 5-1: New USB device found, idVendor=0930, idProduct=0227, bcdDevice= 0.00 [ 129.645120][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:23:51 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 129.803157][ T37] audit: type=1326 audit(1617600231.523:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12481 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 130.023020][ T8843] gspca_sq930x: ucbus_write failed -71 [ 130.185916][ T7] usb 5-1: Direct firmware load for ar3k/AthrBT_0xc4ae484e.dfu failed with error -2 [ 130.200134][ T7] usb 5-1: Falling back to sysfs fallback for: ar3k/AthrBT_0xc4ae484e.dfu [ 130.222922][ T7] Bluetooth: Patch file not found ar3k/AthrBT_0xc4ae484e.dfu [ 130.237202][ T7] Bluetooth: Loading patch file failed [ 130.251824][ T7] ath3k: probe of 5-1:7.0 failed with error -11 [ 130.264699][ T8843] gspca_sq930x: Sensor ov9630 not yet treated [ 130.270983][ T8843] sq930x: probe of 1-1:0.0 failed with error -22 [ 130.279247][ T8843] usb 1-1: USB disconnect, device number 6 [ 130.345952][ T7] usb 5-1: USB disconnect, device number 2 [ 130.873044][ T8843] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.113043][ T8843] usb 1-1: Using ep0 maxpacket: 8 [ 131.113043][ T4810] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.273289][ T8843] usb 1-1: New USB device found, idVendor=041e, idProduct=4038, bcdDevice=95.14 [ 131.282373][ T8843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.293718][ T8843] usb 1-1: config 0 descriptor?? [ 131.336776][ T8843] gspca_main: sq930x-2.14.0 probing 041e:4038 [ 131.353305][ T4810] usb 5-1: Using ep0 maxpacket: 32 [ 131.473409][ T4810] usb 5-1: New USB device found, idVendor=0930, idProduct=0227, bcdDevice= 0.00 [ 131.482601][ T4810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 05:23:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:23:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r1, 0x0, 0x30}, &(0x7f00000000c0)=0x18) [ 131.554261][ T8843] gspca_sq930x: reg_r 001f failed -71 [ 131.559722][ T8843] sq930x: probe of 1-1:0.0 failed with error -71 [ 131.573190][ T8843] usb 1-1: USB disconnect, device number 7 [ 131.582013][T12523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.628667][T12523] syz-executor.3 (12523) used greatest stack depth: 10104 bytes left [ 131.783250][ T4810] usb 5-1: Direct firmware load for ar3k/AthrBT_0xc4ae484e.dfu failed with error -2 [ 131.792649][ T4810] usb 5-1: Falling back to sysfs fallback for: ar3k/AthrBT_0xc4ae484e.dfu [ 131.806466][ T4810] Bluetooth: Patch file not found ar3k/AthrBT_0xc4ae484e.dfu [ 131.814074][ T4810] Bluetooth: Loading patch file failed [ 131.819543][ T4810] ath3k: probe of 5-1:7.0 failed with error -11 05:23:53 executing program 4: syz_open_procfs(0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000180)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) io_setup(0x0, &(0x7f0000000080)) socket$unix(0x1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_setup(0x0, 0x0) socket$unix(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x4002, &(0x7f0000000080)=0x10040101, 0x2) clone(0x0, 0x0, 0x0, 0x0, 0x0) 05:23:53 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xe0, 0xf, 0x6a, 0x8, 0x41e, 0x4038, 0x9514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x22, 0xa4, 0x3}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x1, 'd'}, 0x0, 0x0, 0x0, 0x0}) 05:23:53 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:23:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 131.900437][ T8843] usb 5-1: USB disconnect, device number 3 05:23:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) [ 131.948626][ T37] audit: type=1326 audit(1617600233.673:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12552 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 131.971865][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:23:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:23:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002340)={0x168, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x168}}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002300)=ANY=[@ANYBLOB="a801000000000000", @ANYRES64=r2, @ANYBLOB='\a\x00\x00\x00'], 0x1a8) [ 132.065022][T12579] CUSE: unknown device info "" [ 132.070520][T12579] CUSE: unknown device info "" [ 132.075986][T12579] CUSE: unknown device info "" [ 132.081086][T12579] CUSE: unknown device info "" [ 132.089012][T12580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.107899][T12579] CUSE: unknown device info "" 05:23:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 132.129207][T12579] CUSE: unknown device info "" [ 132.136814][T12579] CUSE: unknown device info "P" [ 132.151238][T12579] CUSE: unknown device info "€" [ 132.157167][T12579] CUSE: unknown device info "€" [ 132.174237][T12579] CUSE: unknown device info "" 05:23:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) [ 132.182736][T12579] CUSE: unknown device info "" [ 132.185858][T12592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.197396][T12579] CUSE: unknown device info "" [ 132.213090][T12579] CUSE: zero length info key specified [ 132.223196][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd 05:23:54 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6gre0\x00'}}, 0x1e) 05:23:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 132.469402][T12615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.483400][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 132.613109][ T7] usb 1-1: New USB device found, idVendor=041e, idProduct=4038, bcdDevice=95.14 [ 132.613135][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.618185][ T7] usb 1-1: config 0 descriptor?? [ 132.674873][ T7] gspca_main: sq930x-2.14.0 probing 041e:4038 [ 133.123045][ T7] gspca_sq930x: ucbus_write failed -71 [ 133.363040][ T7] gspca_sq930x: Sensor ov9630 not yet treated [ 133.369209][ T7] sq930x: probe of 1-1:0.0 failed with error -22 [ 133.377422][ T7] usb 1-1: USB disconnect, device number 8 05:23:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:23:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r1, 0x0, 0x30}, &(0x7f00000000c0)=0x18) 05:23:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:23:55 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x48280, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) dup2(r1, r0) 05:23:55 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 133.656601][T12646] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 133.676511][T12650] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:23:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) [ 133.690207][ T37] audit: type=1326 audit(1617600235.413:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12648 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:23:55 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) 05:23:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:23:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 133.779009][T12663] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:23:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:23:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x2c}}, 0x0) [ 133.906798][T12681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.914037][T12681] IPv6: NLM_F_CREATE should be set when creating new route 05:23:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:23:56 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r1, 0x0, 0x30}, &(0x7f00000000c0)=0x18) 05:23:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x2c}}, 0x0) [ 134.506919][T12697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.522701][T12699] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:56 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:23:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:23:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:23:56 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x3) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) 05:23:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) [ 134.636702][T12714] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.637162][T12717] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:56 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') preadv(r0, &(0x7f00000017c0), 0x15e, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 05:23:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:23:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 134.675054][ T37] audit: type=1326 audit(1617600236.403:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12712 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 134.757911][T12732] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 134.765732][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:23:57 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:23:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:23:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) [ 135.393482][T12764] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:57 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:23:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:23:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:23:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:23:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) [ 135.519793][T12780] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.530154][T12783] vcan0: tx address claim with different name [ 135.545124][ T37] audit: type=1326 audit(1617600237.273:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12781 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:23:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 135.546890][T12787] vcan0: tx address claim with different name [ 135.584595][T12784] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:23:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 135.692590][T12802] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.706407][T12801] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 135.739001][T12809] vcan0: tx address claim with different name 05:23:57 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) 05:23:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:23:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 136.242268][T12825] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:23:58 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:23:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:23:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:23:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:23:58 executing program 0: setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:23:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) [ 136.428088][T12845] vcan0: tx address claim with different name [ 136.435648][T12848] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 136.454873][T12847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:23:58 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:23:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 136.492836][ T37] audit: type=1326 audit(1617600238.213:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12846 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 136.572478][ T37] audit: type=1326 audit(1617600238.293:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12862 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 136.603056][T12870] vcan0: tx address claim with different name [ 136.604639][T12863] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:23:58 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:23:58 executing program 0: setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:23:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:23:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:23:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) [ 137.137061][T12885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:23:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:58 executing program 0: setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:23:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:23:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:23:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) [ 137.303631][T12916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:23:59 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:23:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 137.367172][T12916] syz-executor.3 (12916) used greatest stack depth: 10040 bytes left [ 137.415871][ T37] audit: type=1326 audit(1617600239.143:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12929 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:23:59 executing program 5: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:23:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:23:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:23:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) bind$can_j1939(r1, &(0x7f0000000240), 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:23:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) bind$can_j1939(r1, &(0x7f0000000240), 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 138.052466][T12946] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:23:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 05:23:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:23:59 executing program 5: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:23:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:00 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) 05:24:00 executing program 5: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:24:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) bind$can_j1939(r1, &(0x7f0000000240), 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:24:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 138.320040][ T37] audit: type=1326 audit(1617600240.043:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12989 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:24:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) 05:24:00 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 05:24:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:24:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) [ 139.176913][T13041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:01 executing program 5: socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:24:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 139.227662][T13040] set_target_expiration: 7 callbacks suppressed [ 139.227674][T13040] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:24:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:01 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 05:24:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, 0x0) 05:24:01 executing program 5: socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:24:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 139.436715][T13075] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:24:01 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 05:24:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, 0x0) 05:24:01 executing program 5: socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:24:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) 05:24:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:01 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 139.628255][T13109] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 139.654999][T13111] __nla_validate_parse: 3 callbacks suppressed [ 139.655012][T13111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080), 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) 05:24:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 139.677491][T13120] vcan0: tx address claim with dest, not broadcast [ 139.696654][ T37] audit: type=1326 audit(1617600241.423:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13119 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000180)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, 0x0) 05:24:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) 05:24:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080), 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 139.798598][T13135] vcan0: tx address claim with dest, not broadcast [ 139.816811][T13140] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) [ 139.857776][T13144] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 05:24:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080), 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 139.920918][T13156] vcan0: tx address claim with dest, not broadcast [ 140.001325][T13162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:02 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:02 executing program 2: syz_open_dev$rtc(0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x7, 0x0, 0x2, 0x8, 0x0, 0x6, 0x44402, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x7fff}, 0x30, 0x4, 0x11a2, 0x0, 0x5, 0xd4d}, 0x0, 0x2, 0xffffffffffffffff, 0x3) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 05:24:02 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) 05:24:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) [ 140.649511][T13190] syz-executor.2 (13190): drop_caches: 0 [ 140.667777][T13190] syz-executor.2 (13190): drop_caches: 0 [ 140.678168][T13195] vcan0: tx address claim with dest, not broadcast 05:24:02 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000540)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef436000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 05:24:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:02 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) [ 140.701748][T13192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.713852][ T37] audit: type=1326 audit(1617600242.443:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13194 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:02 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 140.771550][T13204] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 140.805892][T13204] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 140.809392][T13212] vcan0: tx address claim with dest, not broadcast 05:24:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 140.925414][T13217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:03 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:03 executing program 4: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:03 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x1a0) 05:24:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:03 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 05:24:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:03 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000004c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000440)=""/89, 0x59}}, 0x120) [ 141.669708][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.688533][T13249] vcan0: tx address claim with dest, not broadcast write$UHID_INPUT(r0, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) 05:24:03 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 141.705685][ T37] audit: type=1326 audit(1617600243.433:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13248 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 141.782195][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.796219][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.820849][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 05:24:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:03 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 141.833404][T13265] vcan0: tx address claim with dest, not broadcast [ 141.857746][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.871473][T13269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.900438][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.921356][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.934387][T13273] vcan0: tx address claim with dest, not broadcast [ 141.954967][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.994150][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.010864][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.024114][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.031640][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.046264][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.061454][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.090510][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.115420][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.134976][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.150155][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.165366][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.181913][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.189946][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.197581][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.205212][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.212671][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.220522][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.228153][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.235835][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.243435][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.259773][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.274726][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.294705][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.302086][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.309742][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.317405][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.325027][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.332400][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.340709][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.348280][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.355880][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.363444][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.370808][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.379242][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.386971][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.394517][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.402678][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.410281][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.417819][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.425567][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.433389][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.440828][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.448495][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.456050][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.463638][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.471018][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.478603][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.486247][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.493947][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.501324][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.509044][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.516699][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.524269][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.531644][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.539347][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.546964][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.554613][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 05:24:04 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:04 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000380)={0x8, 0xffe}) [ 142.561988][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.569608][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.577290][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.584874][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.592496][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.609093][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.636377][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.645391][T13290] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.657718][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.668300][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.677285][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.685468][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.685498][T13296] vcan0: tx address claim with dest, not broadcast [ 142.700581][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.708368][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.716609][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.724324][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 05:24:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 142.731775][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.739554][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.777544][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.805893][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.814428][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.824054][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.849373][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.857139][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.864774][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.878347][ T5] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 142.891168][ T5] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 05:24:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/167, 0xa7}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 05:24:04 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:04 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 05:24:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 143.017969][T13332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 05:24:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:04 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') 05:24:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:04 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:04 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540)='/dev/bsg\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 05:24:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 143.157778][T13355] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000580)={0x1, 0x8001, 0x1c6, 0x401, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) [ 143.231657][T13364] vcan0: tx address claim with dest, not broadcast 05:24:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:05 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:05 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x7, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) lstat(&(0x7f0000002000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000001680)={0x0, ""/256, 0x0, 0x0}) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000000}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000002800)=ANY=[@ANYRES64, @ANYBLOB]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000615c0)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000617c0)={0x0, r1, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062880)={0x9, [{}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {r1, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2, r3}, {0x0, r3}, {r2}, {r1, r3}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {r1}, {}, {r2}, {}, {}, {}, {}, {0x0, r3}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {r2}, {0x0, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {r1}, {}, {}, {r1}, {}, {}, {0x0, r3}, {r2}, {}, {}, {r2, r3}, {}, {}, {r1}, {0x0, r3}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {0x0, r3}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {r1}, {}, {}, {r2, r3}, {r2, r3}, {}, {}, {}, {}, {r1}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {r1}, {r1}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r2}, {}, {}, {}, {r2}, {0x0, r3}, {0x0, r3}, {}, {0x0, r3}, {r2}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r1}, {}, {}, {r1}, {}, {}, {}, {}, {}, {r1}, {}, {0x0, r3}, {}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r1}, {r1}, {}, {}, {}, {}, {r1}, {0x0, r3}, {}, {r1}, {}, {}, {}, {}, {}, {}, {r2, r3}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {r2, r3}, {}, {}, {}, {}, {}, {r2}, {}, {r1}, {r6}], 0x1, "9e48693a06d72a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, 0x0, 0x100000001, 0x1000, 0x81, 0x7c, 0x1, 0x7, 0x6, 0x1fc0000, 0x9, 0x56f62881, 0x2, 0xdd2a}, 0x10, [0x0, 0x0]}) 05:24:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 143.380474][T13388] vcan0: tx address claim with dest, not broadcast 05:24:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 05:24:05 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/198, 0xc6}], 0x1, 0x0, 0x0) 05:24:05 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 143.469316][T13401] vcan0: tx address claim with dest, not broadcast 05:24:05 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100736974000c00028008000100", @ANYBLOB="d1192b905c20859acb136cfd7a42f43d0ed477ffd15b9ac6f0e3d633a426e44472169d3b1012957eb7e8bc110bc99fd2554e62320e28a6c0335460a3bfd99c3b3230a45800d1dec1"], 0x38}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@mcast1}, 0x14) 05:24:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:05 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:05 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 143.601009][T13421] vcan0: tx address claim with dest, not broadcast 05:24:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100736974000c00028008000100", @ANYBLOB="d1192b905c20859acb136cfd7a42f43d0ed477ffd15b9ac6f0e3d633a426e44472169d3b1012957eb7e8bc110bc99fd2554e62320e28a6c0335460a3bfd99c3b3230a45800d1dec1"], 0x38}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@mcast1}, 0x14) [ 143.698478][T13442] vcan0: tx address claim with dest, not broadcast 05:24:06 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 05:24:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:06 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 05:24:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:06 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000140)="0f8c0c0000000f20d835200000000f22d8260f01c42636660f388077210f01c46467430f01fc460f00d73e66460f38818e0d000000b9800000c0690fc8d9c8d98000000f3048b80c000000000000000f23d80f21f835c00000900f23f8", 0x5d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000780)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:24:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_deladdr={0x18, 0x15, 0x31}, 0x18}}, 0x0) [ 144.409604][T13476] vcan0: tx address claim with dest, not broadcast 05:24:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:06 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 05:24:06 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, 0x0, 0x0) 05:24:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:06 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, 0x0, 0x0) [ 144.832958][ T9115] usb 3-1: new high-speed USB device number 4 using dummy_hcd 05:24:06 executing program 5: epoll_create(0xa) inotify_init() fork() openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyprintk\x00', 0x40, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xd54, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000180)={0x2, 0x6}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000001c0)={@host}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000100)={@my=0x1}) io_setup(0x0, &(0x7f0000000080)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x4, &(0x7f0000002580)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="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", 0x1000, 0x1c, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000001500)="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", 0x1000, 0x9, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x9, 0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x401, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x7ce3, 0xffffffffffffffff, &(0x7f0000002500)="6b4f2475a90185c58773d42598821d51d1a8af809082dc02ef21a8b0e7a37875850fc27e9c19568a674701ed4222d40f98b49b451c9216aac5086a419285a6526999bbc8d206c4c2386714b8beed6d08eb7b5a1b22", 0x55, 0x7f, 0x0, 0x2}]) io_setup(0x1, &(0x7f0000000080)) socket$unix(0x1, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4002, &(0x7f0000000080)=0x10040101, 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) fork() 05:24:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, 0x0, 0x0) 05:24:06 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 145.087944][T13546] __nla_validate_parse: 9 callbacks suppressed [ 145.087958][T13546] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.102940][ T9115] usb 3-1: Using ep0 maxpacket: 8 [ 145.133295][T13547] IPVS: ftp: loaded support on port[0] = 21 [ 145.226647][T13580] IPVS: ftp: loaded support on port[0] = 21 [ 145.314572][ T9115] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 145.323884][ T9115] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 145.331895][ T9115] usb 3-1: Product: syz [ 145.340316][ T9115] usb 3-1: config 0 descriptor?? [ 145.603037][ T9115] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 146.063005][ T9115] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 146.071180][ T9115] usb 3-1: USB disconnect, device number 4 [ 146.802986][ T19] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.062991][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 147.283223][ T19] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 147.292304][ T19] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 147.301189][ T19] usb 3-1: Product: syz [ 147.306296][ T19] usb 3-1: config 0 descriptor?? 05:24:09 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000240), 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:24:09 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:09 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) 05:24:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000240), 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) clone(0x2000000002002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x298, 0x108, 0x5002004a, 0x0, 0x108, 0x0, 0x200, 0x3c8, 0x3c8, 0x200, 0x3c8, 0x3, 0x0, {[{{@ip={@empty, @broadcast, 0x0, 0x0, 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'dummy0\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000380), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r3 = getpid() tkill(r3, 0x34) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x1, 0x200) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000540), &(0x7f00000005c0)=0x4) 05:24:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x47) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 147.572984][ T19] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 147.591568][T13640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:09 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 147.663275][ T19] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 147.670398][T13652] Cannot find add_set index 0 as target [ 147.679375][T13656] Cannot find add_set index 0 as target [ 147.689734][ T19] usb 3-1: USB disconnect, device number 5 05:24:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000240), 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 147.789119][T13670] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.072955][ T19] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.332992][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 148.552992][ T19] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 148.562184][ T19] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 148.570831][ T19] usb 3-1: Product: syz [ 148.577123][ T19] usb 3-1: config 0 descriptor?? [ 148.833048][ T19] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 149.292990][ T19] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 149.300787][ T19] usb 3-1: USB disconnect, device number 6 05:24:11 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:11 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f00000002c0)="66b9319236e3094b71d55563b984e925", 0x10}], 0x1, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x200000, 0x0) 05:24:11 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:11 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x0, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x12, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x800008000}, 0x0, 0x0, 0x5, 0x7, 0x0, 0x8001, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:24:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 149.815094][ T37] audit: type=1326 audit(1617600251.543:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13704 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 149.820681][T13709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r1, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 149.970365][T13734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 150.093050][ T9115] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 150.124409][ T4810] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.134568][T13747] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.362993][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 150.373390][ T9115] usb 6-1: Using ep0 maxpacket: 8 [ 150.522958][ T9115] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.563018][ T4810] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 150.572520][ T4810] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 150.580975][ T4810] usb 3-1: Product: syz [ 150.587206][ T4810] usb 3-1: config 0 descriptor?? [ 150.612981][ T9115] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 150.613061][ T9115] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 150.641256][ T9115] usb 6-1: Manufacturer: syz [ 150.649843][ T9115] usb 6-1: config 0 descriptor?? [ 150.843084][ T4810] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 150.922982][ T9115] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 150.953076][ T9115] usb 6-1: Failed to query (GET_INFO) UVC control 1 on unit 129: -71 (exp. 1). [ 150.983666][ T9115] usb 6-1: Failed to query (GET_INFO) UVC control 4 on unit 129: -71 (exp. 1). [ 151.002987][ T9115] usb 6-1: Failed to query (GET_INFO) UVC control 5 on unit 129: -71 (exp. 1). [ 151.022978][ T9115] usb 6-1: Failed to query (GET_INFO) UVC control 16 on unit 129: -71 (exp. 1). [ 151.053062][ T9115] usb 6-1: Failed to query (GET_INFO) UVC control 11 on unit 129: -71 (exp. 1). [ 151.062165][ T9115] usb 6-1: Failed to initialize entity for entity 255 [ 151.075611][ T9115] usb 6-1: Failed to register entities (-22). [ 151.094623][ T9115] usb 6-1: USB disconnect, device number 2 [ 151.302985][ T4810] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 151.310993][ T4810] usb 3-1: USB disconnect, device number 7 [ 151.662956][ T36] usb 6-1: new high-speed USB device number 3 using dummy_hcd 05:24:13 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r1, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 151.913013][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 152.042965][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.063143][ T4810] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.143263][ T36] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 152.152376][ T36] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 152.161121][ T36] usb 6-1: Manufacturer: syz [ 152.167961][ T36] usb 6-1: config 0 descriptor?? [ 152.342959][ T4810] usb 3-1: Using ep0 maxpacket: 8 05:24:14 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:14 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000240)) 05:24:14 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x0, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r1, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 152.479140][T13819] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.482986][ T36] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 152.500421][ T37] audit: type=1326 audit(1617600254.223:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13818 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:14 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 152.523506][ T36] usb 6-1: Failed to query (GET_INFO) UVC control 1 on unit 129: -71 (exp. 1). 05:24:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r1, &(0x7f0000000240), 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 152.553036][ T36] usb 6-1: Failed to query (GET_INFO) UVC control 4 on unit 129: -71 (exp. 1). [ 152.592979][ T36] usb 6-1: Failed to query (GET_INFO) UVC control 5 on unit 129: -71 (exp. 1). 05:24:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r1, &(0x7f0000000240), 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 152.603643][ T4810] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 152.612676][ T4810] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 05:24:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r1, &(0x7f0000000240), 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) [ 152.638437][T13837] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 152.668831][ T4810] usb 3-1: Product: syz [ 152.673337][ T36] usb 6-1: Failed to query (GET_INFO) UVC control 16 on unit 129: -71 (exp. 1). [ 152.690572][ T4810] usb 3-1: config 0 descriptor?? [ 152.703778][ T36] usb 6-1: Failed to query (GET_INFO) UVC control 11 on unit 129: -71 (exp. 1). [ 152.722663][ T36] usb 6-1: Failed to initialize entity for entity 255 [ 152.753630][ T36] usb 6-1: Failed to register entities (-22). [ 152.774498][ T36] usb 6-1: USB disconnect, device number 3 [ 152.963320][ T4810] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 153.162961][ T36] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 153.403010][ T4810] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 153.410970][ T4810] usb 3-1: USB disconnect, device number 8 [ 153.422952][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 153.562986][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.662960][ T36] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 153.672053][ T36] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 153.680815][ T36] usb 6-1: Manufacturer: syz [ 153.686381][ T36] usb 6-1: config 0 descriptor?? 05:24:15 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) 05:24:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 153.972978][ T36] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 153.993056][ T36] usb 6-1: Failed to query (GET_INFO) UVC control 1 on unit 129: -71 (exp. 1). [ 154.013640][ T36] usb 6-1: Failed to query (GET_INFO) UVC control 4 on unit 129: -71 (exp. 1). [ 154.042994][ T36] usb 6-1: Failed to query (GET_INFO) UVC control 5 on unit 129: -71 (exp. 1). [ 154.062987][ T36] usb 6-1: Failed to query (GET_INFO) UVC control 16 on unit 129: -71 (exp. 1). [ 154.092968][ T36] usb 6-1: Failed to query (GET_INFO) UVC control 11 on unit 129: -71 (exp. 1). [ 154.102220][ T36] usb 6-1: Failed to initialize entity for entity 255 [ 154.109586][ T36] usb 6-1: Failed to register entities (-22). [ 154.116812][ T36] usb 6-1: USB disconnect, device number 4 [ 154.202953][ T8843] usb 3-1: new high-speed USB device number 9 using dummy_hcd 05:24:16 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:16 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x0, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:16 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/189, 0xbd}], 0x1}, 0x0) sendmsg$tipc(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000180)="ec", 0x1}], 0x1}, 0x0) 05:24:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 154.452934][ T8843] usb 3-1: Using ep0 maxpacket: 8 05:24:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 154.486448][ T37] audit: type=1326 audit(1617600256.213:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13901 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:16 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f00000005c0)="47bb5f777ba0d34a1606183e520e8f1d7085062ee6441d065ad5a26c63", 0x1d}], 0x1}, 0x20044080) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x195, &(0x7f0000000a00)=[{&(0x7f0000000280)="03", 0x140000}], 0x2, 0x0, 0x0, 0x3680}, 0x20030) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) [ 154.693003][ T8843] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 154.702057][ T8843] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 154.718454][ T8843] usb 3-1: Product: syz [ 154.728580][ T8843] usb 3-1: config 0 descriptor?? [ 154.764528][ T9712] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 154.983068][ T8843] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 155.002966][ T9712] usb 6-1: Using ep0 maxpacket: 8 [ 155.123384][ T9712] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.212994][ T9712] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 155.222131][ T9712] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 155.230626][ T9712] usb 6-1: Manufacturer: syz [ 155.237269][ T9712] usb 6-1: config 0 descriptor?? [ 155.272966][ T8843] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 155.281207][ T8843] usb 3-1: USB disconnect, device number 9 [ 155.512963][ T9712] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 155.533052][ T9712] usb 6-1: Failed to query (GET_INFO) UVC control 1 on unit 129: -71 (exp. 1). [ 155.552934][ T9712] usb 6-1: Failed to query (GET_INFO) UVC control 4 on unit 129: -71 (exp. 1). [ 155.572935][ T9712] usb 6-1: Failed to query (GET_INFO) UVC control 5 on unit 129: -71 (exp. 1). [ 155.593088][ T9712] usb 6-1: Failed to query (GET_INFO) UVC control 16 on unit 129: -71 (exp. 1). [ 155.612966][ T9712] usb 6-1: Failed to query (GET_INFO) UVC control 11 on unit 129: -71 (exp. 1). [ 155.622144][ T9712] usb 6-1: Failed to initialize entity for entity 255 [ 155.630755][ T9712] usb 6-1: Failed to register entities (-22). [ 155.638120][ T9712] usb 6-1: USB disconnect, device number 5 05:24:17 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) 05:24:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:17 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, 0x0, 0x0) 05:24:17 executing program 0: bpf$MAP_CREATE(0x23, &(0x7f00000000c0), 0x40) 05:24:17 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:17 executing program 0: bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, r2, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='#L!@)(\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x62, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x334, 0xe0000f0, &(0x7f00000000c0)="b9ff030020ffffff7f9e14f005051fffffff00602607630677fbac141433e000030062029f4b4d2f87e5feca6aab840413f2325f1a390104050a0100010200000200df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) 05:24:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, 0x0, 0x0) [ 156.006724][ T36] usb 3-1: new high-speed USB device number 10 using dummy_hcd 05:24:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 156.059288][ T37] audit: type=1326 audit(1617600257.783:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13974 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, 0x0, 0x0) 05:24:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 156.302922][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 156.392978][ T5] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 156.542950][ T36] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 156.552106][ T36] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 156.560911][ T36] usb 3-1: Product: syz [ 156.566991][ T36] usb 3-1: config 0 descriptor?? [ 156.632947][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 156.754075][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.832985][ T36] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 156.843326][ T5] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 156.852474][ T5] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 156.860696][ T5] usb 6-1: Manufacturer: syz [ 156.867157][ T5] usb 6-1: config 0 descriptor?? [ 157.114524][ T36] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 157.122511][ T36] usb 3-1: USB disconnect, device number 10 [ 157.142958][ T5] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 157.163024][ T5] usb 6-1: Failed to query (GET_INFO) UVC control 1 on unit 129: -71 (exp. 1). [ 157.184232][ T5] usb 6-1: Failed to query (GET_INFO) UVC control 4 on unit 129: -71 (exp. 1). [ 157.212934][ T5] usb 6-1: Failed to query (GET_INFO) UVC control 5 on unit 129: -71 (exp. 1). [ 157.232948][ T5] usb 6-1: Failed to query (GET_INFO) UVC control 16 on unit 129: -71 (exp. 1). [ 157.252938][ T5] usb 6-1: Failed to query (GET_INFO) UVC control 11 on unit 129: -71 (exp. 1). [ 157.262017][ T5] usb 6-1: Failed to initialize entity for entity 255 [ 157.276269][ T5] usb 6-1: Failed to register entities (-22). [ 157.287451][ T5] usb 6-1: USB disconnect, device number 6 05:24:19 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) 05:24:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x1}}, 0x0) 05:24:19 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)) 05:24:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:19 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xf}]}}, &(0x7f0000000180)=""/189, 0x26, 0xbd, 0x1}, 0x20) 05:24:19 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x1}}, 0x0) 05:24:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:19 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) unlink(&(0x7f0000000140)='./file0\x00') 05:24:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x1}}, 0x0) [ 157.666200][ T37] audit: type=1326 audit(1617600259.393:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14039 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:19 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa) [ 157.852929][ T5] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 158.092924][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 158.292943][ T5] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 158.302006][ T5] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 158.311758][ T5] usb 3-1: Product: syz [ 158.317940][ T5] usb 3-1: config 0 descriptor?? [ 158.583032][ T5] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 158.864616][ T5] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 158.876930][ T5] usb 3-1: USB disconnect, device number 11 05:24:21 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007b60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92304f242b416ae9f3efc0e9c60ebab1c176bf9bb4dde984510c82dc2b9381b72b100d0682fd0a0c6770ce932209c28dac72599456d464419e5b2fc70b72c0bb8e90f61cc4e6f3fe2d1dee18f638ac947b5e026a3287c84ccc727d6ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb398dff1db3df9858837458a4ca03767c69cee1b6be484e4c9507af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a20819e02cc22e6b652b1673773ae3cab8d7674c6c4dca2f1b4d745fd95c41f9d441d42f49db6d4a4762e5cc23dfc1adafd1e5a3e7f2e888961cb43e438c4e41ae43ea118e1407a601dae4b8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa2285b6e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a0e3ed34258b8c9370634060105baa664953514605fba3973aafd1845b985a8a66e9cfa9d9e57033815717b4fdbe55b37cb8d7f41aacfbd9b5a759a703e71f358e11ac8e13df105000000000000003bd6c81bdf2c17bc0400000000000000ff8dc4006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11a755761fe46169b2b5b8cdedb695cc425fe203d2f2655a76865c2cb4e2470fcfb1248c0add5431a7fbcb0ef4f66809af93a09fab1daae4b518d7a5d95a017864487366d6d7ee7bb00200000000000000c60fca2e2981b22d08f874e0a9cb6fca78d6f1b18fe380df4bf024f120bd505d82033f2fb7d89c0007362e06d04e04b261fc9e0d773294e097e293db58993c0024ab2fd8e5e7003af92d11de48e8b4d32972cba6f49051cec1bf6f16231bbb90d5c58fb8a47811a2278a03bf7700b06fa191ebd3a0c2ef0058ffebd7ccde24f18e4bf7156edc4ef81f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f83074192c48c63384f52b8eeb70571e5bbb3e6d2b5eba52bee6f81968981811f832d064048c0e0bbe46984b2f0d0504255c22ee8674053d0e160e525536edf56a93d0a7a6f088925e872ef8b4f31e6f57ba631baa729031aae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875858e083144c642f71cdc8e5634c1360c056430f677ee7ed7ac1f9743786b2fb8d0fcfcc3d36c93230b7b059bc295aa0e38b1c3edc349ab96e73d2060acfd8145e4a5851bc4a51ab87068468d3ba396d6fd6741fce0834c65c5ad939d7795f3879baa88bd0c84892c97c80987e5c7954e9f3694d116b01ce0b8ef953de70e7ce0311c8b018956f8a42ca26ab295f1ecf617a8dc38e525f415a1bd46b38845ebca04061bacbf627f798c7f520078fee48f83b5989543729e57a9e1d686bc86cd51704f309130f5347413776a7b7bea3c46c0c4c4b7c27c45057d95ac85ac1cdcee8e6fa31fc02137ed1fb4b21c13b9a2c5e3f7c9ef9c45a314a6f0b9352be92986d63263b1aa5264cb4a82cf083de3b4ab6368e95dd4fdf6710cd4a79651dc3e1e056c3ecd6b51f30663cc255494c840662e09ab831b7bae9aec6d7259d3c13330cd9357fc407956250016795cf91f12dbb72fc321c3dfb5f9181529906b43f9d6b8ce9fad13e1085cafd41183908173e16e40037681835aa080f34b87bba0be276340295062f671e933292e32036cbd03f9a4cd660a94374b013e9f32a6bfb65417b537cd8f67f975358140384a1ca0537fd3a2a2c37006e4b30ffe469bba4251aa3ba4626acd810000000000000000ee37c63f7f295579f542b12f248f4b6ba14448abab540fb7d98a081f3d3c946455d61734855005bcc876bd15a76dd552f9bfeb091a4e82a5d11033e528b133103f5592d5684a57dd70556818ea30e03dc2a6eb69423e4f27034351809da4e5002aa346d4d3e0e2a5a9ba1130b4fe983fc344c1de9f536cff06187599523cbddcd8ffc2d11d5db7712be71c0d74a5ae4e8ff6e65238bb23ea2a979d3e8ab85ed4860db1d39c653483407b8d80b484c76266ff5e5e93b6065b679db07bfd58da0fbc93abb6"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xdc05, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000638477fbac141417ee", 0x0, 0x2f, 0xf0ffff, 0x0, 0xfffffffffffffe2a}, 0x28) 05:24:21 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)) 05:24:21 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:21 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xdc05, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000638477fbac141417ee", 0x0, 0x2f, 0xf0ffff, 0x0, 0xfffffffffffffe2a}, 0x28) [ 159.325964][ T37] audit: type=1326 audit(1617600261.053:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 159.351243][T14089] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000000100)='\x00', 0x8}}, 0x0) 05:24:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 159.464125][T14105] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, 0x0}, 0x0) [ 159.542502][T14110] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.642942][ T4810] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 159.882923][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 160.082973][ T4810] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 160.092047][ T4810] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 160.100690][ T4810] usb 3-1: Product: syz [ 160.105541][ T4810] usb 3-1: config 0 descriptor?? [ 160.362940][ T4810] usb 3-1: ignoring: probably an ADSL modem [ 160.643038][ T4810] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 160.650909][ T4810] usb 3-1: USB disconnect, device number 12 05:24:22 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, 0x0}, 0x0) 05:24:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x280100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 05:24:22 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)) 05:24:22 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x19, 0x4, 0x0, 0x9d}, 0x40) 05:24:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, 0x0}, 0x0) [ 161.119922][T14141] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.131905][ T37] audit: type=1326 audit(1617600262.853:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14134 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={0x0}}, 0x0) 05:24:22 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/184, 0x2d, 0xb8, 0x1}, 0x20) 05:24:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={0x0}}, 0x0) [ 161.219474][T14151] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.443512][ T4810] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 161.683167][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 161.882970][ T4810] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 161.892092][ T4810] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 161.901601][ T4810] usb 3-1: Product: syz [ 161.907734][ T4810] usb 3-1: config 0 descriptor?? [ 162.162959][ T4810] usb 3-1: ignoring: probably an ADSL modem [ 162.442935][ T4810] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 162.450866][ T4810] usb 3-1: USB disconnect, device number 13 05:24:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={0x0}}, 0x0) 05:24:24 executing program 0: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x98b66d1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:24:24 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:24 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:24 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000540)=""/248, 0x1a, 0xf8, 0x1}, 0x20) [ 162.898957][ T37] audit: type=1326 audit(1617600264.623:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14187 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 162.934407][T14192] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)}}, 0x0) 05:24:24 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/189, 0x1a, 0xbd, 0x8}, 0x20) 05:24:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:24 executing program 0: socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001780)={&(0x7f0000001100)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0}, 0x0) 05:24:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 163.027255][T14207] BPF:No type found [ 163.037884][T14207] BPF:No type found [ 163.213465][ T9712] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 163.223359][ T4810] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 163.452932][ T9712] usb 6-1: Using ep0 maxpacket: 8 [ 163.463559][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 163.573240][ T9712] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.662975][ T4810] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 163.672059][ T4810] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 163.680740][ T9712] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 163.690066][ T9712] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 163.698603][ T4810] usb 3-1: Product: syz [ 163.703110][ T9712] usb 6-1: Manufacturer: syz [ 163.708913][ T4810] usb 3-1: config 0 descriptor?? [ 163.720059][ T9712] usb 6-1: config 0 descriptor?? [ 163.982961][ T4810] usb 3-1: ignoring: probably an ADSL modem [ 164.003142][ T9712] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 164.022921][ T9712] usb 6-1: Failed to query (GET_INFO) UVC control 1 on unit 129: -71 (exp. 1). [ 164.042966][ T9712] usb 6-1: Failed to query (GET_INFO) UVC control 4 on unit 129: -71 (exp. 1). [ 164.062942][ T9712] usb 6-1: Failed to query (GET_INFO) UVC control 5 on unit 129: -71 (exp. 1). [ 164.082984][ T9712] usb 6-1: Failed to query (GET_INFO) UVC control 16 on unit 129: -71 (exp. 1). [ 164.102929][ T9712] usb 6-1: Failed to query (GET_INFO) UVC control 11 on unit 129: -71 (exp. 1). [ 164.112019][ T9712] usb 6-1: Failed to initialize entity for entity 255 [ 164.119005][ T9712] usb 6-1: Failed to register entities (-22). [ 164.128011][ T9712] usb 6-1: USB disconnect, device number 7 [ 164.262934][ T4810] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 164.271063][ T4810] usb 3-1: USB disconnect, device number 14 05:24:26 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)}}, 0x0) 05:24:26 executing program 0: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) 05:24:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:26 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 05:24:26 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000100)}}, 0x0) [ 164.739683][ T37] audit: type=1326 audit(1617600266.463:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14255 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x9d}, 0x40) 05:24:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 164.821146][T14270] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:26 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 05:24:26 executing program 4: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0xee01}}) [ 164.878764][T14277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.004502][ T8843] usb 6-1: new high-speed USB device number 8 using dummy_hcd 05:24:27 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:27 executing program 0: fork() sendmmsg$unix(0xffffffffffffffff, &(0x7f000000aa00)=[{0x0, 0x0, 0x0}, {&(0x7f000000a600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f000000a7c0)=[{0x0}], 0x1}], 0x2, 0x0) 05:24:27 executing program 4: r0 = semget$private(0x0, 0x4, 0x0) semget$private(0x0, 0x4, 0x2c0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000480)=""/215) [ 165.242911][ T8843] usb 6-1: Using ep0 maxpacket: 8 [ 165.315109][T14293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.363206][ T8843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.482972][ T8843] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 165.492089][ T8843] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 165.500464][ T8843] usb 6-1: Manufacturer: syz [ 165.506072][ T8843] usb 6-1: config 0 descriptor?? 05:24:27 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x0, 0x0) [ 165.674870][ T37] audit: type=1326 audit(1617600267.403:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14309 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 165.782919][ T8843] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 165.789886][ T8843] usb 6-1: Failed to initialize entity for entity 255 [ 165.802913][ T8843] usb 6-1: Failed to register entities (-22). [ 165.815681][ T8843] usb 6-1: USB disconnect, device number 8 05:24:27 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:27 executing program 0: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 05:24:27 executing program 4: r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 05:24:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:27 executing program 2: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:28 executing program 4: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000040)=""/205) 05:24:28 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001840)=ANY=[@ANYBLOB="850000000800000027000000000000009500000000000000a579753dec29fe276240f076750753bc7b952ab5ad939c40c5f89f8b5c13a24800a26b3c68cea5493d3324ac09331ab3c70aa6b030ed69efddccea3e793e8287051d4f5fef4b9e2a4ce758601229b9455000000050222e81748b4ee09cc6d847ef6943a143669ef5fc545ab7ffef72fd2ca305f386142d7835f213e7ff0b00001731859eba975d4a1809acbc7b716441ef6bac34d0c99d62456cc766be4825548e085c7866d7ac33165a2178a5c64798695800f249c1a571457a8713e7b70a85bbdb078320ea188f590ec28e549e8e3d4fe60c9fea00000000000100019efc0060c9e1263ca5507f633b5b0402ffa95acb51028785ae09fdae241f51f7ff22745696f1fffb40fe777d16832bbb703ea39868fcf0fe11894d2c876e4809a16ce03ba31d2e344151341d1008ae03265f8f99ae15d9b711f4b6746dce6ec1ce34d2e2d5241435b5ddc91e9e99ad6b9cbe55e294f5b1e5dc8f1c7bdd3cf375c0b30ce6ba07ce35f90f0c589bc98d678d7e40000000a133258866780ddac5fe771e6ae67da6e2df4a560436fa3cb7598f923c7306bb3c31f8e867734a5a66f0465d7183fc05c0d804ac719fa87f64cd637deb88254ea8c121769ded8cb00c1276b1aaffb3cf86fb92efc51802cdd76a73fd639edea01662abbc567a9db53997aa9abd409b5cb990ea1bc76127057ad3ae000000000000000000000000000000000000000000444e477613181b1c6fb1f9c3cb0f5b0a187994d25c55dd04442f2f739ce0b3e4377f3d9887cdf898a4463717a1cf4c5d83e93d581b815950e21279f8bcb5167247a398754a1493639f275c5d6c6ea752b63551125eda435b0100008001331947c173c800000000a77508c2cd9fb2636db3abed6453179e3ca03bd3a3dbc4b61dbbfce11ca2d9dbeb6844a88348197292379d22fb6ea97a4f734953d3697cad93d588172c99700fc4f2983edf5d8bb2ec6dc0cc319881b43b7a8a1d1f872d0000faffffdcad9444a6f712c20fd0d908c376316a7b26cbaad2ffc703c9492f01de1f5d2093213aa1354e783b15f627834d840c6738f8b16b80cc0b0582a3aa02553979e47bdf3716228c4ff4666997286042b43c6c2a40ed5702cc5a3897db7f94e8d5ba14fd018c5b302942916cf7314e3c9a00693651edf8d8942a947879f4ea1f031cd8432a27bc2cb985d52134dbb048d7323910292a4251bef620b835c5ca7dd0998bf75fc543e492471593d933cabeb801565f0d1bdb00000000000000000000000000000035c475720b5781dc011faa62e5e601e602c45847b09a68d0f139be711d945308e14ab710e19e1ef28143e7dff9072b5ef034cae237e91d4bac78911ef0fb65b616ce0bcd2f6612595065a4323894e671ff931351cf18a507c3ae18c759e216d8e39e1c0ca8a9a0940a1a99fb8db3a8e7952a95a0fe10a07e0e7b327d6074ca2b86a1914907942d6408354a114e495c459c2887cdcd496dc63e902690baf4d2542f8128384d7529753a5a30da63b7964a7fda44e9da171c63924ff5829543565cee7a9b4f328625e40adb3c2a5d407e5d1a1a760c2bd1a82ce543ac6c288df420dc7744a39b743e07e884cd4681abb93bb2d5e65618a39d34c41f1643956e5cfa74a453b00725ea7ad44c9edc687d4f85560535c813271f621b987aade18972f63c9e4bfcb22cc9f231202588b3fb8f256f804c0e334f06c41aad06f851cdd833760a3a464749b8ed21c101b2b23fd402d526dd001b9334d3861ec980c635ed897c13c4f58ef5be0fe5a7f5b5117e6c18216ef650e46c2e1579ba868b9a9259d598a1dba2cb8c6b"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:24:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 166.296122][T14334] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:28 executing program 4: perf_event_open$cgroup(&(0x7f0000002d00)={0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 166.377140][T14346] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[{0x10}], 0x10}, 0x20008005) [ 166.439970][T14353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:28 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x0, 0x0) [ 166.572946][ T5] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 166.622517][ T37] audit: type=1326 audit(1617600268.343:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14363 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 166.842894][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 167.012952][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.114448][ T5] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 167.123814][ T5] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 167.131871][ T5] usb 6-1: Manufacturer: syz [ 167.137603][ T5] usb 6-1: config 0 descriptor?? [ 167.412944][ T5] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 167.419865][ T5] usb 6-1: Failed to initialize entity for entity 255 [ 167.426697][ T5] usb 6-1: Failed to register entities (-22). [ 167.433541][ T5] usb 6-1: USB disconnect, device number 9 05:24:29 executing program 5: syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:29 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f000000f7c0)={0x0, 0x0, 0x0}, 0x10100) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 05:24:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x19, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:24:29 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:29 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x0, 0x0) 05:24:29 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 05:24:29 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000340)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0xc0189436, 0x0) 05:24:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 167.945830][T14398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.956757][ T37] audit: type=1326 audit(1617600269.683:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:29 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0xc020660b, 0x0) 05:24:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x12, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:24:29 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002ec0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 168.063110][T14413] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.212925][ T19] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 168.483339][ T19] usb 6-1: Using ep0 maxpacket: 8 [ 168.613326][ T19] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.713192][ T19] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 168.722279][ T19] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 168.730756][ T19] usb 6-1: Manufacturer: syz [ 168.736279][ T19] usb 6-1: config 0 descriptor?? [ 169.022941][ T19] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 169.030056][ T19] usb 6-1: Failed to initialize entity for entity 255 [ 169.044041][ T19] usb 6-1: Failed to register entities (-22). [ 169.051058][ T19] usb 6-1: USB disconnect, device number 10 05:24:31 executing program 5: syz_usb_connect$hid(0x0, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:31 executing program 0: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:24:31 executing program 4: bpf$OBJ_GET_PROG(0x11, &(0x7f00000001c0)={0x0}, 0xc4) 05:24:31 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x0, &(0x7f0000000040)) 05:24:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 05:24:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:31 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)='\n', &(0x7f0000000180)}, 0x48) [ 169.531041][T14451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.543048][ T37] audit: type=1326 audit(1617600271.273:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14449 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:31 executing program 0: bpf$OBJ_GET_PROG(0x23, &(0x7f00000001c0)={0x0, 0x0, 0x8}, 0x10) 05:24:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 169.619662][T14464] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000640)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) [ 169.852900][ T9712] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 170.042913][ T9712] usb 6-1: device descriptor read/64, error 18 [ 170.312898][ T9712] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 170.502904][ T9712] usb 6-1: device descriptor read/64, error 18 [ 170.622939][ T9712] usb usb6-port1: attempt power cycle [ 171.332894][ T9712] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 171.423105][ T9712] usb 6-1: Invalid ep0 maxpacket: 0 [ 171.572903][ T9712] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 171.663103][ T9712] usb 6-1: Invalid ep0 maxpacket: 0 [ 171.668351][ T9712] usb usb6-port1: unable to enumerate USB device 05:24:34 executing program 5: syz_usb_connect$hid(0x0, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x101}, 0x40) 05:24:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:34 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, 0x0, 0x7ffffffff000) 05:24:34 executing program 2: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:34 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x0, &(0x7f0000000040)) 05:24:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 172.565463][ T37] audit: type=1326 audit(1617600274.293:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14494 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 172.580717][T14499] __nla_validate_parse: 1 callbacks suppressed [ 172.580730][T14499] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:34 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x20004019) sendmsg(r0, &(0x7f0000000600)={0x0, 0xbffe, &(0x7f0000000180)=[{&(0x7f0000000480)="c2a496ef9980f37530ce0388473a22363d22df41af9f7ea5f5888f18b0a748f4bae6c36fd3ec1e6a0a400f52370c5d9703ca4ca4d24a3e5b7e8979c06cee5e084a1e8f8f7b00890de42e1e6a607bf12acb1f4ca544db56b7dedbc8f3e8897834dc2ce2a1fe9811c5da74", 0x6a}, {&(0x7f0000000500)="f421c539b740ae9741051f5b25586e84328089ca07ac2ad4544a12f777af48c86ff76030cfa78bf4905897f9876eb2b6f0aea20696bd57d21f27535712d02cddcd75e3546decaa6ed46709e28efd2c4571ef4627dbe72818bdd4ec550ed4543e5a0fe94ae3456e36455a3aab8c8e1d3ff1bf80f64bff524e757ecab1201d1ac0d6071ec1871bda7fe0f99fbac3469d50bba8d360", 0x94}, {&(0x7f0000000640)="39d5a61921252308ce520ce8489822ca086ac660c8fc9dd041ade1cf8663831461707716349b975838cb3a8ca389683466f79f617f597a33d9279a8547b199a451e57edcdb3d2393b6de0da29817c3fd6b49eb7552cfddae3c8861521ca20f0f95b3fccd3c2a974eaf549beb83147f20dc291659f6522eaeaf1561cf68fb2f2fa09109742a7d4831fca821ce6cde35d2ff017996b16976074b7cea4517fa9e4a18a7dd4f2ed3108d", 0xffffffa6}, {&(0x7f0000000700)="3971727001208f2f54f716b2066debfa90b86b185962b7c7a938aef3cd9a1a5e2faa81d8385962dc0c0b79cb48b6728bf705d1ff1f99fa21ebc0cce8947f914ce8ee1a91e20eb6caf77c3fb41a996201d5572c4a9b537b647e4f2b89f1b8fec183c8ed9ea9cd058292ffd1cf57b73702ac6edc0ffcdb458742ce", 0x7a}], 0x4, 0x0, 0x0, 0xcbff}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000040000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf921e884bf496dca5d2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 05:24:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) [ 172.667314][T14506] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:34 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78) 05:24:34 executing program 4: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') r1 = socket$kcm(0x29, 0x2, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc90\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|cL\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 172.825891][T14527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.002937][ T4810] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 173.192899][ T4810] usb 6-1: device descriptor read/64, error 18 [ 173.462884][ T4810] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 173.652902][ T4810] usb 6-1: device descriptor read/64, error 18 [ 173.772935][ T4810] usb usb6-port1: attempt power cycle [ 174.482914][ T4810] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 174.583125][ T4810] usb 6-1: Invalid ep0 maxpacket: 0 [ 174.732885][ T4810] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 174.822947][ T4810] usb 6-1: Invalid ep0 maxpacket: 0 [ 174.828269][ T4810] usb usb6-port1: unable to enumerate USB device 05:24:37 executing program 5: syz_usb_connect$hid(0x0, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:37 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x0, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x78) 05:24:37 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x9, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000640)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:24:37 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x0, &(0x7f0000000040)) 05:24:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xd000, &(0x7f0000000580)=@framed={{}, [@ldst]}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000640)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:24:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002880)={0x10, 0x0, 0x0, 0x6}, 0x40) [ 175.657022][T14555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.670788][ T37] audit: type=1326 audit(1617600277.393:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14552 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:37 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000009280)={&(0x7f00000090c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000091c0)=""/164, 0x29, 0xa4, 0x1}, 0x20) 05:24:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@map]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x1000, &(0x7f0000000640)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:24:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 175.933029][ T4810] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 176.082896][ T9712] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 176.122900][ T4810] usb 3-1: device descriptor read/64, error 18 [ 176.272912][ T9712] usb 6-1: device descriptor read/64, error 18 [ 176.392885][ T4810] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 176.542920][ T9712] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 176.582943][ T4810] usb 3-1: device descriptor read/64, error 18 [ 176.702955][ T4810] usb usb3-port1: attempt power cycle [ 176.732865][ T9712] usb 6-1: device descriptor read/64, error 18 [ 176.852910][ T9712] usb usb6-port1: attempt power cycle [ 177.412892][ T4810] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 177.572885][ T9712] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 177.583227][ T4810] usb 3-1: device descriptor read/8, error -61 [ 177.663286][ T9712] usb 6-1: Invalid ep0 maxpacket: 0 [ 177.812884][ T9712] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 177.852881][ T4810] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 177.903265][ T9712] usb 6-1: Invalid ep0 maxpacket: 0 [ 177.908585][ T9712] usb usb6-port1: unable to enumerate USB device [ 178.022907][ T4810] usb 3-1: device descriptor read/8, error -61 [ 178.143970][ T4810] usb usb3-port1: unable to enumerate USB device 05:24:40 executing program 5: syz_usb_connect$hid(0x7, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000640)=""/4096, 0x0, 0x18, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:24:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x4, &(0x7f0000000580)=@framed={{}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000640)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:24:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[0x0]) 05:24:40 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 178.702438][ T37] audit: type=1326 audit(1617600280.423:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14596 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:40 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 05:24:40 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 05:24:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:40 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000001100)) 05:24:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 179.102901][ T4810] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 179.142907][ T9712] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 179.292901][ T4810] usb 3-1: device descriptor read/64, error 18 [ 179.382869][ T9712] usb 6-1: Using ep0 maxpacket: 8 [ 179.502947][ T9712] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.562892][ T4810] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 179.593144][ T9712] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 179.602204][ T9712] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 179.610491][ T9712] usb 6-1: Manufacturer: syz [ 179.616955][ T9712] usb 6-1: config 0 descriptor?? [ 179.752880][ T4810] usb 3-1: device descriptor read/64, error 18 [ 179.872928][ T4810] usb usb3-port1: attempt power cycle [ 179.892907][ T9712] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 179.899779][ T9712] usb 6-1: Failed to initialize entity for entity 255 [ 179.913257][ T9712] usb 6-1: Failed to register entities (-22). [ 179.920162][ T9712] usb 6-1: USB disconnect, device number 23 05:24:42 executing program 5: syz_usb_connect$hid(0x7, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:42 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) connect(r0, 0x0, 0x0) 05:24:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:42 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendto(r0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 05:24:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[0x0]) [ 180.390910][T14654] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.413337][ T37] audit: type=1326 audit(1617600282.143:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14651 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 180.582959][ T4810] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 180.752873][ T8843] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 180.763538][ T4810] usb 3-1: device descriptor read/8, error -61 [ 181.002887][ T8843] usb 6-1: Using ep0 maxpacket: 8 [ 181.032865][ T4810] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 181.143216][ T8843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.203038][ T4810] usb 3-1: device descriptor read/8, error -61 [ 181.253102][ T8843] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 181.262178][ T8843] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 181.270733][ T8843] usb 6-1: Manufacturer: syz [ 181.277723][ T8843] usb 6-1: config 0 descriptor?? [ 181.325151][ T4810] usb usb3-port1: unable to enumerate USB device [ 181.572916][ T8843] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 181.579891][ T8843] usb 6-1: Failed to initialize entity for entity 255 [ 181.586759][ T8843] usb 6-1: Failed to register entities (-22). [ 181.598590][ T8843] usb 6-1: USB disconnect, device number 24 05:24:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:43 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) bind$unix(r0, 0x0, 0x0) 05:24:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:43 executing program 0: readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/4096, 0x1000) 05:24:43 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[0x0]) 05:24:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 181.724011][T14695] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 181.754622][ T37] audit: type=1326 audit(1617600283.483:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14690 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 181.785224][T14701] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:43 executing program 5: syz_usb_connect$hid(0x7, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:43 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3f}, 0x0, 0x0) 05:24:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:43 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800700, 0x0) 05:24:43 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x100) [ 182.085097][T14718] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.172913][ T9115] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 182.372862][ T9115] usb 3-1: device descriptor read/64, error 18 [ 182.392903][ T7] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 182.642930][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 182.664405][ T9115] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 182.792894][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.882880][ T9115] usb 3-1: device descriptor read/64, error 18 [ 182.913150][ T7] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 182.922470][ T7] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 182.931367][ T7] usb 6-1: Manufacturer: syz [ 182.937288][ T7] usb 6-1: config 0 descriptor?? [ 183.012936][ T9115] usb usb3-port1: attempt power cycle [ 183.212917][ T7] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 183.219855][ T7] usb 6-1: Failed to initialize entity for entity 255 [ 183.232930][ T7] usb 6-1: Failed to register entities (-22). [ 183.239797][ T7] usb 6-1: USB disconnect, device number 25 [ 183.762901][ T9115] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 183.942945][ T9115] usb 3-1: device descriptor read/8, error -61 [ 184.232891][ T9115] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 184.434464][ T9115] usb 3-1: device descriptor read/8, error -61 [ 184.552915][ T9115] usb usb3-port1: unable to enumerate USB device 05:24:46 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:46 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 05:24:46 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 05:24:46 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000740)={0x0}) 05:24:46 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:46 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000012c0)='./file0\x00', 0x101000, 0x0) 05:24:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:46 executing program 0: readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/4096, 0x1000) [ 184.754260][ T37] audit: type=1326 audit(1617600286.483:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14756 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 184.784338][T14762] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:46 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 05:24:46 executing program 4: pipe2$9p(&(0x7f000000fc40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 05:24:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 184.868546][T14777] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 184.925022][T14781] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.991330][T14787] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.092849][ T8843] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 185.192858][ T9115] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 185.343987][ T8843] usb 6-1: Using ep0 maxpacket: 8 [ 185.392924][ T9115] usb 3-1: device descriptor read/64, error 18 [ 185.473341][ T8843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.573152][ T8843] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 185.582595][ T8843] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 185.591012][ T8843] usb 6-1: Manufacturer: syz [ 185.597754][ T8843] usb 6-1: config 0 descriptor?? [ 185.672891][ T9115] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 185.862948][ T9115] usb 3-1: device descriptor read/64, error 18 [ 185.892887][ T8843] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 185.899867][ T8843] usb 6-1: Failed to initialize entity for entity 255 [ 185.907086][ T8843] usb 6-1: Failed to register entities (-22). [ 185.915463][ T8843] usb 6-1: USB disconnect, device number 26 [ 185.982935][ T9115] usb usb3-port1: attempt power cycle [ 186.712882][ T9115] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 186.902913][ T9115] usb 3-1: device descriptor read/8, error -61 [ 187.172879][ T9115] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 187.342976][ T9115] usb 3-1: device descriptor read/8, error -61 [ 187.462975][ T9115] usb usb3-port1: unable to enumerate USB device [ 187.683075][ T3236] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.689369][ T3236] ieee802154 phy1 wpan1: encryption failed: -22 05:24:49 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:49 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 05:24:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0e", 0x1) 05:24:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:49 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 05:24:49 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) [ 187.790616][T14821] "syz-executor.4" (14821) uses obsolete ecb(arc4) skcipher [ 187.798889][ T37] audit: type=1326 audit(1617600289.533:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14815 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 187.804674][T14821] "syz-executor.4" (14821) uses obsolete ecb(arc4) skcipher 05:24:49 executing program 0: r0 = socket(0x2, 0x3, 0x2) sendmmsg$unix(r0, &(0x7f0000003b00)=[{&(0x7f0000000380)=@abs, 0x6e, 0x0}], 0x1, 0x4) 05:24:49 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "cbf5e9", 0x10, 0x21, 0x0, @dev={0xfe, 0x80, [], 0x2c}, @ipv4={[], [], @multicast2}, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "8356e8", 0x0, "ccc373"}}}}}}}, 0x0) [ 187.834846][T14828] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:49 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a6caef00180000fcfd000000000000000000000000000000200000000003000008677a1fae8701b6020000000001"], 0x0) 05:24:49 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @multicast1, {[@timestamp_addr={0x44, 0x4, 0x74}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 05:24:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 187.909715][T14835] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 187.929841][T14838] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.014417][T14846] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.072852][ T9673] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 188.212857][ T9115] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 188.312868][ T9673] usb 6-1: Using ep0 maxpacket: 8 [ 188.402934][ T9115] usb 3-1: device descriptor read/64, error 18 [ 188.432869][ T9673] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.522985][ T9673] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 188.532127][ T9673] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 188.541747][ T9673] usb 6-1: Manufacturer: syz [ 188.547304][ T9673] usb 6-1: config 0 descriptor?? [ 188.674056][ T9115] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 188.822878][ T9673] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 188.829922][ T9673] usb 6-1: Failed to initialize entity for entity 255 [ 188.837048][ T9673] usb 6-1: Failed to register entities (-22). [ 188.850133][ T9673] usb 6-1: USB disconnect, device number 27 [ 188.862852][ T9115] usb 3-1: device descriptor read/64, error 18 [ 188.982891][ T9115] usb usb3-port1: attempt power cycle [ 189.702844][ T9115] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 189.872892][ T9115] usb 3-1: device descriptor read/8, error -61 [ 190.162872][ T9115] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 190.362887][ T9115] usb 3-1: device descriptor read/8, error -61 [ 190.484408][ T9115] usb usb3-port1: unable to enumerate USB device 05:24:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:52 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') 05:24:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000000e40)={0x2150, 0x0, 0x4, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1124, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':{/,+]#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "2813c54cec4365ede5a38c4f6c37d61837ef2acf1beececa9330b3255429f73e67acbdd4501190ef2985834727f4a25049a6b4fe5070098023b7ccb8a3699eceec8d996215fea37ce8a3ff149bc6e86598"}, @ETHTOOL_A_BITSET_MASK={0x74, 0x5, "9467f5a554af12de682caf3dee7c974ac169b2c87d39e6af796455f2ad41cb4438b303609781f00c1d74c09426f2ea371343d427044f5d01628dfc55f2169aa727ac1f18a91ffccf33e323d2c65693e6d5b01e908b208dbd5aca4812afb4d19807549961334d706012cc01a6795066ba"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xff8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfeb, 0x4, "b8ba1334b3f9e1711c3f04109591a1dafe93bbd1c35cd05af88642f104dd0e631d9bb5172a3872b0f568e8033ea24afb3fab2c5a5ad8cf73ef7bf827fae8fc185d32622a53ae34e594609b7e5e74011c4f30d5b2cb2256cb86f811fc131b75c10b3f89ee8ffdce7e0cb0e583f7c50e6f1f4406343224952c7b44aadd966a23c5a0283ca0875217f2f5f04ea4fc9d0ba74fae1a33c2664000ed5b6c776b3e42687607c870af84a0a5ea2182abd37f4015c27f5bfb247afc462460b25da17084a8b2944dddfc3f5f0e8363e045ff5db2705085b581b9cb444c5ccd62b40038d909ea3e70fbe3d07d0357ab65a13ef4952fd89d05da38f986f398289bd2354b53b04af30f5fcdac60843ae93ed495dbaa31fbc829c1097615c8033e7c3a0a96db5bda5dd1a56e81a768cb8dee3896588d204185c7645518b40afbb6d29bccbcdc30aab90f824d071a9bb8282ffc87916aed247ba623bf7aa01e1da7a470a562c45f1eb1bed107bd38f073aea43114bd3b72903e22adc156546265e261031383e59c2d7a0f4e46e2d966c58398433ecab89425b3f43e4601a27dac94cc4e18fb104f0870af78e36bd3f7283849338c2b94e46d2946e7f6372563b507f0f098de3cc67084bd09129dff92338649572781598c4a8f1ef058c7218b0f3a1c1863c009d43a171044a982c976e9b849d22cd57e2ead07c4fc5d210ee1b1b26d54f22a319042accddc86357732a7a65802d6ba461b458487b0f1efa22b026ae9f80a1e8930d2e1bb0ca0bee389d49b5a4cf0b50ed63814f97ac83f2b4c20c14db577c34e1e64c29ae2a9f54cb18b56a0af2d05decde79ad0ad2911e3a97b373c85c837ce23a838af591ca1ebbd5e22b73902473cc2f3d982812ed8183077b59fa90f2321580d46554ce5330649ca4ee5a0a65e7e25485ad46a271656c9e2bdaa922c3be316c688dd48ec7be637de48132ac31a185f80de227a9b3a3659ef39345d4f02ec9f23f617d5e5c4b532149a8ae7b6a74e5c0b77b9f02da7ca7ad7dd63e0c24b46fab58630a6436fb9177b5ddf19b66f675983544ad3abe982b6d1562fb4106f3ef43675787380fdc6f803345d41d33340f40f9ea8f157827c9c925a03f9735a62f9b0926284f051fe258fe2afe955bd8ed9b6876374d7e50b4056374f5a84cabff915a810dd4b464282f786628caa0cf227bb699dd2db30e9e5d92729d5fa80b629c1f6fa9d5a89961e92ba0bd2607269c9ebd2fab8d0316aeefbda5cc2d0dea21720c47ff102d540e4bd65ed36029c4363ded4aaab649a3e02009ce9b15c838f29df58dc217242b10ef111b93224972908916cac9dc28d9a04de82b8b88c887936113eaf2a38d32aa908946b491a8a747ddd46a3d82b39261b14759e9e6b9c437cd61ac500d2060e8ffd6f21a2ab7bdf6cadaac477a7e6ec66ab47acf814c7be70c932cd2e3e7ee0aaef1a89bcdfa453ab1e7c5d6eaaa6607bfff324f51f10fab079cda7ba8f5615af22dcb22b7acce7ad89cf83ba4b12dc0e60acfb12a95f92c9f0c7cc0cf6a15bf5f89f097c2f03f86c00d9a56dfe5928f43465da55b6dc9c34d4884624085262918b312aff90419cfbad48a7eb8dfdb598887cb216f0e9a33baaa7df9a77b4bb3e8a56264d77deb4da2c1a3f48312e2261a50b1b64f950bba82678b754a1b14bc958a04b16b73b5076c3af05053355eb2d452e97826af2bad24040c6c83fae4af82696bcba00c94b6c1094c0de025004a15ea73d7b6c3ce281c33392890c3283f169fa1644fce9c18cd6aa85ed1728cff14ca8024ede8e91a5f48bf3b1f28e1dcbaebe7270122d263e4eecac686875d8d0e42477d8becb4477a23552423360d9741689dbda9c6e6c052733bdd46259d1ec8d85bd7576c1c69c33b975c62a0529576c40c5b18111b8151e3b9b77f679582c4b28541aec6ef82ee2794d266bc5512c2892a6ae89f6d1acd37c7a9ea685eef5eb8f2b9d5af33a4d8d10cd973c8b22457b386507d47fc35ac20d1bb68082f41176dab1ab1837d8ca833cf78a8e74b01ae70797c571eb787612c34b92848a9625f0827646976d64116dbd4d608fc9737ee75100f7f4d3bba5a43af996faa99d46d283598c98a2e16b318f86c3b34235c2074cdd3f17b0a0c1566ddef7234b34838e53ac73c88c12a1e4b2ccf730c937c10306da26e507962212a128b53e8c92fc4d6677fff88c63387dfe16e43c931ee064506d9263324821bd460e7e7c5a7cedeab4274676e0ea4220ed348fdb71e8ce5cae2768f0562d7447f8301dad176bd49f1838da7840818248ec69daf6d7234747d4e433bf401916ab40e7f7cccc41501f4d87c6be83a74a797a3709f4bc3411d29dbaa66a42a0c31c10cb19aa189a83f1764a0f666749b3218f1a1258dc77ecb18056e0ae11a3d8a428aaf6e3b768e57fc25d4ea20d204cff59e853e5e71b21571a8207873368125a15a8da5d4462fcfa9968f1e1980e664c83d5704ab6e8279cf9d0d06b4d7d0d8671d7b8f1d6a4dace23b0d790d359c6390dc280a86f148d24da6963ae1802d651e9b8004c1bf67cef9a8945189fd9d763d86a67648985b893092077c843f973cd3edc193541357d87a2cbdace46b40b5550cf1bb0ff4ce5e701f92430386cc1eda5db4bb8ab6335765efc05f681fb22ff3aa922accae21a9311894a079f7fd06ff454d24fcea7086bbeada3ff03b7bb4cfd821b58a54158dafb2724342a89cf7e374f9962c6a9c2968f12316731ded47d91d7f51ed37006c3b728cc211f7d68efbd07108bb009c215059a434fa6408651f14e15bb35e391772670e64573baf3c979f78fd9d4dc07b182b8dcfac181f52228ace566808add3460a13d71a5f2d174683a56f33ec75e014da4e807441700497dfc662ca2f08be266e822c208496b8a84a0470a3f94050f9b2000d0122a70939f4a47cac09adecef0927d18d4457e115c6f641101cf583cec96b91aa9af2a025301905c6a033cc965e1e38b6e070b793447f367e583da389375c1b043da5074b99c0b14ef6d663c5184e20d8da40ec328f0e8af3ec72f800a1081d76ad8fdce85d990656eae0c58d95111d6482575015b7cff75d4932c0d02429e051f6caabdb2c62a0b4a940570bef8038794a526cdadaf840c8aa80f1ffc91a00da3a1c5545898fde7aff75097fa385a8368bcebc639e91be1fd8503deffec2e69ecbd346d0082ec4b0ee5afa56b28221e9b859d06ee4157fd00037b547f6f07a4ba5814618e7b92326a2b78de582e53faab1cbb29f473e01d9587704d3fb48b30e35549c472d8862e2660eb2092a2a734392485853c7aa78c2cbc947837e27315273a9202e7cdba1af9286c510cbd020697b6359cda0bf3660045d2607a3d72b6e43540193bb4f0627c73a8b4a2f723dab3192b3a2cbae9270b6c5d00c5979d82e76408e62d90547134f75a39a182d9c4d0dea53bab9e0fd19aec36ae23b320578a537ac5d1762cffc1ba7b2d062672d671e0594f99fe7fd66e800b636dc3ee8583b6a46077d05b4fefa43b20a84698408c7311baa82be8cb8fb7630f459d385d3b2308e9495442c1235560fe06242058f3bc3c6bbd9ae4b2f5d07c3eb89d8f54fd70022fdde35f2a6d07c7327c4b9026212248d1689f06433b2d407d799b7df93a316ead78092f150126ff96bd25fafeead61ec2bc01b15a0b2d126ed96e9d69b52e47ad3221e027160af0f51974531808f9affb3d3dc0f9e2572abaf6f5c5461d9800b298403895578b2839499cff7bff4fbfc4b982be2ff6818343d5a2c7360423adca847384aac1ea3a4d9343af71c76676655692a155418d3346d05a9d8374fbe1f93c3cfa79d5d7b59b90063e8e5e96cdae0dc4de12839cf20ea2c8d7b6b0c25513eca4126e43d5bc5de850d17b299179cd505f7f9a161e254631291e031889429693399056799b0f3d6056738083b025636548c916554f626240a42940c59d7aee32e8a52f47fb403a36bb2524f9243db0de61f0ead37d26c3c41d5933c8e677a06a6587b63b8bc43bb6d31fe6b625f7a89694eb2d9b0404ff82ec8fe6bc1e441e45a84dbf40bad37d96fb8d39ee523535ee891ee12b915e6f6521180d711c5a3e76d06f2b245b3683e849ef7063d9c1f426785ecd1dc8d967edd4cce3d04914319d3fb1e590e2a215e67cd7005a89a9e9442cffb0665662712f0759d7ac59685d3310ad9a7eaede4004d361343aa997bb052fa2fabfa83730d902bc23c49eaf0963fd265a852b519505c6a28bd0dcfd81cdd6cc1edaa1d681f485d2b8e03278a75da5d1b4927058c7c90aeeeee2bdc4ed35a20b2b42af4a33f080adfed4fe75f6da92478bd1d07c6988b37b9b211eed13ecb1be14af535eaefe2540a8da9e84b58039b0df8f0f9dce0a5d5de5a7d9a01fcc5230166d9e9a09d8ef315a0abf0f40fcd8550e82fb020b23a34583a3f88a01b92a5b428fbcf98b1b26508ba9f18212194eb38ce8f2c4dbbbf6483a30baeec2dd7d13aa5865d9af1e664329a2d28739fe568d5ff31c5e978de7d2b7baef0bd0324e9abc13a2507b8384e58d2fa237db0a255315bb574b7ce6832061d05b55a69af4098ff2a968d536c91a7fcc3a5c30fc3dc5fa86e7e181cdd97dbc728363688c222d1ddc086f2638cdfca7af7da782f551808e0815ee69c5a4f6991e5697cf39fefb1342c6b72921668e62eac3b70129301ce103f84bda3a2f0f0b94a2ac82bbb8a4ca27c4df1f32606a2b5d7632dab8ff1f02ea6cb147fecfa16a3a546bd51500d4c6feb456cff82860756fe97034595ca9aab27ddbfa5f4b6fb40a2f227589c6efaa5ee55d42af4ce30a201de7bce95f59a33dd0f73046404a4aafe7a16073093986090eb689f815291021a75b582764334e361ca090823d4cf94f997a1dcdea832863f81ce1831dce8ed6fe0e50797f0edb76e620e77711bdd4e064d7256429077ea719c7b19eff91917d2b99cb760a1f2eeb282c511f25397d598e2f82a85a0ae2c25f4fcf559abc4e0586b501a83d07bd007e1d56a20fce57315867ecaef402e7e46b871e701e7ca3f387b3cadfe79979c12106bbfc839bc80c817fbc31cc2bdb8a3a2924dcf652d3aa43ab1080e1132af67859e4e5d4ec3a085bf8ffb0841efaa3c0eea5ccd188819cb3fbc97ae7b56637577b1fdae717433334d7a6d76588eb5afcb1cc7b0d4944b28026fd07d052c17bdb4ee6f62ae804290e31d46da87309f69c7ff65587e925e9349d219a24e8c895a7ddc0e655fad1eac2c727aa587ba1ecd026797fb49857b95fda77f623f9062466033f85c8a072876000c77bd5c29e986f713c0dc79d67c56277f07418b5ef716cf483a7e639c14c6bed774889b47794c4d74bb8634fdb50e0c72dd936bafeff21f6ddb72752763d1157e84f43fa1a6050f9a1da889cfef968347112010abd3e30e86da1907f4cfe482d4ebee9778b2329f63c851702680368b27cfaf6c7b2c36bbcf6fd5ab3c5570eac3732adffef33659e91b2e27c9bb8b0dded513113260f922ab34ac36aa6d7348335c775faf72cef809d86684a0107eb3501d7f3478be4a5d6ebfc8a18dde65f02e1b6ac9b79855afa80466056467b5be8ead38dab5e76a7e37ec6f7f124795509b2226eebe77ceb76d6e947cb6aba5bf7218353022d1fc8cb86c4ef68a286dcd4633de6ce57eb81a9b38c68d3c0906e1cea26d478ff6f8f9fb87d58114c4e67c2ebfaad9fbffe28f5ed98d1f75b69a7c315dc7cd7ea9435"}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x2150}}, 0x0) 05:24:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:52 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 05:24:52 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:52 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000002600)={@multicast, @random="65bee1395acb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @local, @private0}}}}, 0x0) [ 190.820599][T14881] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.834865][ T37] audit: type=1326 audit(1617600292.563:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14878 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:24:52 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x3, 0x0, 0x0, 0x80000001}]}) 05:24:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) write$FUSE_STATFS(r0, 0x0, 0x0) 05:24:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) 05:24:52 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 190.959760][T14901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.124414][ T4810] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 191.252847][ T9115] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 191.372881][ T4810] usb 6-1: Using ep0 maxpacket: 8 [ 191.452860][ T9115] usb 3-1: device descriptor read/64, error 18 [ 191.493177][ T4810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.583118][ T4810] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 191.592168][ T4810] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 191.601948][ T4810] usb 6-1: Manufacturer: syz [ 191.608721][ T4810] usb 6-1: config 0 descriptor?? [ 191.732879][ T9115] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 191.892879][ T4810] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 191.900163][ T4810] usb 6-1: Failed to initialize entity for entity 255 [ 191.907088][ T4810] usb 6-1: Failed to register entities (-22). [ 191.915604][ T4810] usb 6-1: USB disconnect, device number 28 [ 191.952892][ T9115] usb 3-1: device descriptor read/64, error 18 [ 192.074115][ T9115] usb usb3-port1: attempt power cycle [ 192.782858][ T9115] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 192.963088][ T9115] usb 3-1: device descriptor read/8, error -61 [ 193.232983][ T9115] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 193.402993][ T9115] usb 3-1: device descriptor read/8, error -61 [ 193.522924][ T9115] usb usb3-port1: unable to enumerate USB device 05:24:55 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:55 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) getpid() openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000001340)="43c1869113474428d4535002d4489c246cea5c74f5e2be693163b34c510cafc8eaba18064ff8038c5d5791a7b92561fd61e85075c7b062a935b97dc148d79dbf54cd076a004977ffe2a2beeeae061bfee752168168306034724c2391089b963f1beffda347bd1529214da6250535784707adea751776a6c67377256c3a79fa99276cab829ba53bf65f29a80f0dba6280182f9aaef4d76e8b288494a49291a862a4b42444c038cf141d6ec83b96fc2ac8e17cc222d15d6f3a19002cb64ec828bc109ed38930df3c438d9e00f47fab8ad873cbf5de31bd8cbede2a1c36e52b529a26710884c896150b4728a74e5510bd7debdec59855204f4de48bd188917e6664dd57314b7e7ade38424a6d4907c11b62db602f1ee0e34e4ea0fdc21cb258b20266d4e6e6a04958ddf4523cdeda1c1b84927029026b5501ecfbd60440e4e0a7bc60235b161f4eb479e36bd36420439727ad48aca333e5a5a7a012fb370367028f33139b7f2fd2447cc102ff4d75bcea6e8ae180ac0e50b4cb027d0d680d099a1ac6c3bc2eea5a4e181cbddd7182a1f8b0acf41212a21b3227757ef714843df562f911866c2aad4663cd30033357075d96a4d364aa66fe27d76090f8c679707f5cabb3be66eb4841fbfd213d3d4c71fd8c03912df53cb57fea6c91a8c6e3188aa790a0692004a1be6df3eb06843056d95d15211b7fd1a5582370ac5e30c4ece8cf9d034e178697c92989a598926e6000656a4586f55c186141f08d1091df0530293394f6e13132c882b6f9c8825608753654960ad9b8c31cb55b5f9d8453b647ef3167858bff3979c7b7e32d52903a3502e3e9641a2b6ae9bd30e3f10e4a8b0adae833d9bfeb770d7afaf115d07fa08c6f7a8f879162ed3b76e0744f505a2485d529a2e8d0a411dc12239325c68e6f06fc03173984de4d0383d1997e25491f604c7db35f125c1a1a15c9336ca51ba03cddb40f93ee9d8be1b8aff1c10bcfee477985a277ac687c28492406b5fefbf2b8870a9629d6dc910fb572228e77b7470a25f8ae14c89a77abde1315a0b6804699a2d72a4e5df7722ce6f1888f9916d9b87e113a66dbb7a0b9769238e8f52defb4ca4c5f262075f6d2e229b65ce75b971c10033dcfb7d4995ceee0f182903d6adea4f42872289fbef0a6acd22fadaea9a39ba75d1bd26fcdcf64dd03adf394103332cdf700daac4e865e52886bbfd1f79f12591535e29409a32b089e2df8d065ede63b1851baa339c6ae77bd0dc82931a2f343607527dabbcb2fc81c53296d75a9174553a55325a6fed8e927d40aa6352c671f5e2e59d293c6e6eea5fd9f68e0460e95295792f802c1bb27c46b700d1e2f6ff04f8fc3c0e208a2bbaf3e37c7b95cd25a064e85fc1c472ac7316ec308960c7f4ac6c413302aa92b7350931019aff7b71a0ac1b7e4cd9f215d0a2a25f476a893b45d97790a3ed5fa16f4bce7a1746f5d5276e4cddadf7719068bfe6266ac4c5f7d0ac61169b7f1cf0466f4a958592320a231320b6c5384c88089b765a9c7126e445d4877c95d2be391b35760038806b9bdc3dcec77c8f13f113b3372df7ce0d0351c0e867275771003eb1bda1fd15c0958e00a92fbf64b93b9192f0dfe018f207a31fa82ec6bbc7ca73f4064d09e68f7894d3a2debf770278f66a0a6dfb464db7fcbdea48d9f6db6bc167a6444db370f51837859c3bb51f7cadfb4472a73bb2f416fe9430a067cbcac3c94ea11998daafe77e1f1b0fc58e8170bff995c4c8e867543d6f397d92f6abeedf7fd320e920f96844aa36033ae7bc4f275dc307afc746b791d1ed1fee26855c9b046c530535ca2484c3505ecf785ebd8ff8bd5e9edf5ffc9234c4a02289b20bc8afa541e3356f6a6e0a2a2786d64f192deabf0637e1ccfb7facd83173298de203f38ab4269e99993bb40e9f6441c6c214d6e3abc0618f3249f948c303e8377f931606194472d305c3c847d4458a0c65fd277723ce260462897de2c57e42b853ba96c77dca58349ed599940dc11684fd7edee0e743a1055a41fa9fbba5b4d2a3c5935b612e732d27fa58bf213fdbf3e28d64b5ce3ee912486660d6266e75995f7d884ad175af64793298c7dd1b4f47aba04be1cb48dd00b749fbbac7c2c20056a346d0e0664d4d91a97fc9995b1189292f79e325f75b16ec4de1c36271a9c20c291debd7788919ec30c152093b9092dc03abd64f59f44ac320b0d170d8fb2352910c74532bb48fc4e4f1f69912defcc8f7f9291619e7e1dbaba11cd4ca4e1b585a3f75ae71a9927906fde9a22398fa3094633af53d51e47300dc67ebff05a112809eee2a91a588fd8f17973044a450f765c970dadf3c437f66da53b6f135d07bb082bd0965c849178330432b01f64b43ca05233894be9e1916423f76cc0a31ba638f077142df7d332919772edf96c895daf39b297e31d4ee10618016a2400ab5a02f51cb8ec47712e196103adfaa072c504d6853d38d427411615f7394e5b34ba1ed55c84ac171e45a28ab21da3bb86a610142173e1e3a0b8be249b074b6d2f0cf73b7a696ec735e71da1d8881ee57cd40abb5178a6ca008706171b9d506545c2aa4b57f1a09ebc8d23bc096ff6a6bd34c36c14d4b9308bd242e6f899fcecdcc48cb2a124713503685e1a457bc869d32a62d371565c861344af40dc7c8a8e59534f0c6402b07866946612b27644db3311b4dfd8d09f1922b2253b7c9ca06b029971b0b64104e96b1899101ea9d405f0e566f88e4fb22c3c8b46b61c6448fe85f4754c949d73e47d9dd24e1a3b892cc5691572ad7d2d211b72c61ec8b1707166bbbe10cdf9c413798b65835c590beb607ed17432fe19326f090d45b9e8d97fdb1b327cb32ac181c281db57f209a29d3321a92c49969501bb3eef9e440e6bcdf8e0dbc72709a6b3634643b13898c78a960557531f69fa934d9cf48008c0e1b4dc5559b8d3ac6eee5d2a1384e8d092ca204a80c700e4c2ab125b48d0383690fb11f2a2d17278a9924b22cfdc7caab28f7ed463be1117d5dffae18495415f18e92b65091f4bf9e8fa4a1f5acfd49685b74e9411b30103475caa72a17d204128790543d8f91294189b6871d18fcdaa8c6cfa822c021254c021a42529665dc28a898a93ddc1e0a9e8d9bcab69e0d855f4eb07cb2724a06abbbb158a63510d0b969a55ce57f71cc7d6bcf90dec3a2212f780e8c252ccbec1bdfc0ae631a1f270b712a668a9a10a8e83aaaba30e3ff5d84d8dbc7c6e6606fe14a21327a5d2c3b2acbe446b122041778e68334dd5618b3e7bf52ba7198d5f0a26f495695e451b5c9972e598fb730c0cb16cc266fef82e0360547ae12cdef50c81962f733f0bbd372bc6843f1fdc4cacfbe0f1b5e6fbeedcf117a12206c445545c494a0a476ae4c718e19c7610dd2880de0bc618835d1d604595bd35215b98f1c3e9825137756d24fbcb79f9df68a4a2a203e9ce2eabed16e8e6aec8b0eccecbc4a46eab57ca28ca9669318734cd268389c38903406fe2252b5eb3ed674e183c30fc1e6bec465c63e34e3f56d78b2750e3224f7b9c16c752e7caab0aad30c7bbe1f86f1f4868d7c27ef91a5973090dc3ab2915a3f74f4ac675a7f80c6138f1bdbbbf35f1592aa43ed7d28231c903037ae2913fe675c00e4cde712759dec09d6f98a9dbfa6b9d13fcafe1b0eab8e686241e9f80fbecbb9e2647f9f0b60d2d72253e2176cfacb7e007833c70ac5edf09b68d43180bcb321460d45fe82d6b6973e1adb71ee0532a0959aaeaf77dea2dcdeb08bf8f8ebb7f03ab52aee7f3c92f4723132ba8ba988b1dff1421eb17edf50707df211395d51f45ffee1c16fac0df4d664db45e329f67e17d12fad8519a2365775d10c73d88d375da5a143d944646e4fc6284a50e9982cefb0e56c3bc0cb24800377a1c783bc0dce21a32e2500ad98f6eac8d94f1f9bc58f0ccec0e8404bfc4e0574a6941ae1612632f787b465c865dcde5504f3f095411d54f003bd6ce41e1da97776b9fd232809929de9eaa56696dbf35f81ba33783cba4e734407f51fa87732b92b7c7358eb00a7c97a403b677a744202886b19ddf2b5539ed619a5818bcf5cfeac4840fa1902d9540b9de1264de1d58a16bbedd8ee4c01e19cbfb4eade0024ae105f442de68844fd691100a4938f3e09d29edd3d7db9c1e3747e367d53bf88fd592a6b3c78f7e538e0317f5e301889e0f9553a0935671c6735b35d60d8c49473f6a442d8e44d394b41cdf15e078c2c0a81a0ea86c9b8dbcf68a4d726ec6c208289c286bb7e31390cc8ce518a5a40ce9b9cb53eea8e4d8ae942cc2b9ae7b3171955cc39ce6d240d67bb5be70d28b8985c6f5c10bd7e1a8cd6100b0138309e7906f5390aeec7a3d3303eda324e67e11d6b6e357e52e9564e7693576367db950e18573b7b9ffd5b26e923eeeaf19b6686c9bb1ff300d502e0496f0180cc33a526d36cb7e00e7a6a1fd32fac3d249d677b505dc1eafb3e06700177282e116dec1ae9887e17eebdbc3324572a9bbeb1c78ac26dc709255db1866ffc04af7906d5793609916a872fe23950eee5411dafa7a1a06a53e5e93cf12bbc33b61f7fe998fccb61a6085b4f32bd1afa1c79e4aee3a016520bd6f37e8eebd8c31070de3cb80824f37d68dab17ee3ca4ea547dba91daeeb0e335b489b6f8357ce37ada1fac842dfc4fa07234a8d3f4c48eeca20615c9e6d0c7fc2b7d63e53bafcc50e2d649e9994c047d9481b23bbd0af646f6f8806c6b367ded127de78894f6c0fa566de6b58cf22e1f17c211b096c9b93f50c5eb66de75766c7411efa29f7c1642ae73f90eb3d5dc6016427180a77fdd4d9e6a911fa2bc75d5d212bdf6a13808c804b3246def20a5ae512f4c0a469ec2c8ec4fd514b9c93bbf644990c3f772c4c4a3425f480a63ed12fe426057af0b0377c19ed48e801a1236f5d4c83811f7a9466dcdcfca64de8ab4e0eec0645374a14dc6d51cf2303775f8ef697511449caaef747e4c391b065a629cd8bc37c44f9c3b5046d7ab1eab3d0bae694735258387512ab8b321b0815797fc43070a873994d95edba74a93c24fef34c9a66e464ff965f92e505d085014f58a6f50f899588fe2305b990a92b35aacea300e6f31485869b5bdba8895085ee9a5f691785521dbd89ffa79d06f57451dc8fc9abf45c28b72eeccf75cfb3b3912524752c61d553b871439fc7ed4a897e838f7eb3ee1a830f0d0a852218ef64c24c24c4ff0fa8fdb2dae83c5fa23d3788bdde69333737b15f845a69fb6992c81f4be39fcfe55366074dd5aabcce4bc631d1f4f7164eea0240f3afbf142c54c98121e9c75c56b0cba7b90434584d041fd3a68c056c17cc5f78363a497ca8bb818f3e3cb2da857b74565db91f7f85ff877ecb877f02236859994ccbe9e6a0cb7c2e67eac8ddd4413d8992b2433cd2756bfb52acb56c2cdc29b8bd8f76a7401ae23d4a427f4771de71698b0e86851c2280e842c725e0e84ca5f9cc5fbdc1b5ac989e858011e4b141b9cd5234698a938793d12725ceec7f4389bb5f84c7ea7cdbef8b85270cf8f83d4af2d790495de2cc3376490b62c8d76eaa51e5e5e2296cad8262b69ea33a949d8ee26e95114bd580ce35fa1a9d5e4e6bb89319a953951ed52f3904dee972afd2cba65be310c7e2c1099f606aedc9c7b6c780ee8d6685ea1c01c796090d019e4cbedc379cc1b93ff3b226a25db9317fe73d4be2fb4b135a575ef4e69b4") close_range(r0, 0xffffffffffffffff, 0x0) 05:24:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000002002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x298, 0x108, 0x5002004a, 0x0, 0x108, 0x0, 0x200, 0x3c8, 0x3c8, 0x200, 0x3c8, 0x3, 0x0, {[{{@ip={@empty, @broadcast, 0x0, 0x0, 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'dummy0\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28, 'state\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x44840}, 0x0) tkill(0x0, 0x34) wait4(0x0, 0x0, 0x40000000, 0x0) getpid() tkill(0x0, 0x0) socket$isdn(0x22, 0x3, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x200) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="3a2c29bd7000fcdbdf250100000008003a0000010a0009000180c20000000000050038000d000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000400)}], 0x1, 0x0) 05:24:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:55 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 05:24:55 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:55 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='batadv_slave_0\x00', 0xf) [ 193.865968][T14949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.876731][ T37] audit: type=1326 audit(1617600295.603:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14945 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 193.909294][T14950] Cannot find add_set index 0 as target 05:24:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:24:55 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000005640)={0x2, &(0x7f0000005600)=[{0x0, 0x0, 0x0, 0x7}, {0x0, 0x47, 0xff}]}) 05:24:55 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0xc0189436, &(0x7f0000000040)) [ 193.999135][T14973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:55 executing program 0: getresgid(&(0x7f00000036c0), 0x0, 0x0) [ 194.109771][T14986] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.119195][ T19] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 194.212844][ T9115] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 194.362842][ T19] usb 6-1: Using ep0 maxpacket: 8 [ 194.482865][ T9115] usb 3-1: Using ep0 maxpacket: 8 [ 194.483288][ T19] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.542957][ T9115] usb 3-1: no configurations [ 194.547590][ T9115] usb 3-1: can't read configurations, error -22 [ 194.573042][ T19] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 194.582204][ T19] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 194.591783][ T19] usb 6-1: Manufacturer: syz [ 194.598350][ T19] usb 6-1: config 0 descriptor?? [ 194.702883][ T9115] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 194.884289][ T19] usb 6-1: USB disconnect, device number 29 [ 194.952860][ T9115] usb 3-1: Using ep0 maxpacket: 8 [ 194.994022][ T9115] usb 3-1: no configurations [ 194.998627][ T9115] usb 3-1: can't read configurations, error -22 [ 195.005603][ T9115] usb usb3-port1: attempt power cycle [ 195.722878][ T9115] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 195.842984][ T9115] usb 3-1: Using ep0 maxpacket: 8 [ 195.883028][ T9115] usb 3-1: no configurations [ 195.887724][ T9115] usb 3-1: can't read configurations, error -22 [ 196.042842][ T9115] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 196.132937][ T9115] usb 3-1: Using ep0 maxpacket: 8 [ 196.173144][ T9115] usb 3-1: no configurations [ 196.177733][ T9115] usb 3-1: can't read configurations, error -22 [ 196.185451][ T9115] usb usb3-port1: unable to enumerate USB device 05:24:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:24:58 executing program 4: pselect6(0x40, &(0x7f00000006c0), 0x0, 0x0, &(0x7f0000000780), 0x0) 05:24:58 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780), &(0x7f0000000800)={&(0x7f00000007c0)={[0x6]}, 0x8}) 05:24:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:58 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 05:24:58 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:24:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000008180)=[{{&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}], 0x40}}], 0x1, 0x0) 05:24:58 executing program 0: clone3(&(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000022c0)=""/58, 0x3a, 0x0, &(0x7f0000002400)=[0xffffffffffffffff], 0x1}, 0x58) [ 196.950496][ T37] audit: type=1326 audit(1617600298.673:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15015 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 196.975406][T15027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:24:58 executing program 4: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x109041) [ 197.050296][T15039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:24:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) recvmmsg(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="9e83d88c678bd9451cc0ddb0e6877b9052", 0x11}], 0x1}}], 0x1, 0x0) [ 197.156778][T15051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.222849][ T19] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 197.372826][ T4810] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 197.472830][ T19] usb 6-1: Using ep0 maxpacket: 8 [ 197.593065][ T19] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.612940][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 197.653427][ T4810] usb 3-1: no configurations [ 197.658046][ T4810] usb 3-1: can't read configurations, error -22 [ 197.682874][ T19] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 197.691956][ T19] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 197.700844][ T19] usb 6-1: Manufacturer: syz [ 197.706573][ T19] usb 6-1: config 0 descriptor?? [ 197.812843][ T4810] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 197.984085][ T19] usb 6-1: USB disconnect, device number 30 [ 198.052877][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 198.093203][ T4810] usb 3-1: no configurations [ 198.097877][ T4810] usb 3-1: can't read configurations, error -22 [ 198.104244][ T4810] usb usb3-port1: attempt power cycle [ 198.822843][ T4810] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 198.913099][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 198.952872][ T4810] usb 3-1: no configurations [ 198.957512][ T4810] usb 3-1: can't read configurations, error -22 [ 199.112872][ T4810] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 199.213133][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 199.252864][ T4810] usb 3-1: no configurations [ 199.257521][ T4810] usb 3-1: can't read configurations, error -22 [ 199.264466][ T4810] usb usb3-port1: unable to enumerate USB device 05:25:01 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a00"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:01 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000004e80)='/dev/btrfs-control\x00', 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 05:25:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 05:25:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:01 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff010300000924"], 0x0) 05:25:01 executing program 4: sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0xe4ffb6aec9384236) [ 199.982478][ T37] audit: type=1326 audit(1617600301.703:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15088 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 200.018376][T15097] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:01 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3e00000000000000}, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 05:25:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000008180)=[{{&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}], 0x40}}], 0x1, 0x0) [ 200.136169][T15117] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 200.230023][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.282852][ T8843] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 200.442838][ T4810] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 200.522830][ T8843] usb 6-1: Using ep0 maxpacket: 8 [ 200.643166][ T8843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.712830][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 200.732892][ T8843] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 200.742058][ T8843] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 200.750380][ T8843] usb 6-1: Manufacturer: syz [ 200.757527][ T8843] usb 6-1: config 0 descriptor?? [ 200.765263][ T4810] usb 3-1: no configurations [ 200.769917][ T4810] usb 3-1: can't read configurations, error -22 [ 200.933182][ T4810] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 201.035182][ T8843] usb 6-1: USB disconnect, device number 31 [ 201.192827][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 201.253018][ T4810] usb 3-1: no configurations [ 201.257639][ T4810] usb 3-1: can't read configurations, error -22 [ 201.263961][ T4810] usb usb3-port1: attempt power cycle [ 201.982820][ T4810] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 202.073166][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 202.113075][ T4810] usb 3-1: no configurations [ 202.117735][ T4810] usb 3-1: can't read configurations, error -22 [ 202.272860][ T4810] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 202.362961][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 202.403407][ T4810] usb 3-1: no configurations [ 202.407999][ T4810] usb 3-1: can't read configurations, error -22 [ 202.414804][ T4810] usb usb3-port1: unable to enumerate USB device 05:25:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a0008000109021200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:04 executing program 4: pselect6(0x40, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={0x40}, &(0x7f0000000780), &(0x7f0000000800)={&(0x7f00000007c0)={[0x6]}, 0x8}) 05:25:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000005640)={0x2, &(0x7f0000005600)=[{}, {0x100}]}) 05:25:04 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, 0x0, 0x0) 05:25:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80d00002d0001002bbd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="f2ff03000d000100f2ff010008000b0000040000060005"], 0xdd8}}, 0x0) 05:25:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 203.044047][T15170] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:04 executing program 1: r0 = socket(0xa, 0x3, 0x3f) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={0x0}}, 0x0) 05:25:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_emit_ethernet(0xbe, &(0x7f0000000340)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d1920a7471cdac7e0e5d117c1d9df8d7cc6c8eb749ed271b65afb5388f9b0e3e", "602d20180c55cc4fbf73d80c689976e9b99376e2e7c60938e13e94388b68e4f45d3dcef40317b2842f90e669c9e806c0", "50015e603cf14faff1c205fc00cc159ae15396d33695aedc8bb25253", {"0e29877e95752ce86f7f394018b485fd", "a029574b7f32dae54c7581ebf1501d20"}}}}}}}, 0x0) [ 203.095287][T15178] netlink: 2224 bytes leftover after parsing attributes in process `syz-executor.4'. 05:25:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350", 0xb2}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7", 0x1}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 203.173746][T15190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.452862][ T9115] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 203.692879][ T9115] usb 3-1: Using ep0 maxpacket: 8 [ 203.813096][ T9115] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.823263][ T9115] usb 3-1: config 0 has no interfaces? [ 203.903074][ T9115] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 203.912183][ T9115] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 203.920344][ T9115] usb 3-1: Product: syz [ 203.925419][ T9115] usb 3-1: config 0 descriptor?? 05:25:07 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a0008000109021200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:07 executing program 4: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000003540)='/dev/btrfs-control\x00', 0x2c0, 0x0) 05:25:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:07 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, 0x0, 0x0) 05:25:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:07 executing program 1: socket(0x28, 0x0, 0x6f9) [ 206.051956][ T4810] usb 3-1: USB disconnect, device number 51 05:25:07 executing program 4: getresgid(&(0x7f00000036c0), 0x0, &(0x7f0000003740)) 05:25:07 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x400000) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x3, 0x40) syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000240)={0x1, 0x70, 0x2, 0x0, 0x9, 0x35, 0x0, 0x5, 0x49042, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x1f, 0x0, 0x5, 0x1, 0x7}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0)='gtp\x00', r1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000006fdc5eb8c97af57d4003a614278696a7cb349ece15ca04363289f5469f447edab1bf25ef9727bfc6b5a952a5af252f1c4759d5f2a13317b79543f002bf5b5c18197b01f4ab3fb59e3b9e9e44", @ANYRES16, @ANYBLOB="00012cbd7000ffdbdf25020000000800090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000064) 05:25:07 executing program 1: socket$isdn(0x2c, 0x3, 0x0) [ 206.121241][T15234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:07 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x22, 0x0, 0x0) [ 206.170537][T15234] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:07 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x5421, &(0x7f0000000040)) [ 206.254708][T15254] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.270770][T15254] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.522827][ T4810] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 206.782837][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 206.913282][ T4810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.923372][ T4810] usb 3-1: config 0 has no interfaces? [ 207.012933][ T4810] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 207.021996][ T4810] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 207.030630][ T4810] usb 3-1: Product: syz [ 207.036879][ T4810] usb 3-1: config 0 descriptor?? 05:25:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a0008000109021200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="a1", 0x1}, {0x0}, {&(0x7f00000002c0)='`', 0x1}], 0x3}}], 0x1, 0x0) 05:25:10 executing program 4: syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x80200) 05:25:10 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, 0x0, 0x0) 05:25:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 209.113651][ T8843] usb 3-1: USB disconnect, device number 52 05:25:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x604, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x40) [ 209.162833][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:10 executing program 4: socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000005640)={0x1, &(0x7f0000005600)=[{0x3}]}) 05:25:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100076d"], 0xbe) 05:25:10 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) [ 209.204491][T15286] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100076d"], 0xbe) [ 209.318892][T15308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.365642][T15308] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.572878][ T8843] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 209.812884][ T8843] usb 3-1: Using ep0 maxpacket: 8 [ 209.932955][ T8843] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.943195][ T8843] usb 3-1: config 0 has no interfaces? [ 210.022841][ T8843] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 210.031897][ T8843] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 210.040478][ T8843] usb 3-1: Product: syz [ 210.053323][ T8843] usb 3-1: config 0 descriptor?? 05:25:13 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffff00000167, 0x0, 0x0) 05:25:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100076d"], 0xbe) 05:25:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:13 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[], 0x0) 05:25:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100076d"], 0xbe) [ 212.181885][ T9673] usb 3-1: USB disconnect, device number 53 05:25:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:14 executing program 1: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100076d"], 0xbe) 05:25:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 212.260720][T15340] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.296174][T15340] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:14 executing program 4: clone3(&(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 212.395307][T15367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.425316][T15367] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.543137][ T4846] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 212.652879][ T9673] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 212.742900][ T4846] usb 6-1: device descriptor read/64, error 18 [ 212.902868][ T9673] usb 3-1: Using ep0 maxpacket: 8 [ 213.012860][ T4846] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 213.042924][ T9673] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.053034][ T9673] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.142999][ T9673] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 213.152167][ T9673] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 213.160419][ T9673] usb 3-1: Product: syz [ 213.165532][ T9673] usb 3-1: config 0 descriptor?? [ 213.202949][ T4846] usb 6-1: device descriptor read/64, error 18 [ 213.323174][ T4846] usb usb6-port1: attempt power cycle [ 214.032918][ T4846] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 214.122880][ T4846] usb 6-1: Invalid ep0 maxpacket: 0 [ 214.272854][ T4846] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 214.363271][ T4846] usb 6-1: Invalid ep0 maxpacket: 0 [ 214.368546][ T4846] usb usb6-port1: unable to enumerate USB device [ 215.262931][ T4846] usb 3-1: USB disconnect, device number 54 05:25:17 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:17 executing program 1: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100076d"], 0xbe) 05:25:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:17 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1020, 0x0, 0x0, 0x0, 0x2, 0x4}, 0xffffffffffffffff, 0x7, r0, 0xa) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup2(r2, r1) 05:25:17 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[], 0x0) 05:25:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 215.419531][T15410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:17 executing program 1: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100076d"], 0xbe) 05:25:17 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000140)="0f8c0c0000000f20d835200000000f22d8260f01c42636660f388077210f01c46467430f01fc460f00d73e66460f38818e0d000000b9800000c0690fc8d9c8d98000000f3048b80c000000000000000f23d80f21f835c00000900f23f8", 0x5d}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x80, 0x0, 0x8, 0x0, 0x4, 0xc00, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x100000001, 0x5}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0xff81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000780)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:25:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 215.510738][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.527820][T15410] syz-executor.3 (15410) used greatest stack depth: 9888 bytes left 05:25:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100076d"], 0xbe) 05:25:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 215.617895][T15434] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.677649][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.702843][ T8843] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 215.822846][ T4846] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 215.904254][ T8843] usb 6-1: device descriptor read/64, error 18 [ 216.082858][ T4846] usb 3-1: Using ep0 maxpacket: 8 [ 216.172844][ T8843] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 216.222908][ T4846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.233055][ T4846] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 216.323233][ T4846] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 216.332362][ T4846] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 216.340925][ T4846] usb 3-1: Product: syz [ 216.346018][ T4846] usb 3-1: config 0 descriptor?? [ 216.363451][ T8843] usb 6-1: device descriptor read/64, error 18 [ 216.483082][ T8843] usb usb6-port1: attempt power cycle [ 217.202899][ T8843] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 217.293244][ T8843] usb 6-1: Invalid ep0 maxpacket: 0 [ 217.452981][ T8843] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 217.563410][ T8843] usb 6-1: Invalid ep0 maxpacket: 0 [ 217.568706][ T8843] usb usb6-port1: unable to enumerate USB device 05:25:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:20 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100076d"], 0xbe) 05:25:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:20 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[], 0x0) 05:25:20 executing program 4: pselect6(0x40, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)={0x40}, &(0x7f0000000780), &(0x7f0000000800)={&(0x7f00000007c0)={[0x6]}, 0x8}) [ 218.396483][ T19] usb 3-1: USB disconnect, device number 55 05:25:20 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100076d"], 0xbe) 05:25:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) [ 218.459501][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.487340][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 218.542161][T15490] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.571378][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 218.664975][T15514] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.679583][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.852854][ T19] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 218.929225][ T9673] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 219.092874][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 219.133793][ T9673] usb 6-1: device descriptor read/64, error 18 [ 219.212963][ T19] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.223114][ T19] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.303065][ T19] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 219.312128][ T19] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 219.321413][ T19] usb 3-1: Product: syz [ 219.327482][ T19] usb 3-1: config 0 descriptor?? [ 219.412868][ T9673] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 219.603434][ T9673] usb 6-1: device descriptor read/64, error 18 [ 219.732913][ T9673] usb usb6-port1: attempt power cycle [ 220.442874][ T9673] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 220.482905][ T9115] Bluetooth: hci2: command 0x0406 tx timeout [ 220.482927][ T9115] Bluetooth: hci3: command 0x0406 tx timeout [ 220.482937][ T9115] Bluetooth: hci0: command 0x0406 tx timeout [ 220.482947][ T9115] Bluetooth: hci1: command 0x0406 tx timeout [ 220.543341][ T9673] usb 6-1: Invalid ep0 maxpacket: 0 [ 220.704371][ T9673] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 220.803059][ T9673] usb 6-1: Invalid ep0 maxpacket: 0 [ 220.808380][ T9673] usb usb6-port1: unable to enumerate USB device 05:25:23 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:23 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100076d"], 0xbe) 05:25:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:23 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a0008000109021200010000000009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:23 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 05:25:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000002c0)='`', 0x1}], 0x2}}], 0x1, 0x0) [ 221.442627][ T9673] usb 3-1: USB disconnect, device number 56 05:25:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0xbe) 05:25:23 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 221.517734][T15555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.554570][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:23 executing program 4: geteuid() r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1020}, 0xffffffffffffffff, 0x0, r0, 0xa) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) dup2(r2, r1) 05:25:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0xbe) 05:25:23 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 221.612120][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:23 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000780), 0x10) 05:25:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0xbe) [ 221.667013][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.903104][ T9673] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 221.952877][ T9115] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 222.142873][ T9673] usb 3-1: Using ep0 maxpacket: 8 [ 222.153255][ T9115] usb 6-1: device descriptor read/64, error 18 [ 222.263060][ T9673] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.343046][ T9673] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 222.352133][ T9673] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 222.360805][ T9673] usb 3-1: Product: syz [ 222.367035][ T9673] usb 3-1: config 0 descriptor?? [ 222.422886][ T9115] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 222.612871][ T9115] usb 6-1: device descriptor read/64, error 18 [ 222.732926][ T9115] usb usb6-port1: attempt power cycle [ 223.442891][ T9115] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 223.532909][ T9115] usb 6-1: Invalid ep0 maxpacket: 0 [ 223.684309][ T9115] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 223.773262][ T9115] usb 6-1: Invalid ep0 maxpacket: 0 [ 223.778667][ T9115] usb usb6-port1: unable to enumerate USB device 05:25:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a0008000109021200010000000009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:26 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 05:25:26 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0xd, 0x0, 0x0) 05:25:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0xbe) [ 224.490285][ T19] usb 3-1: USB disconnect, device number 57 05:25:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 224.546010][T15621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.576425][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0xbe) 05:25:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 224.661062][T15640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.696063][T15639] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 05:25:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0xbe) [ 224.716960][T15639] device gretap0 entered promiscuous mode [ 224.735750][T15639] device macvlan2 entered promiscuous mode [ 224.745483][T15639] device gretap0 left promiscuous mode [ 224.809349][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.847127][T15659] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 224.858712][T15659] device gretap0 entered promiscuous mode [ 224.866671][T15659] device macvlan2 entered promiscuous mode [ 224.882721][T15659] device gretap0 left promiscuous mode [ 224.904229][ T19] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 225.012862][ T4810] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 225.152887][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 225.232865][ T4810] usb 6-1: device descriptor read/64, error 18 [ 225.283269][ T19] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.373059][ T19] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 225.382162][ T19] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 225.390522][ T19] usb 3-1: Product: syz [ 225.396737][ T19] usb 3-1: config 0 descriptor?? [ 225.502892][ T4810] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 225.602885][ T9115] Bluetooth: hci4: command 0x0406 tx timeout [ 225.608923][ T9115] Bluetooth: hci5: command 0x0406 tx timeout [ 225.693446][ T4810] usb 6-1: device descriptor read/64, error 18 [ 225.822920][ T4810] usb usb6-port1: attempt power cycle [ 226.532890][ T4810] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 226.632912][ T4810] usb 6-1: Invalid ep0 maxpacket: 0 [ 226.803167][ T4810] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 226.893213][ T4810] usb 6-1: Invalid ep0 maxpacket: 0 [ 226.898482][ T4810] usb usb6-port1: unable to enumerate USB device 05:25:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xbe) 05:25:29 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 05:25:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:29 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a0008000109021200010000000009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 227.523957][ T36] usb 3-1: USB disconnect, device number 58 05:25:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xbe) [ 227.591989][T15689] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.616974][T15694] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 227.628380][T15694] device gretap0 entered promiscuous mode 05:25:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xbe) [ 227.636942][T15694] device macvlan2 entered promiscuous mode [ 227.644795][T15694] device gretap0 left promiscuous mode 05:25:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b0707"], 0xbe) 05:25:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 227.769021][T15717] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.827037][T15726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.013040][ T36] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 228.042876][ T4810] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 228.243006][ T4810] usb 6-1: device descriptor read/64, error 18 [ 228.282888][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 228.413040][ T36] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 228.513056][ T4810] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 228.521050][ T36] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 228.530468][ T36] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 228.538681][ T36] usb 3-1: Product: syz [ 228.543859][ T36] usb 3-1: config 0 descriptor?? [ 228.702897][ T4810] usb 6-1: device descriptor read/64, error 18 [ 228.822914][ T4810] usb usb6-port1: attempt power cycle [ 229.532900][ T4810] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 229.622934][ T4810] usb 6-1: Invalid ep0 maxpacket: 0 [ 229.782924][ T4810] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 229.893184][ T4810] usb 6-1: Invalid ep0 maxpacket: 0 [ 229.898545][ T4810] usb usb6-port1: unable to enumerate USB device 05:25:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:32 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a69400000010902460001"], 0x0) 05:25:32 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b0707"], 0xbe) [ 230.581669][ T8843] usb 3-1: USB disconnect, device number 59 [ 230.638426][T15759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b0707"], 0xbe) 05:25:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 230.686491][T15761] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 230.708265][T15761] device gretap0 entered promiscuous mode [ 230.720210][T15761] device macvlan2 entered promiscuous mode 05:25:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100"], 0xbe) 05:25:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 230.734466][T15761] device gretap0 left promiscuous mode 05:25:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 230.799542][T15759] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100"], 0xbe) [ 230.897640][T15789] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.925590][T15789] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.072892][ T9673] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 231.080532][ T8843] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 231.322946][ T9673] usb 6-1: Using ep0 maxpacket: 8 [ 231.333180][ T8843] usb 3-1: Using ep0 maxpacket: 8 [ 231.453296][ T9673] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.463491][ T9673] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 231.552985][ T8843] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 231.562055][ T8843] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 231.570651][ T9673] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 231.580100][ T9673] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 231.588969][ T8843] usb 3-1: Product: syz [ 231.593661][ T9673] usb 6-1: Manufacturer: syz [ 231.598674][ T8843] usb 3-1: config 0 descriptor?? [ 231.608326][ T9673] usb 6-1: config 0 descriptor?? [ 231.655265][ T9673] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 231.855246][ T9115] usb 6-1: USB disconnect, device number 56 [ 231.866758][ T8843] usb 3-1: ignoring: probably an ADSL modem [ 232.153010][ T8843] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 232.161537][ T8843] usb 3-1: USB disconnect, device number 60 05:25:34 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a69400000010902460001"], 0x0) 05:25:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:34 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b07073100"], 0xbe) 05:25:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b0707310007"], 0xbe) [ 232.618174][T15847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.646630][T15849] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 232.657413][T15849] device gretap0 entered promiscuous mode 05:25:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b0707310007"], 0xbe) [ 232.665234][T15849] device macvlan2 entered promiscuous mode [ 232.675029][T15849] device gretap0 left promiscuous mode [ 232.684542][ T9673] usb 6-1: new high-speed USB device number 57 using dummy_hcd 05:25:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b5b0707310007"], 0xbe) 05:25:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 232.746258][T15847] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:34 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8914, &(0x7f0000000040)={'batadv_slave_1\x00'}) [ 232.851487][T15874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.873134][T15876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.895303][ T4810] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 232.942904][ T9673] usb 6-1: Using ep0 maxpacket: 8 [ 233.072951][ T9673] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.083285][ T9673] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 233.142910][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 233.183304][ T9673] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 233.192423][ T9673] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 233.201298][ T9673] usb 6-1: Manufacturer: syz [ 233.207103][ T9673] usb 6-1: config 0 descriptor?? [ 233.245262][ T9673] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 233.342943][ T4810] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 233.352688][ T4810] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 233.361149][ T4810] usb 3-1: Product: syz [ 233.366167][ T4810] usb 3-1: config 0 descriptor?? [ 233.459950][ T9673] usb 6-1: USB disconnect, device number 57 [ 233.622961][ T4810] usb 3-1: ignoring: probably an ADSL modem [ 233.902949][ T4810] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 233.911898][ T4810] usb 3-1: USB disconnect, device number 61 05:25:35 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a69400000010902460001"], 0x0) 05:25:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 233.981896][T15911] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 233.992158][T15911] device gretap0 entered promiscuous mode [ 233.998474][T15911] device macvlan2 entered promiscuous mode 05:25:36 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:36 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x44020100, 0x0, 0x0, 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 05:25:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 234.282929][ T9673] usb 6-1: new high-speed USB device number 58 using dummy_hcd 05:25:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 234.377782][T15929] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 234.391453][T15929] device macvlan3 entered promiscuous mode [ 234.396563][T15930] IPVS: ftp: loaded support on port[0] = 21 [ 234.403716][T15927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:36 executing program 1: io_setup(0x100, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, 0x0) 05:25:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 234.489812][T15959] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 234.506636][T15959] device macvlan4 entered promiscuous mode [ 234.524721][ T9673] usb 6-1: Using ep0 maxpacket: 8 [ 234.530234][T15969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 234.606696][T15981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 234.623653][T15980] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 234.640743][T15980] device macvlan5 entered promiscuous mode [ 234.643590][ T9673] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.664536][ T8843] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 234.684327][ T9673] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 234.773405][ T9673] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 234.782497][ T9673] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 234.791009][ T9673] usb 6-1: Manufacturer: syz [ 234.797267][ T9673] usb 6-1: config 0 descriptor?? [ 234.835111][ T9673] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 234.902912][ T8843] usb 3-1: Using ep0 maxpacket: 8 [ 235.035900][ T4810] usb 6-1: USB disconnect, device number 58 [ 235.102911][ T8843] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 235.111987][ T8843] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 235.120799][ T8843] usb 3-1: Product: syz [ 235.134860][ T8843] usb 3-1: config 0 descriptor?? [ 235.392961][ T8843] usb 3-1: ignoring: probably an ADSL modem 05:25:37 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e0100"], 0x0) 05:25:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 235.672963][ T8843] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 235.681358][ T8843] usb 3-1: USB disconnect, device number 62 [ 235.842956][ T9115] usb 6-1: new high-speed USB device number 59 using dummy_hcd 05:25:37 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:37 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000080)='1\x00', 0xfffffffffffffe83) 05:25:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 236.082964][ T9115] usb 6-1: Using ep0 maxpacket: 8 05:25:37 executing program 1: getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b40)) [ 236.159792][T16040] __nla_validate_parse: 1 callbacks suppressed [ 236.159809][T16040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 236.198671][T16041] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 05:25:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x15, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:25:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 236.209125][ T9115] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.237779][T16041] device macvlan6 entered promiscuous mode 05:25:38 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000280)='mand\x00', 0x0, 0x0) 05:25:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 236.248532][ T9115] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 236.310539][T16060] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 236.331037][T16062] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 236.370738][T16062] device macvlan7 entered promiscuous mode [ 236.373384][ T9115] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 236.396830][ T9115] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 236.413513][ T9115] usb 6-1: Manufacturer: syz [ 236.428387][ T9115] usb 6-1: config 0 descriptor?? [ 236.473068][ T4810] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 236.475207][ T9115] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 236.493072][ T9115] usb 6-1: No valid video chain found. [ 236.675730][ T8843] usb 6-1: USB disconnect, device number 59 [ 236.722936][ T4810] usb 3-1: Using ep0 maxpacket: 8 [ 236.953250][ T4810] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 236.962531][ T4810] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 236.971254][ T4810] usb 3-1: Product: syz [ 236.976810][ T4810] usb 3-1: config 0 descriptor?? 05:25:38 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e0100"], 0x0) 05:25:38 executing program 1: syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', 0x0, 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000240)='/', 0x1}, {&(0x7f00000002c0)="03", 0x1, 0x100000001}, {&(0x7f00000003c0)='X', 0x1, 0xffffffffffffff7f}], 0x0, 0x0) [ 237.203221][T16092] loop1: detected capacity change from 0 to 264192 [ 237.292958][ T4810] usb 3-1: ignoring: probably an ADSL modem [ 237.300125][T16092] loop1: detected capacity change from 0 to 264192 [ 237.482955][ T9673] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 237.582977][ T4810] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 237.591394][ T4810] usb 3-1: USB disconnect, device number 63 [ 237.722893][ T9673] usb 6-1: Using ep0 maxpacket: 8 [ 237.844258][ T9673] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.854404][ T9673] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 05:25:39 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 05:25:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:39 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) [ 237.943332][ T9673] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 237.952558][ T9673] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 237.962274][ T9673] usb 6-1: Manufacturer: syz [ 237.969512][ T9673] usb 6-1: config 0 descriptor?? [ 238.016397][ T9673] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 238.029942][T16119] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.047308][ T9673] usb 6-1: No valid video chain found. 05:25:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:39 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) [ 238.066031][T16126] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 238.088654][T16126] device macvlan8 entered promiscuous mode 05:25:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 05:25:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 238.135524][T16139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:39 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000002540)='/dev/rtc0\x00', 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000002580)='/dev/rtc#\x00', 0x0, 0x20000) [ 238.185697][T16147] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 238.199850][T16147] device macvlan9 entered promiscuous mode [ 238.211344][T16149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.235126][ T9673] usb 6-1: USB disconnect, device number 60 [ 238.264287][T16149] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.322936][ T9712] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 238.572931][ T9712] usb 3-1: Using ep0 maxpacket: 8 05:25:40 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e0100"], 0x0) 05:25:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) [ 238.763963][T16175] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 238.774884][T16175] device macvlan10 entered promiscuous mode [ 238.804165][ T9712] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 238.818478][ T9712] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 238.827461][ T9712] usb 3-1: Product: syz [ 238.832523][ T9712] usb 3-1: config 0 descriptor?? [ 239.022920][ T9673] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 239.152943][ T9712] usb 3-1: ignoring: probably an ADSL modem [ 239.262949][ T9673] usb 6-1: Using ep0 maxpacket: 8 [ 239.382958][ T9673] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.393171][ T9673] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 239.462930][ T9712] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 239.470837][ T9712] usb 3-1: USB disconnect, device number 64 [ 239.483307][ T9673] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 239.492591][ T9673] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 239.501228][ T9673] usb 6-1: Manufacturer: syz [ 239.506925][ T9673] usb 6-1: config 0 descriptor?? [ 239.545233][ T9673] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 239.552144][ T9673] usb 6-1: No valid video chain found. [ 239.758476][ T9673] usb 6-1: USB disconnect, device number 61 05:25:41 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:41 executing program 1: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@acl='acl'}, {@spectator='spectator'}]}) 05:25:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:41 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 05:25:41 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:41 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 05:25:41 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 05:25:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 239.927207][T16213] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.932649][T16215] gfs2: not a GFS2 filesystem [ 239.950486][T16213] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.972089][T16215] gfs2: not a GFS2 filesystem 05:25:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:41 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 240.048934][T16238] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.067824][T16236] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 240.084527][T16236] device macvlan11 entered promiscuous mode [ 240.100115][T16238] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.222906][ T8843] usb 3-1: new high-speed USB device number 65 using dummy_hcd 05:25:42 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff01"], 0x0) 05:25:42 executing program 1: syz_mount_image$cramfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[]) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 240.482892][ T8843] usb 3-1: Using ep0 maxpacket: 8 [ 240.572933][ T9712] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 240.693152][ T8843] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 240.702452][ T8843] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 240.710868][ T8843] usb 3-1: Product: syz [ 240.716085][ T8843] usb 3-1: config 0 descriptor?? [ 240.812974][ T9712] usb 6-1: Using ep0 maxpacket: 8 [ 240.933330][ T9712] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.022955][ T8843] usb 3-1: ignoring: probably an ADSL modem [ 241.023425][ T9712] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 241.038057][ T9712] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 241.046199][ T9712] usb 6-1: Manufacturer: syz [ 241.052577][ T9712] usb 6-1: config 0 descriptor?? [ 241.294964][ T9712] usb 6-1: USB disconnect, device number 62 [ 241.332943][ T8843] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 241.341202][ T8843] usb 3-1: USB disconnect, device number 65 05:25:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:43 executing program 1: getcwd(&(0x7f0000000200)=""/231, 0xe7) 05:25:43 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:43 executing program 1: openat$rtc(0xffffffffffffff9c, 0x0, 0x8100, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x20000) openat$rtc(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/rtc0\x00', 0x0, 0x0) 05:25:43 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff01"], 0x0) [ 241.781208][T16289] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 241.798811][T16289] device macvlan12 entered promiscuous mode [ 241.816090][T16295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:43 executing program 1: syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[{&(0x7f0000000280)="0e", 0x1, 0x79af}], 0x0, 0x0) [ 241.843383][T16301] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 241.920662][T16313] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 241.940942][T16313] device macvlan13 entered promiscuous mode [ 241.952157][T16320] loop1: detected capacity change from 0 to 121 [ 241.983765][T16325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.001762][T16326] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 242.019208][T16326] device macvlan14 entered promiscuous mode 05:25:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 242.028239][T16325] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.042891][ T9673] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 242.059505][T16320] loop1: detected capacity change from 0 to 121 05:25:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:43 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x4400, 0x0) [ 242.144058][T16342] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.155040][ T36] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 242.171081][T16343] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 242.185908][T16343] device macvlan15 entered promiscuous mode [ 242.197238][T16342] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 242.282884][ T9673] usb 3-1: Using ep0 maxpacket: 8 [ 242.301913][T16357] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 242.315557][T16357] device macvlan16 entered promiscuous mode [ 242.392918][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 242.512968][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.522948][ T9673] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 242.532706][ T9673] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 242.540787][ T9673] usb 3-1: Product: syz [ 242.548243][ T9673] usb 3-1: config 0 descriptor?? 05:25:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580), 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 242.603398][ T36] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 242.612475][ T36] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 242.625873][ T36] usb 6-1: Manufacturer: syz [ 242.631235][ T36] usb 6-1: config 0 descriptor?? [ 242.862983][ T9673] usb 3-1: ignoring: probably an ADSL modem [ 242.886147][ T8843] usb 6-1: USB disconnect, device number 63 [ 243.143001][ T9673] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 243.151642][ T9673] usb 3-1: USB disconnect, device number 66 05:25:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:45 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x80700, 0x0) 05:25:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:45 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff01"], 0x0) 05:25:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580), 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 243.586188][T16395] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 05:25:45 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000001c0)={0x0, 0x0, 0x0, {}, {}, @cond}) 05:25:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 243.627818][T16395] device macvlan17 entered promiscuous mode [ 243.648289][T16405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 243.682693][T16414] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:45 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x5450, 0x0) [ 243.733106][T16420] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 243.752388][T16420] device macvlan18 entered promiscuous mode 05:25:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 243.778632][T16426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:45 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) [ 243.821108][T16426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.836329][T16434] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 243.847992][T16434] device macvlan19 entered promiscuous mode [ 243.902911][ T9115] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 243.910564][ T9673] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 244.162960][ T9115] usb 3-1: Using ep0 maxpacket: 8 [ 244.168034][ T9673] usb 6-1: Using ep0 maxpacket: 8 [ 244.293199][ T9673] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.373006][ T9115] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 244.382415][ T9115] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 244.390671][ T9673] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 244.399807][ T9115] usb 3-1: Product: syz [ 244.404297][ T9673] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 244.412373][ T9673] usb 6-1: Manufacturer: syz [ 244.418023][ T9115] usb 3-1: config 0 descriptor?? [ 244.427308][ T9673] usb 6-1: config 0 descriptor?? [ 244.665556][ T5] usb 6-1: USB disconnect, device number 64 [ 244.722995][ T9115] usb 3-1: ignoring: probably an ADSL modem [ 245.014389][ T9115] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 245.022831][ T9115] usb 3-1: USB disconnect, device number 67 05:25:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:47 executing program 1: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)={[{@lockproto_nolock='lockproto=lock_nolock'}]}) 05:25:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580), 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:47 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff01030000"], 0x0) 05:25:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 245.456107][T16475] gfs2: not a GFS2 filesystem [ 245.502580][T16475] gfs2: not a GFS2 filesystem 05:25:47 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) 05:25:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 245.529050][T16492] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 245.563457][T16492] device macvlan20 entered promiscuous mode 05:25:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:47 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000004e40)='/dev/rtc0\x00', 0x0, 0x0) fork() eventfd2(0x0, 0x0) 05:25:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a300050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 245.663487][T16515] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 245.702665][T16515] device macvlan21 entered promiscuous mode [ 245.782931][ T5] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 245.812963][ T9712] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 246.042936][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 246.053018][ T9712] usb 6-1: Using ep0 maxpacket: 8 [ 246.173226][ T9712] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.263280][ T9712] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 246.264831][ T5] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 246.272487][ T9712] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 246.284021][ T5] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 246.290421][ T9712] usb 6-1: Manufacturer: syz [ 246.303380][ T9712] usb 6-1: config 0 descriptor?? [ 246.316723][ T5] usb 3-1: Product: syz [ 246.333767][ T5] usb 3-1: config 0 descriptor?? [ 246.546547][ T9673] usb 6-1: USB disconnect, device number 65 [ 246.652976][ T5] usb 3-1: ignoring: probably an ADSL modem [ 246.932936][ T5] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 246.941559][ T5] usb 3-1: USB disconnect, device number 68 05:25:49 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:49 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/kvm\x00', 0x28080, 0x0) 05:25:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:49 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:49 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff01030000"], 0x0) 05:25:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES32], 0x34}}, 0x0) 05:25:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 247.392140][T16567] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 247.426477][T16567] device macvlan22 entered promiscuous mode 05:25:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 247.450068][T16573] __nla_validate_parse: 8 callbacks suppressed [ 247.450083][T16573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:49 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:49 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400c4}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00'}) r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x42000108}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4019) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 247.526462][T16588] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 247.557516][T16588] device macvlan23 entered promiscuous mode [ 247.567627][T16592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.692956][ T4810] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 247.752903][ T36] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 247.932947][ T4810] usb 6-1: Using ep0 maxpacket: 8 [ 247.992973][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 248.052974][ T4810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.142990][ T4810] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 248.152348][ T4810] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 248.161613][ T4810] usb 6-1: Manufacturer: syz [ 248.167377][ T4810] usb 6-1: config 0 descriptor?? [ 248.193140][ T36] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 248.202222][ T36] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 248.213212][ T36] usb 3-1: Product: syz [ 248.218108][ T36] usb 3-1: config 0 descriptor?? [ 248.412290][ T4810] usb 6-1: USB disconnect, device number 66 [ 248.522952][ T36] usb 3-1: ignoring: probably an ADSL modem [ 248.802994][ T36] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 248.810898][ T36] usb 3-1: USB disconnect, device number 69 [ 249.123748][ T3236] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.130500][ T3236] ieee802154 phy1 wpan1: encryption failed: -22 05:25:50 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}], 0x3}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:50 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000004100)='/dev/net/tun\x00', 0x40000, 0x0) 05:25:50 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:50 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff01030000"], 0x0) 05:25:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}], 0x3}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:51 executing program 1: r0 = syz_mount_image$romfs(&(0x7f0000000040)='romfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x4, &(0x7f0000000380)=[{&(0x7f00000000c0)="e16fcee59d25901e4ce21f73bc5c560678ec3f8e88f6b4bbb194db9d7d0a121dc19faeec4d2ab633f56a28ded4f8ecc61da6e860f878280da6c63f2bc170ac1b2d1a808d91", 0x45, 0x8}, {&(0x7f0000000140)="2d28d11324945a594b72a59b7aa9c3f78712a3403e989b7d9344cdc4be52493269bb62ef807fc8d0925a418bfc", 0x2d, 0x7}, {&(0x7f0000000180)="718ebae58bfe8db6c8f0c3ba2b8b193105bd5b6c8593bcde9dacc5d303ae9e873718f27502e291f83db666ef2badb81be492f24d53caeb4af80912dd3e4a433c86477233e01d85b0374cbacf9ec0fd27ad63245b2809b8d8afbec535fc46778af44a04ca7dd20b0055c9b69f588917a7d6afa9df3133beb79a7c83208a1ca2fb310bc2fe4abec917296f2ddee24466ee87d570ef42e1686fef7a202f66c975b33fc4d335168417d4461f15df25be92d6c65d13c9dd434498b74d726b138231921c66acb9ec3a4ad628466c995f3e7dfd6e4b179944bd3ace806bc20c183389629b1d06b481df24191a4d14f2c31aab51932d3d32", 0xf4, 0x4}, {&(0x7f0000000280)="c6841530eb0d4f39a6c77573db0cebe20b22e1d2b4a6294c84fe4a4c8aa62008a78464065a11b3c23ce98be6e3fd3fe2984b1bc38c92d55cd3165433bd9573103ea314b572d339c53a4423824bbb07b37054b82b72cda602235f13cd63647232b4aec4a695edf888f64c2b65facbb4b0253633e1e22596411378d5277e80a6c465ce1f2d3751c68af394fce9b632474e5e8b092944311ac591bcda97365a6dbb8056b90aff5c33c3f44c1fd2abcbe4bb72c82f1d59ef8fdc3c5a4566a1520b5746cc8c20f8e7472dff956e76188131213914e14989c8b41539ff377c323195b630ad81845e6c3c30b5bed4", 0xeb, 0x40}], 0x4, &(0x7f0000000400)={[{}, {'{]\'.\\,^q,[{]'}], [{@smackfshat={'smackfshat'}}, {@subj_type={'subj_type', 0x3d, '@#'}}]}) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000440)='./file0\x00') mkdirat(r0, &(0x7f00000004c0)='./file0\x00', 0x38) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) [ 249.279164][T16644] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 249.299752][T16644] device macvlan24 entered promiscuous mode [ 249.311587][T16647] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 249.388061][T16665] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 249.418980][T16665] device macvlan25 entered promiscuous mode 05:25:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}], 0x3}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 249.434798][T16671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 249.450849][T16670] romfs: Unknown parameter '{]'.\' [ 249.508266][T16670] romfs: Unknown parameter '{]'.\' [ 249.515995][T16682] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 249.539981][T16682] device macvlan26 entered promiscuous mode [ 249.562961][ T4846] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 249.582955][ T9673] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 249.806256][ T4846] usb 6-1: Using ep0 maxpacket: 8 [ 249.832913][ T9673] usb 3-1: Using ep0 maxpacket: 8 [ 249.923104][ T4846] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.013324][ T4846] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 250.022414][ T4846] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 250.031193][ T4846] usb 6-1: Manufacturer: syz [ 250.037750][ T4846] usb 6-1: config 0 descriptor?? [ 250.063879][ T9673] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 250.073066][ T9673] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 250.081267][ T9673] usb 3-1: Product: syz [ 250.089995][ T9673] usb 3-1: config 0 descriptor?? [ 250.274826][ T4846] usb 6-1: USB disconnect, device number 67 [ 250.392948][ T9673] usb 3-1: ignoring: probably an ADSL modem [ 250.672973][ T9673] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 250.680935][ T9673] usb 3-1: USB disconnect, device number 70 05:25:52 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 05:25:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {0x0}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac00000000020102000000000000000003000008440002800c00028005000100880000000c000280052001003a00000006001c299abbbe7d121a028005000100290000000c00028005000100840000000600034000000000080005400000001008000940000000090e0006007369702d323030303000000020"], 0xac}}, 0x0) 05:25:52 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff0103000009"], 0x0) 05:25:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {0x0}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 251.141539][T16734] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 251.156903][T16734] device macvlan27 entered promiscuous mode [ 251.162446][T16739] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.179455][T16740] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:25:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}, 0x4044010) 05:25:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 05:25:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {0x0}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 251.256992][T16754] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 251.270175][T16754] device macvlan28 entered promiscuous mode 05:25:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 251.347154][T16763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.377112][T16764] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 251.394362][T16764] device macvlan29 entered promiscuous mode [ 251.452903][ T36] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 251.472913][ T9115] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 251.692926][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 251.722954][ T9115] usb 3-1: Using ep0 maxpacket: 8 [ 251.813426][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.903213][ T36] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 251.912336][ T36] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 251.922095][ T36] usb 6-1: Manufacturer: syz [ 251.927749][ T36] usb 6-1: config 0 descriptor?? [ 251.953352][ T9115] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 251.962549][ T9115] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 251.971371][ T9115] usb 3-1: Product: syz [ 251.978092][ T9115] usb 3-1: config 0 descriptor?? [ 252.202964][ T36] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 252.209895][ T36] usb 6-1: Failed to initialize entity for entity 255 [ 252.216867][ T36] usb 6-1: Failed to register entities (-22). [ 252.224007][ T36] usb 6-1: USB disconnect, device number 68 [ 252.282967][ T9115] usb 3-1: ignoring: probably an ADSL modem [ 252.564130][ T9115] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 252.572676][ T9115] usb 3-1: USB disconnect, device number 71 05:25:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) 05:25:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:25:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 05:25:54 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:54 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff0103000009"], 0x0) 05:25:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000000c0)="93daeba0acd03473fd0c27c0a8e70df994a2fbfb9c91c8c282c0d6f2ae9532f1fdf343577345c1f14371f2a99e3af8c67ac3b221fbc177d33701dbf1b4b62652292b623c675a5a7c7830a1", 0x4b}, {&(0x7f0000000140)="ef59ce6578fac72156cbdf50c2cf48998f7b83af8d70555b2e47b62fecb4e3766253a1dc70d498c9bb5a171a285ba1a3ea38bf48ec0b668f58a24f44575f5381c351cc1819a3bc18ca7d7ac9719816d0e54d9e43daca11992512cc727913c87a2c718c5464f7743a43384145591789fc91ecd2d71389", 0x76}, {&(0x7f00000001c0)="185ce7c9f4c3c64a925bd5edc96ff25fe52ea3425e673a4c8f41604740f2a32cd1f241007778e056e3e2fe0d8cde30f883413c7c5639919abab3e8d20f66ffcd8a762eb0b761c270ee72c2ca4eed81e8b0fa2a611ffc9884", 0x58}, {&(0x7f0000000240)="845a8d248c728cbc76b812bb23c86be6c02796815ddfd5485024", 0x1a}, {&(0x7f0000000280)="e383c64a45175571b85130ad184496659bb5e3186af14eea98cca8b8094892a138104b930b9a1c685e671944d1ad4e0ff70e0f2199fc27b7e1fab2cb630b3bc701d74e480faae610f301b964685e95cc8c4b02aabfdc747a7677c9998413403efa69d86753e7a64bee011f370f7b8ad62b6d998bc3d71592129e9e7d6cf51e7d520d967858e9d87ae171e501fa1b2d16c8c2bbcba637236ed2fd6b30264208cb76d1392f930a76c9e74355586db66202ee6c210cb83a23746aa4ef984c38c85d403a6233d484", 0xc6}, {&(0x7f0000000380)="7fbc608f2fbc4faba44dda34fc60d84891dbe6829b6d9541cd98614865ba1abbced742de8cc6775da640d7ec21baba6b46df1f22fa4018e32bba2c230775c19d43ac885450c951d6540a0e0f62f0c9dde940c7f50554e1f975a183c43a25c1e7a4f36860f1558c36da0b462f9c62deeb1f3e0bf367e03f0ceb526794dfbe19fb53ed5b6a9d030241c48a6f44d121ba48f4ddab191e84e7f6b7ad3f111937f0f3a619eabffb02", 0xa6}, {&(0x7f0000000440)="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", 0xc22}], 0x7, &(0x7f0000002480)=[{0x20, 0x0, 0x0, "631445cc6a1a694cb888f371f1cb47fff1"}], 0x20}}, {{0x0, 0x0, &(0x7f0000003980)=[{0x0}, {0x0}, {&(0x7f0000002740)="8a", 0x1}], 0x3, &(0x7f00000039c0)=[{0xc}, {0xc}], 0x18}}], 0x2, 0x0) [ 253.028842][T16815] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.061876][T16819] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 05:25:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:25:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 253.086841][T16819] device macvlan30 entered promiscuous mode 05:25:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 05:25:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) 05:25:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:25:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698", 0x4}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 253.175828][T16840] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.199649][T16842] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 253.214071][T16842] device macvlan31 entered promiscuous mode 05:25:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='sit0\x00', 0x10) 05:25:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 253.312764][T16859] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 253.321062][ T36] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 253.352930][ T9115] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 253.355769][T16859] device macvlan32 entered promiscuous mode [ 253.370574][T16860] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.582970][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 253.632945][ T9115] usb 3-1: Using ep0 maxpacket: 8 [ 253.703274][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.793330][ T36] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 253.802621][ T36] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 253.810969][ T36] usb 6-1: Manufacturer: syz [ 253.816417][ T36] usb 6-1: config 0 descriptor?? [ 253.852959][ T9115] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 253.862019][ T9115] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 253.870493][ T9115] usb 3-1: Product: syz [ 253.875640][ T9115] usb 3-1: config 0 descriptor?? [ 254.092948][ T36] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 254.099879][ T36] usb 6-1: Failed to initialize entity for entity 255 [ 254.107129][ T36] usb 6-1: Failed to register entities (-22). [ 254.115634][ T36] usb 6-1: USB disconnect, device number 69 [ 254.182950][ T9115] usb 3-1: ignoring: probably an ADSL modem [ 254.462935][ T9115] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 254.471360][ T9115] usb 3-1: USB disconnect, device number 72 05:25:56 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'macvlan0\x00', {0x7}}) 05:25:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698", 0x4}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 05:25:56 executing program 5: syz_usb_connect$hid(0x7, 0xfffffc46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6253, 0x100, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0x0, 0x1f}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a694000000109024600010000000009040000000e010000082403ff0103000009"], 0x0) 05:25:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698", 0x4}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 254.934942][T16910] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.958530][T16913] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 254.969623][T16913] device macvlan33 entered promiscuous mode 05:25:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:25:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 05:25:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) 05:25:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482a", 0x6}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 255.058521][T16932] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 255.092481][T16932] device macvlan34 entered promiscuous mode 05:25:56 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) [ 255.102303][T16935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.222923][ T4846] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 255.233474][ T9115] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 255.462926][ T4846] usb 3-1: Using ep0 maxpacket: 8 [ 255.472912][ T9115] usb 6-1: Using ep0 maxpacket: 8 [ 255.592937][ T9115] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.684317][ T9115] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 255.693092][ T4846] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 255.693465][ T9115] usb 6-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 255.702489][ T4846] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 255.712791][ T9115] usb 6-1: Manufacturer: syz [ 255.718893][ T4846] usb 3-1: Product: syz [ 255.726966][ T9115] usb 6-1: config 0 descriptor?? [ 255.736363][ T4846] usb 3-1: config 0 descriptor?? [ 256.004600][ T9115] usb 6-1: Found UVC 0.00 device (0bd3:0555) [ 256.011468][ T9115] usb 6-1: Failed to initialize entity for entity 255 [ 256.025443][ T9115] usb 6-1: Failed to register entities (-22). [ 256.032617][ T9115] usb 6-1: USB disconnect, device number 70 [ 256.042971][ T4846] usb 3-1: ignoring: probably an ADSL modem [ 256.323375][ T4846] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 256.331693][ T4846] usb 3-1: USB disconnect, device number 73 05:25:58 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:25:58 executing program 1: openat$rtc(0xffffff9c, &(0x7f0000007a80)='/dev/rtc0\x00', 0x101, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 05:25:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 05:25:58 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 05:25:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482a", 0x6}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:25:58 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) [ 256.776074][T16991] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.806150][T16996] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) 05:25:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac00000000020102000000000000000003000008440002800c00028005000100880000000c000280052001003a00000006001c299abbbe7d121a028005000100290000000c0002800500010084000000060003400000"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) 05:25:58 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 05:25:58 executing program 5: inotify_add_watch(0xffffffffffffffff, 0x0, 0x8000041) 05:25:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:25:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 05:25:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003bc0)=[{{&(0x7f0000000040)=@nfc_llcp, 0x81, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/220, 0xdc}, {&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f0000000340)=""/13, 0xd}], 0x4, &(0x7f00000003c0)=""/74, 0x4a}}, {{&(0x7f0000000440)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/208, 0xd0}, {&(0x7f00000015c0)=""/245, 0xf5}, {&(0x7f00000016c0)=""/11, 0xb}, {&(0x7f0000001700)=""/170, 0xaa}, {&(0x7f00000017c0)=""/213, 0xd5}], 0x6, &(0x7f0000001940)=""/145, 0x91}}, {{0x0, 0x15, &(0x7f0000003b00)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/227, 0xe3}, {&(0x7f0000002b00)=""/4096, 0x1000}], 0x3, &(0x7f0000003b40)=""/120, 0x78}}], 0x3, 0x0, &(0x7f0000003c80)) [ 256.935465][T17015] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.959830][T17017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.083003][ T4846] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 257.332917][ T4846] usb 3-1: Using ep0 maxpacket: 8 [ 257.532926][ T4846] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 257.542054][ T4846] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 257.551358][ T4846] usb 3-1: Product: syz [ 257.557933][ T4846] usb 3-1: config 0 descriptor?? [ 257.862985][ T4846] usb 3-1: ignoring: probably an ADSL modem [ 258.142949][ T4846] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 258.151183][ T4846] usb 3-1: USB disconnect, device number 74 05:26:00 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00030400"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:26:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x0, 0x0, [@ipv4={[], [], @remote}]}}}], 0x28}, 0x0) 05:26:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 05:26:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x161802, 0x0) write$tun(r0, 0x0, 0x0) 05:26:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:26:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482a", 0x6}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x161802, 0x0) write$tun(r0, 0x0, 0x0) 05:26:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 05:26:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 258.620395][T17054] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)) 05:26:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 258.710287][T17068] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:00 executing program 1: r0 = fork() fork() waitid(0x1, r0, 0x0, 0x8, 0x0) [ 258.912904][ T4846] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 259.152906][ T4846] usb 3-1: Using ep0 maxpacket: 8 [ 259.352934][ T4846] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 259.362032][ T4846] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 259.371609][ T4846] usb 3-1: Product: syz [ 259.378101][ T4846] usb 3-1: config 0 descriptor?? [ 259.862942][ T4846] usb 3-1: ignoring: probably an ADSL modem [ 260.142928][ T4846] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 260.151497][ T4846] usb 3-1: USB disconnect, device number 75 05:26:02 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00030400"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:26:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x161802, 0x0) write$tun(r0, 0x0, 0x0) 05:26:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:26:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 05:26:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482ace", 0x7}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:02 executing program 1: fsopen(&(0x7f0000000080)='fuse\x00', 0x0) 05:26:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x161802, 0x0) write$tun(r0, 0x0, 0x0) 05:26:02 executing program 1: r0 = fork() ptrace(0x10, r0) waitid(0x2, 0x0, &(0x7f0000000140), 0x4, &(0x7f00000001c0)) 05:26:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482ace", 0x7}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 260.639461][T17122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 05:26:02 executing program 1: clock_gettime(0x8, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xb309, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0xfff9, 0x8, 0x1, {0x22, 0xa0d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xff, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0x3f, 0x6e}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x0, 0x96, 0x1f, 0x0, 0x3f}, 0x0, 0x0, 0x3, [{0x93, &(0x7f0000000400)=@string={0x93, 0x3, "a24d1dc5ee3f4fff3047270809fc407c7c44cb8487778cdb2f4a0dcb2ed00835735da0619d85aa13883269699ff60e33f7c9dc15a94a3f109ecf1455c81d521956570c750e2fabdff563e28c07553aacb65dbdca25a0239ef7af4db8221dd654354289b08ae28bad708eb1103ffb9f73141526c510df4c46c8726c916ceb872cc85ab66454bee7da96357e670360e565d4"}}, {0x10, &(0x7f00000004c0)=@string={0x10, 0x3, "6936d93675fb5e1344b827dd3782"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00'}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4050) [ 260.912911][ T9673] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 261.072952][ T9115] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 261.172912][ T9673] usb 3-1: Using ep0 maxpacket: 8 [ 261.393437][ T9673] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 261.402545][ T9673] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 261.410997][ T9673] usb 3-1: Product: syz [ 261.417229][ T9673] usb 3-1: config 0 descriptor?? [ 261.452970][ T9115] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 261.466717][ T9115] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 261.478472][ T9115] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.491745][ T9115] usb 2-1: config 1 interface 0 has no altsetting 0 [ 261.683031][ T9115] usb 2-1: New USB device found, idVendor=046d, idProduct=b309, bcdDevice= 0.40 [ 261.692085][ T9115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.700214][ T9115] usb 2-1: Manufacturer: 㙩㛙ﭵážë¡„舷 [ 261.706216][ T9115] usb 2-1: SerialNumber: syz [ 261.733748][T17148] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 261.883001][ T9673] usb 3-1: ignoring: probably an ADSL modem [ 262.182987][ T9673] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 262.191138][ T9673] usb 3-1: USB disconnect, device number 76 [ 262.232942][ T9115] usbhid 2-1:1.0: can't add hid device: -71 [ 262.233004][ T9115] usbhid: probe of 2-1:1.0 failed with error -71 [ 262.233903][ T9115] usb 2-1: USB disconnect, device number 2 05:26:04 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00030400"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:26:04 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[{&(0x7f0000000240)="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", 0x1000}], 0x0, 0x0) 05:26:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:26:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d712482", 0x24}, {&(0x7f0000000240)="f7d87698482ace", 0x7}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 05:26:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 05:26:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 05:26:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x59, 0x4, 0x8, 0x1}, 0x40) 05:26:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x3}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 262.654560][T17194] loop5: detected capacity change from 0 to 8 [ 262.666965][T17198] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {0x20}, {}]}) 05:26:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:26:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) [ 262.898231][T17224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.952940][ T9673] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 263.203093][ T9673] usb 3-1: Using ep0 maxpacket: 8 [ 263.453221][ T9673] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 263.462587][ T9673] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 263.470972][ T9673] usb 3-1: Product: syz [ 263.477269][ T9673] usb 3-1: config 0 descriptor?? [ 263.953051][ T9673] usb 3-1: ignoring: probably an ADSL modem [ 264.263025][ T9673] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 264.270946][ T9673] usb 3-1: USB disconnect, device number 77 05:26:06 executing program 1: r0 = fork() ptrace(0x10, r0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)) 05:26:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:26:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x3}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x4, 0x0, &(0x7f0000000180)=0x4) 05:26:06 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:26:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:26:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x110) 05:26:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:26:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x3}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 264.743920][T17258] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:06 executing program 5: fork() r0 = fork() waitid(0x1, r0, 0x0, 0x8, 0x0) 05:26:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:26:06 executing program 1: fsopen(&(0x7f0000000100)='pipefs\x00', 0x0) 05:26:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:26:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {0x0}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x18, 0x1}, 0x40) [ 264.899879][T17282] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {0x0}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 264.941690][T17288] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 265.034497][ T9673] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 265.292989][ T9673] usb 3-1: Using ep0 maxpacket: 8 [ 265.503179][ T9673] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 265.513313][ T9673] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 265.522678][ T9673] usb 3-1: Product: syz [ 265.530853][ T9673] usb 3-1: config 0 descriptor?? [ 266.013233][ T9673] usb 3-1: ignoring: probably an ADSL modem [ 266.302974][ T9673] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 266.310930][ T9673] usb 3-1: USB disconnect, device number 78 05:26:08 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:26:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb2}]}}]}, 0x40}}, 0x0) 05:26:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x6, 0x9, 0x0, &(0x7f0000002240)) 05:26:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {0x0}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:26:08 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x10001, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) 05:26:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 266.767324][T17334] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 05:26:08 executing program 1: r0 = fsopen(&(0x7f0000000100)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000140)='posixacl\x00', 0x0, 0x0) 05:26:08 executing program 5: fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) [ 266.812288][T17337] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 05:26:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}}, 0x24}}, 0x0) [ 266.917401][T17360] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 266.964048][T17369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.083055][ T4846] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 267.322930][ T4846] usb 3-1: Using ep0 maxpacket: 8 [ 267.523002][ T4846] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 267.532068][ T4846] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 267.540672][ T4846] usb 3-1: Product: syz [ 267.550753][ T4846] usb 3-1: config 0 descriptor?? [ 268.032969][ T4846] usb 3-1: ignoring: probably an ADSL modem [ 268.312973][ T4846] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 268.321131][ T4846] usb 3-1: USB disconnect, device number 79 05:26:10 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000304000000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:26:10 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xb309, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{{0x9, 0x5, 0x2, 0x3, 0x20}}]}}}]}}]}}, 0x0) 05:26:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 05:26:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) 05:26:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}}, 0x24}}, 0x0) 05:26:10 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0) write$khugepaged_scan(r0, 0x0, 0x0) 05:26:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af7", 0x12}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 268.778718][T17401] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.805164][T17400] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 05:26:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}}, 0x24}}, 0x0) 05:26:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000340)=[{}, {0x3}, {0x6}]}) 05:26:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) [ 268.830099][T17400] device macvlan35 entered promiscuous mode [ 268.903330][T17423] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.916501][ T37] audit: type=1326 audit(1617600370.643:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17422 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 05:26:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x38}}, 0x0) [ 268.948046][T17425] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 268.959591][T17425] device macvlan36 entered promiscuous mode [ 269.017898][T17436] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.072922][ T36] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 269.083372][ T9673] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 269.322935][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 269.322957][ T9673] usb 2-1: Using ep0 maxpacket: 16 [ 269.443071][ T9673] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 269.543194][ T36] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 269.552391][ T36] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 269.560475][ T36] usb 3-1: Product: syz [ 269.567497][ T36] usb 3-1: config 0 descriptor?? [ 269.612996][ T9673] usb 2-1: New USB device found, idVendor=046d, idProduct=b309, bcdDevice= 0.40 [ 269.622079][ T9673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.632497][ T9673] usb 2-1: Product: syz [ 269.637114][ T9673] usb 2-1: Manufacturer: syz [ 269.641712][ T9673] usb 2-1: SerialNumber: syz [ 269.685022][ T9673] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 269.885089][ T4810] usb 2-1: USB disconnect, device number 3 [ 270.052978][ T36] usb 3-1: ignoring: probably an ADSL modem [ 270.332969][ T36] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 270.341314][ T36] usb 3-1: USB disconnect, device number 80 [ 270.652945][ T4846] usb 2-1: new high-speed USB device number 4 using dummy_hcd 05:26:12 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00030400000004"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 270.892960][ T4846] usb 2-1: Using ep0 maxpacket: 16 [ 271.013496][ T4846] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 271.063216][ T9673] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 271.183212][ T4846] usb 2-1: New USB device found, idVendor=046d, idProduct=b309, bcdDevice= 0.40 [ 271.192340][ T4846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.200533][ T4846] usb 2-1: Product: syz [ 271.204878][ T4846] usb 2-1: Manufacturer: syz [ 271.209611][ T4846] usb 2-1: SerialNumber: syz [ 271.255196][ T4846] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 271.302945][ T9673] usb 3-1: Using ep0 maxpacket: 8 05:26:13 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xb309, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{{0x9, 0x5, 0x2, 0x3, 0x20}}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 05:26:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}}, 0x0) 05:26:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002300)={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 05:26:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x38}}, 0x0) 05:26:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af7", 0x12}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 271.473009][ T4846] usb 2-1: USB disconnect, device number 4 [ 271.503141][ T9673] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 05:26:13 executing program 5: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 271.518385][T17498] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 271.521205][ T9673] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 271.553187][T17498] device macvlan37 entered promiscuous mode [ 271.565106][ T9673] usb 3-1: Product: syz 05:26:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 271.571268][T17502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.581327][ T9673] usb 3-1: config 0 descriptor?? 05:26:13 executing program 5: socketpair(0x10, 0x0, 0x7, &(0x7f0000000080)) 05:26:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x38}}, 0x0) 05:26:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x5, 0xffa, &(0x7f0000000100)=""/4090, 0x0, 0x0, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) dup2(r0, r0) 05:26:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 271.668132][T17517] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 271.685262][T17517] device macvlan38 entered promiscuous mode [ 271.696414][T17521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.773554][T17534] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 271.785434][T17534] device macvlan39 entered promiscuous mode [ 271.942946][ T4846] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 272.062954][ T9673] usb 3-1: ignoring: probably an ADSL modem [ 272.222945][ T4846] usb 2-1: Using ep0 maxpacket: 16 [ 272.342977][ T9673] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 272.346065][ T9673] usb 3-1: USB disconnect, device number 81 [ 272.363356][ T4846] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 272.652966][ T4846] usb 2-1: string descriptor 0 read error: -22 [ 272.659438][ T4846] usb 2-1: New USB device found, idVendor=046d, idProduct=b309, bcdDevice= 0.40 [ 272.669264][ T4846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.715183][ T4846] usbhid 2-1:1.0: couldn't find an input interrupt endpoint 05:26:14 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00030400000004"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 272.914848][ T36] usb 2-1: USB disconnect, device number 5 [ 273.053018][ T4846] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 273.303900][ T4846] usb 3-1: Using ep0 maxpacket: 8 [ 273.503036][ T4846] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 273.512320][ T4846] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 273.520487][ T4846] usb 3-1: Product: syz [ 273.526810][ T4846] usb 3-1: config 0 descriptor?? [ 273.692942][ T9673] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 273.952943][ T9673] usb 2-1: Using ep0 maxpacket: 16 [ 274.003007][ T4846] usb 3-1: ignoring: probably an ADSL modem [ 274.073262][ T9673] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 274.282982][ T4846] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 274.291237][ T4846] usb 3-1: USB disconnect, device number 82 [ 274.372993][ T9673] usb 2-1: string descriptor 0 read error: -22 [ 274.379456][ T9673] usb 2-1: New USB device found, idVendor=046d, idProduct=b309, bcdDevice= 0.40 [ 274.389118][ T9673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.445085][ T9673] usbhid 2-1:1.0: couldn't find an input interrupt endpoint 05:26:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 05:26:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8}]}}]}, 0x40}}, 0x0) 05:26:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x6c}}, 0x0) 05:26:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 05:26:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af7", 0x12}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 274.516218][ T9673] usb 2-1: USB disconnect, device number 6 05:26:16 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)) [ 274.570326][T17598] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.606151][T17597] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 05:26:16 executing program 5: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x9, 0x0) syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xc6b, 0x804000) [ 274.628343][T17597] device macvlan40 entered promiscuous mode 05:26:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 05:26:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8}, @TCA_U32_DIVISOR={0x8}]}}]}, 0x40}}, 0x0) 05:26:16 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00030400000004"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:26:16 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 05:26:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) [ 274.758406][T17623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 05:26:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8}]}}]}, 0x38}}, 0x0) 05:26:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x34}}, 0x0) 05:26:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8}]}}]}, 0x38}}, 0x0) [ 274.874874][T17643] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.914973][T17649] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 274.945789][T17653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.062930][ T9673] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 275.342980][ T9673] usb 3-1: Using ep0 maxpacket: 8 05:26:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650", 0x1b}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 275.496200][T17627] ================================================================== [ 275.504286][T17627] BUG: KCSAN: data-race in __snd_pcm_lib_xfer / snd_pcm_oss_sync [ 275.512157][T17627] [ 275.514463][T17627] write to 0xffff88810df87000 of 8 bytes by task 17615 on cpu 0: [ 275.522165][T17627] __snd_pcm_lib_xfer+0xe68/0x11e0 [ 275.527283][T17627] snd_pcm_oss_write3+0x197/0x230 [ 275.532289][T17627] io_playback_transfer+0x7a/0x2d0 [ 275.537392][T17627] snd_pcm_plug_write_transfer+0x1d0/0x360 [ 275.543193][T17627] snd_pcm_oss_write2+0xe0/0x250 [ 275.548113][T17627] snd_pcm_oss_write+0x322/0x8b0 [ 275.553036][T17627] vfs_write+0x223/0x7e0 [ 275.557261][T17627] ksys_write+0xce/0x180 [ 275.561482][T17627] __x64_sys_write+0x3e/0x50 [ 275.566066][T17627] do_syscall_64+0x39/0x80 [ 275.570479][T17627] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 275.576357][T17627] [ 275.578671][T17627] read to 0xffff88810df87000 of 8 bytes by task 17627 on cpu 1: [ 275.586295][T17627] snd_pcm_oss_sync+0x5ce/0x6a0 [ 275.591125][T17627] snd_pcm_oss_ioctl+0x61a/0x29d0 [ 275.596134][T17627] __se_sys_ioctl+0xcb/0x140 [ 275.600709][T17627] __x64_sys_ioctl+0x3f/0x50 [ 275.605283][T17627] do_syscall_64+0x39/0x80 [ 275.610905][T17627] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 275.616843][T17627] [ 275.619173][T17627] Reported by Kernel Concurrency Sanitizer on: [ 275.625325][T17627] CPU: 1 PID: 17627 Comm: syz-executor.1 Not tainted 5.12.0-rc6-syzkaller #0 [ 275.634067][T17627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:26:17 executing program 1: socketpair(0x11, 0x2, 0x4, &(0x7f0000000100)) 05:26:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x34}}, 0x0) 05:26:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8}]}}]}, 0x38}}, 0x0) 05:26:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650", 0x1b}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 275.644109][T17627] ================================================================== [ 275.703544][T17675] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 275.723424][ T9673] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 275.732503][ T9673] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 275.743985][T17678] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.767808][ T9673] usb 3-1: Product: syz [ 275.778393][ T9673] usb 3-1: config 0 descriptor?? [ 276.272955][ T9673] usb 3-1: ignoring: probably an ADSL modem [ 276.552958][ T9673] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 276.561080][ T9673] usb 3-1: USB disconnect, device number 83 05:26:18 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:26:18 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) 05:26:18 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x0, 0x0, [], 0x0}) 05:26:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x221db}, [@IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x34}}, 0x0) 05:26:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650", 0x1b}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x5385, 0x0) 05:26:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2271, 0x0) 05:26:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f1", 0x20}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) [ 277.048106][T17711] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 05:26:18 executing program 4: syz_open_dev$sg(&(0x7f0000001ec0)='/dev/sg#\x00', 0x0, 0x0) 05:26:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2283, &(0x7f0000000040)=0xda2c) 05:26:18 executing program 1: connect$rds(0xffffffffffffffff, 0x0, 0x0) 05:26:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x5386, 0x0) [ 277.333088][ T9673] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 277.612941][ T9673] usb 3-1: Using ep0 maxpacket: 8 [ 277.812983][ T9673] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 277.822088][ T9673] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 277.830783][ T9673] usb 3-1: Product: syz [ 277.835980][ T9673] usb 3-1: config 0 descriptor?? [ 278.093253][ T9673] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 278.372979][ T9673] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 278.381187][ T9673] usb 3-1: USB disconnect, device number 84 05:26:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:26:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f1", 0x20}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:20 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) 05:26:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2203, 0x0) 05:26:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2270, &(0x7f00000000c0)) 05:26:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000002980)={&(0x7f00000028c0), 0xc, 0x0}, 0x0) 05:26:20 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2276, 0x0) 05:26:20 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001a40)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 05:26:20 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000006c0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x7, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "bd4046bb4310fe91"}}, 0x48}}, 0x0) 05:26:20 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0205649, &(0x7f0000000180)={0xe8000002, 0x0, 0x0, {0x0, @raw_data="c743508eb7989744d7f70d3fe6133c7bd6c148cb3cf923b462b3acee35071b93e8bf95c1265b16e080516825b47972f625ef2466673daaf4b12b574c7da5edcef53b6a43cf4d44acc15eb47f11ffd4f5540ea5ebd61dbeed234f3626fa5bf076e32aff86e3fa0e4f8d9394f6a59c72cb575143c49b8859f1b86a3d90ad90a646b33067fbe55ae37127611aac3803274d24093f5ee4910e96ff6501aceafa6a38fb50616f6e0c620e3a917536acbc121fa1987765c47d1cdf56a73e6de01ea4bbac822944fb1b2e31"}}) 05:26:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f1", 0x20}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0) [ 279.152933][ T8843] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 279.392962][ T8843] usb 3-1: Using ep0 maxpacket: 8 [ 279.593071][ T8843] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 279.602328][ T8843] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 279.611110][ T8843] usb 3-1: Product: syz [ 279.617583][ T8843] usb 3-1: config 0 descriptor?? [ 279.873012][ T8843] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 280.152982][ T8843] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 280.160729][ T8843] usb 3-1: USB disconnect, device number 85 05:26:22 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 05:26:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80402) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5450) 05:26:22 executing program 4: ioperm(0x0, 0x3ff, 0x8) 05:26:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d71", 0x22}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2283, &(0x7f00000000c0)) 05:26:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2289, 0x0) 05:26:22 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 05:26:22 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @local}, 0x3}}, 0x26) 05:26:22 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000003140)='/dev/null\x00', 0x0, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, 0x0) 05:26:22 executing program 3: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 05:26:22 executing program 4: bpf$MAP_CREATE(0x17, 0x0, 0x0) 05:26:22 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000003480)='l2tp\x00', 0xffffffffffffffff) [ 280.973235][ T4846] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 281.232934][ T4846] usb 3-1: Using ep0 maxpacket: 8 [ 281.454399][ T4846] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 281.463534][ T4846] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 281.471496][ T4846] usb 3-1: Product: syz [ 281.478083][ T4846] usb 3-1: config 0 descriptor?? [ 281.742970][ T4846] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 282.012960][ T4846] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 282.021423][ T4846] usb 3-1: USB disconnect, device number 86 05:26:24 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 05:26:24 executing program 3: bpf$MAP_CREATE(0x78, 0x0, 0x0) 05:26:24 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 05:26:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 05:26:24 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/uinput\x00', 0x802, 0x0) 05:26:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d71", 0x22}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:24 executing program 3: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) 05:26:24 executing program 5: bpf$MAP_CREATE(0xf, 0x0, 0x0) 05:26:24 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000080)={'veth1_to_bond\x00', @ifru_data=0x0}) 05:26:24 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000003140)='/dev/null\x00', 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000003280), 0x18) 05:26:24 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x210000, 0x0) 05:26:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00', 0xffffffffffffffff) [ 282.783197][ T36] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 283.042942][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 283.273219][ T36] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 283.282339][ T36] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 283.290799][ T36] usb 3-1: Product: syz [ 283.297074][ T36] usb 3-1: config 0 descriptor?? [ 283.572977][ T36] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 283.862994][ T36] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 283.871271][ T36] usb 3-1: USB disconnect, device number 87 05:26:26 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ff000008720501cb754a000800010902120001000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 05:26:26 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0) 05:26:26 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0xe) 05:26:26 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0x0) 05:26:26 executing program 5: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x80000001, &(0x7f0000000240)={0x0, 0x3938700}) 05:26:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="c026dfbdcc476fd878217cbfcf618dd38a759a75fa403624cab270d017285cb71c60ac42880140e046eb282520b64be8f0046b587fc4647b9256f93107c37aa58fde8266c487762039995c22912bed7d97e6a98dc60849f5fb84bf0619839ed38f6e9919618a2e82e414725f9a2d6c0ffe2c741aa4eab163f41f8877dad99c6e1c34be9b2bc790e219ecbaa68791763037d66748bbe9ade46e1fe6d9b7e689a0797aba99d4f4d95e373394fbb070abc3e350b3e6e35288ea1277418fb8a6ab06f98223cff2a11c029298eccd47ff8e2be464c02f955a258cbfa8d58a5b6a5854918704425011f255ea5b0e858a", 0xed}, {&(0x7f0000000000)="8c952680e69519d915f3c3a6a5c4d7769c901afc6ce98f1b7fe887999616b2cc06abc449451f4ad700", 0x29}, {&(0x7f0000000200)="9c9a9c33d6ebf60ed713bee9bf9c139a2af704021d904b31abe650bafbeb29f12d71", 0x22}, {&(0x7f0000000240)="f7d87698482aced1", 0x8}], 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000ec0)=""/4096, 0x141}], 0x1}, 0x0) 05:26:26 executing program 1: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 05:26:26 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/bsg\x00', 0x2a400, 0x0) 05:26:26 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) 05:26:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xd0}}, 0x0) 05:26:26 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_LK(r1, &(0x7f0000002400)={0x28}, 0x28) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000004540)={0x78}, 0x78) read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) 05:26:26 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x880c2, 0x0) [ 284.622902][ T8843] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 284.862943][ T8843] usb 3-1: Using ep0 maxpacket: 8 [ 285.063011][ T8843] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=4a.75 [ 285.072177][ T8843] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 285.080750][ T8843] usb 3-1: Product: syz [ 285.085714][ T8843] usb 3-1: config 0 descriptor?? [ 285.342967][ T8843] cx82310_eth: probe of 3-1:0.0 failed with error -22