genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000006002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x2000000, 0x0) fsync(r0) [ 1035.052766][ T8539] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1035.167820][ T2918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1035.221317][ T2919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1035.422989][ T8539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.434182][ T8539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.445554][ T8539] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1035.459461][ T8539] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1035.469284][ T8539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.479812][ T8539] usb 2-1: config 0 descriptor?? [ 1035.964304][ T8539] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1035.971823][ T8539] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1035.994844][ T8539] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1036.011561][ T8539] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1036.024797][ T8539] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1036.033823][ T8539] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1036.041357][ T8539] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1036.049063][ T8539] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1036.066168][ T8539] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1036.078364][ T8539] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1036.089315][ T8539] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1036.101418][ T8539] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 1036.118309][ T8539] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 1036.132250][ T8539] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1036.890382][ T8585] usb 2-1: USB disconnect, device number 112 21:38:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:38:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000080), &(0x7f0000000000)=0x90) 21:38:24 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='\r', 0x1, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 21:38:24 executing program 0: r0 = socket(0x2, 0x3, 0x0) connect(r0, &(0x7f0000000340)=@un=@abs={0x8}, 0x8) 21:38:24 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0x1) 21:38:24 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000586502000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1037.498151][ T2965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000002740)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="1f", 0x1}], 0x1, &(0x7f00000021c0)=ANY=[], 0x2c}, 0x0) [ 1037.572682][ T2981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@abs={0x8}, 0x8) 21:38:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x2000000, 0x0) lseek(r0, 0x0, 0x4) 21:38:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000100), &(0x7f0000000140)=0x18) 21:38:25 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000006802000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:25 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x14, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0x8) [ 1037.832218][ T8539] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1037.915074][ T2999] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1037.966654][ T3002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1038.212745][ T8539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.230531][ T8539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.241745][ T8539] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1038.256112][ T8539] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1038.266701][ T8539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.276955][ T8539] usb 2-1: config 0 descriptor?? [ 1038.753636][ T8539] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1038.761107][ T8539] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1038.769778][ T8539] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1038.779106][ T8539] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1038.787402][ T8539] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1038.795194][ T8539] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1038.803836][ T8539] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1038.811245][ T8539] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1038.819108][ T8539] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1038.826935][ T8539] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1038.834950][ T8539] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1038.842923][ T8539] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1038.850895][ T8539] plantronics 0003:047F:FFFF.0037: No inputs registered, leaving [ 1038.861332][ T8539] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1039.658324][ T8603] usb 2-1: USB disconnect, device number 113 21:38:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "1b08032b942ef1b66014a4e547a14a00958d338cef403a1f666b4ae8d2a5726b2fee22d8ec257a043e509a9d8068e4bb038dd1f2620383edc824265d7ec596a5022b05f2af37576bffe84fe8c26db8a6e3b14ec17820382f0ce385aba6ca71c049c393700c48e36e"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:38:27 executing program 2: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r0, &(0x7f0000001c00)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x100) 21:38:27 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000040), 0x4) 21:38:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000140), 0x8) 21:38:27 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000006c02000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0x8) 21:38:27 executing program 3: pipe2(&(0x7f0000000600)={0xffffffffffffffff}, 0x0) fcntl$getown(r0, 0x5) 21:38:27 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x2}, 0x1c) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/197, 0xc5}], 0x1) [ 1040.284116][ T3047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000015c0)={&(0x7f0000000240)=@in6={0x0, 0x1c, 0x3}, 0x10, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="14000000840012"], 0x14}, 0x0) [ 1040.376223][ T3053] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, @in, 0x0, 0x0, 0xa}, 0x98) 21:38:28 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000007402000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x5, &(0x7f0000000080), 0x4) [ 1040.652019][ T8585] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1040.687640][ T3077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1040.751011][ T3080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1041.062020][ T8585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.073269][ T8585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.083382][ T8585] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1041.096536][ T8585] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1041.105919][ T8585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.116126][ T8585] usb 2-1: config 0 descriptor?? [ 1041.593787][ T8585] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1041.601219][ T8585] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1041.608974][ T8585] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1041.616684][ T8585] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1041.633061][ T8585] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1041.640944][ T8585] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1041.656520][ T8585] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1041.670227][ T8585] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1041.690585][ T8585] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1041.698327][ T8585] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1041.713047][ T8585] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1041.728155][ T8585] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 1041.739506][ T8585] plantronics 0003:047F:FFFF.0038: No inputs registered, leaving [ 1041.757136][ T8585] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1042.507755][ T8539] usb 2-1: USB disconnect, device number 114 21:38:30 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:38:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x98) 21:38:30 executing program 5: r0 = socket(0x1c, 0x10000001, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000040)=0x6, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="fa", 0x1}], 0x1, &(0x7f0000000080)=[@sndrcv={0x2c}], 0x2c}, 0x20088) 21:38:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 21:38:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000180)={0x10, 0x2}, 0x10) r3 = socket$inet6_sctp(0x1c, 0x1, 0x84) r4 = dup2(r2, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f00000001c0), 0xc) 21:38:30 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000007a02000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1043.083712][ T3120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:30 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000140)={0x0, 0x0, 0x3}, &(0x7f0000000180)=0x18) [ 1043.130823][ T3127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:30 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000008102000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:30 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000200)={0x1c, 0x1c, 0x3}, 0x1c) bind(r0, &(0x7f00000017c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 21:38:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000), 0x98) 21:38:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000180), &(0x7f0000000240)=0x98) [ 1043.356572][ T3139] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000180)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0xca}, 0x14) [ 1043.441527][ T3150] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1043.481776][ T8506] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1043.871748][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.882805][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.892824][ T8506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1043.906102][ T8506] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1043.915394][ T8506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.930337][ T8506] usb 2-1: config 0 descriptor?? [ 1044.423418][ T8506] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1044.432226][ T8506] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1044.439729][ T8506] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1044.461652][ T8506] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1044.469167][ T8506] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1044.477202][ T8506] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1044.485241][ T8506] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1044.493224][ T8506] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1044.500625][ T8506] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1044.508688][ T8506] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1044.516581][ T8506] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1044.525874][ T8506] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 1044.535687][ T8506] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 1044.547327][ T8506] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1045.337717][ T1181] usb 2-1: USB disconnect, device number 115 21:38:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:38:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@prinfo={0x14}], 0x14}, 0x0) 21:38:33 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@prinfo={0x14}], 0x14}, 0x0) 21:38:33 executing program 3: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 21:38:33 executing program 0: fork() r0 = fork() wait4(r0, 0x0, 0x1, 0x0) 21:38:33 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000f002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1045.944072][ T3200] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:33 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)=0x8) 21:38:33 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) 21:38:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000140), &(0x7f0000000000)=0x90) [ 1046.006321][ T3204] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:33 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000280), &(0x7f0000000180)=0x98) 21:38:33 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x8) 21:38:33 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000202000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1046.281512][ T8465] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1046.436582][ T3232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1046.454121][ T3233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1046.641739][ T8465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.652847][ T8465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.663545][ T8465] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1046.676937][ T8465] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1046.687734][ T8465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.701072][ T8465] usb 2-1: config 0 descriptor?? [ 1047.193693][ T8465] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1047.201134][ T8465] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1047.223927][ T8465] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1047.240413][ T8465] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1047.256375][ T8465] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1047.269744][ T8465] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1047.277606][ T8465] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1047.285575][ T8465] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1047.293414][ T8465] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1047.301876][ T8465] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1047.309290][ T8465] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1047.317159][ T8465] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 1047.325455][ T8465] plantronics 0003:047F:FFFF.003A: No inputs registered, leaving [ 1047.335646][ T8465] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1048.121265][ T8465] usb 2-1: USB disconnect, device number 116 21:38:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:38:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000000), 0x88) 21:38:36 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="fa", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB=','], 0x2c}, 0x0) 21:38:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x28, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 21:38:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000006c0), &(0x7f0000000780)=0x88) 21:38:36 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000302000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1048.735380][ T3272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:36 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x2000000, 0x0) 21:38:36 executing program 5: r0 = socket(0x1c, 0x10000001, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="fa", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x1c, 0x84, 0xa, @empty}], 0x1c}, 0x0) 21:38:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x1c, 0x1c, 0x2}, 0x1c) [ 1048.806770][ T3281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)='d', 0x1}], 0x1, &(0x7f0000001700)=[@init={0x14}, @sndrcv={0x2c}], 0x40}, 0x0) 21:38:36 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000402000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1049.101762][ T8465] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1049.106406][ T3297] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1049.159762][ T3299] sctp: [Deprecated]: syz-executor.2 (pid 3299) Use of int in max_burst socket option. [ 1049.159762][ T3299] Use struct sctp_assoc_value instead [ 1049.167795][ T3301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1049.481225][ T8465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.492410][ T8465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.502549][ T8465] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1049.519782][ T8465] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1049.528949][ T8465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.543947][ T8465] usb 2-1: config 0 descriptor?? [ 1050.013130][ T8465] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1050.020584][ T8465] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1050.042842][ T8465] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1050.050381][ T8465] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1050.071462][ T8465] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1050.078993][ T8465] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1050.087197][ T8465] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1050.095115][ T8465] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1050.103069][ T8465] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1050.110583][ T8465] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1050.118631][ T8465] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1050.126503][ T8465] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1050.135061][ T8465] plantronics 0003:047F:FFFF.003B: No inputs registered, leaving [ 1050.148090][ T8465] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1050.927359][ T8603] usb 2-1: USB disconnect, device number 117 21:38:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x36, @string={0x36, 0x3, "1b08032b942ef1b66014a4e547a14a00958d338cef403a1f666b4ae8d2a5726b2fee22d8ec257a043e509a9d8068e4bb038dd1f2"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:38:38 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x14) 21:38:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000040), 0xc) 21:38:38 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000015c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000040)="a3", 0x1}], 0x1, 0x0, 0x14}, 0x0) 21:38:38 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000502000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:38 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x2000000, 0x0) [ 1051.516631][ T3340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1051.572183][ T3347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@sndrcv={0x2c}], 0x2c}, 0x0) 21:38:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x14) 21:38:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000140), 0x88) 21:38:39 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f00000002c0)={0x1, [0x0]}, 0x6) 21:38:39 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000602000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:39 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000240), &(0x7f0000000100)=0x90) [ 1051.861546][ T8603] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1051.913905][ T3364] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1051.982075][ T3366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1052.251264][ T8603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.262238][ T8603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.272504][ T8603] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1052.285949][ T8603] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1052.295827][ T8603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.306965][ T8603] usb 2-1: config 0 descriptor?? [ 1052.793669][ T8603] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1052.811843][ T8603] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1052.819495][ T8603] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1052.840864][ T8603] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1052.848754][ T8603] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1052.856666][ T8603] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1052.864642][ T8603] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1052.872651][ T8603] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1052.880589][ T8603] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1052.888512][ T8603] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1052.897273][ T8603] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1052.905222][ T8603] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1052.913624][ T8603] plantronics 0003:047F:FFFF.003C: No inputs registered, leaving [ 1052.927229][ T8603] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1053.707326][ T8506] usb 2-1: USB disconnect, device number 118 [ 1054.062295][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.068605][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 21:38:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:38:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240)={0x0, @in, 0x0, 0x0, 0x190}, 0x98) 21:38:41 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) 21:38:41 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="fa", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="2c00000084"], 0x2c}, 0x0) 21:38:41 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2}, 0x1c) write(r0, &(0x7f00000003c0)="01", 0x1) 21:38:41 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000702000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1054.304956][ T3410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:41 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)='d', 0x1}], 0x1, &(0x7f0000001700)=[@init={0x14}, @authinfo={0x10}, @sndrcv={0x2c}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast1}, @dstaddrv6={0x1c, 0x84, 0xa, @rand_addr=' \x01\x00'}, @dstaddrv6={0x1c, 0x84, 0xa, @local={0xfe, 0x80, '\x00', 0x0}}], 0xa4}, 0x0) 21:38:41 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000200), &(0x7f0000000300)=0x4) [ 1054.374807][ T3423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:42 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000100), &(0x7f0000000200)=0xc) 21:38:42 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f00000000c0)={r1}, &(0x7f0000000180)=0x8) 21:38:42 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000802000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:42 executing program 2: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00') [ 1054.620626][ T8506] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1054.685763][ T3443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1054.750236][ T3447] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1054.990676][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.001756][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.013730][ T8506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1055.027571][ T8506] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1055.037655][ T8506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.049646][ T8506] usb 2-1: config 0 descriptor?? [ 1055.532063][ T8506] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1055.539500][ T8506] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1055.563874][ T8506] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1055.579786][ T8506] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1055.596979][ T8506] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1055.604962][ T8506] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1055.614410][ T8506] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1055.628135][ T8506] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1055.637578][ T8506] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1055.654342][ T8506] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1055.666775][ T8506] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1055.684159][ T8506] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1055.698133][ T8506] plantronics 0003:047F:FFFF.003D: No inputs registered, leaving [ 1055.716208][ T8506] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1056.432708][ T8506] usb 2-1: USB disconnect, device number 119 21:38:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:38:44 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000480), &(0x7f00000004c0)=0x8) 21:38:44 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) 21:38:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f00000001c0), 0xc) 21:38:44 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/226, 0xe2}, 0x83) 21:38:44 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000902000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1057.044523][ T3486] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:44 executing program 3: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/244, 0xf4}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f00000024c0)=[{&(0x7f0000000080)=""/6, 0x6}], 0x1) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xffc2, 0x0, 0x0, 0x800e007cd) shutdown(r2, 0x0) r4 = socket(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="f70276d2b8"], 0x10) shutdown(r3, 0x0) 21:38:44 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000000c0)={0x0, @in, 0x0, 0x0, 0x8d}, 0x98) [ 1057.118929][ T3498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:44 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)=';', 0x1, 0x81, &(0x7f0000000200)={0x10, 0x2}, 0x10) 21:38:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@init={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @rand_addr=' \x01\x00'}, @prinfo={0x14}, @prinfo={0x14}, @prinfo={0x14}, @sndrcv={0x2c}, @sndinfo={0x1c}], 0xb4}, 0x0) 21:38:44 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000a02000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:44 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000080)={0x0, 0x0, 0x3}, 0x8) [ 1057.415655][ T3518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1057.440571][T23198] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1057.492176][ T3520] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1057.871035][T23198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.881951][T23198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.893769][T23198] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1057.908229][T23198] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1057.918476][T23198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.934577][T23198] usb 2-1: config 0 descriptor?? [ 1058.401803][T23198] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1058.409260][T23198] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1058.439401][T23198] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1058.447937][T23198] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1058.457418][T23198] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1058.465454][T23198] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1058.473367][T23198] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1058.481406][T23198] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1058.488811][T23198] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1058.496849][T23198] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1058.504912][T23198] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1058.513022][T23198] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 1058.521445][T23198] plantronics 0003:047F:FFFF.003E: No inputs registered, leaving [ 1058.536818][T23198] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1059.318168][T23198] usb 2-1: USB disconnect, device number 120 21:38:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:38:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000040), &(0x7f0000000100)=0x98) 21:38:47 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000180)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000040)={r4}, 0x8) 21:38:47 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000c02000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000080), &(0x7f0000000000)=0xe9) 21:38:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000140), 0x90) [ 1059.951465][ T3566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000bc0)={&(0x7f0000000700)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x10, 0x84, 0x9, @multicast2}], 0x10}, 0x0) 21:38:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240)={0x0, @in, 0x80000000}, 0x98) 21:38:47 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000200)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f00000004c0)=[@rights], 0x10}, 0x0) [ 1060.007413][ T3572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:47 executing program 0: pipe2(&(0x7f0000000300), 0x0) 21:38:47 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000e02000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:47 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)=0x8) [ 1060.230339][ T8506] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1060.324483][ T3592] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1060.432551][ T3596] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1060.600162][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.612607][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.625626][ T8506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1060.639724][ T8506] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1060.649802][ T8506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.676563][ T8506] usb 2-1: config 0 descriptor?? [ 1061.162107][ T8506] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1061.169548][ T8506] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1061.192040][ T8506] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1061.199523][ T8506] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1061.218863][ T8506] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1061.227922][ T8506] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1061.244794][ T8506] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1061.255535][ T8506] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1061.269502][ T8506] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1061.286444][ T8506] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1061.295683][ T8506] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1061.310024][ T8506] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1061.317921][ T8506] plantronics 0003:047F:FFFF.003F: No inputs registered, leaving [ 1061.337796][ T8506] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1062.064484][T23198] usb 2-1: USB disconnect, device number 121 21:38:50 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "1b08032b942ef1b66014a4e547a14a00958d338cef403a1f666b"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:38:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f00000001c0), 0xc) 21:38:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x0, 0x1, 0x10}, 0x98) 21:38:50 executing program 3: openat(0xffffffffffffffff, 0x0, 0x80, 0x0) 21:38:50 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000f02000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000bc0)={&(0x7f0000000700)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x10, 0x84, 0x9, @multicast2}], 0x10}, 0x0) [ 1062.668362][ T3640] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:50 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000040), 0x0) clock_getres(0xd, &(0x7f0000000080)) [ 1062.723608][ T3649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:50 executing program 3: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/244, 0xf4}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f00000024c0)=[{&(0x7f0000000080)=""/6, 0x6}, {0x0}], 0x2) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xffc2, 0x0, 0x0, 0x800e007cd) shutdown(r2, 0x0) r4 = socket(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="f70276d2b8"], 0x10) shutdown(r3, 0x0) 21:38:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)=0x8) 21:38:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f00000000c0), &(0x7f0000000180)=0xb0) 21:38:50 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000001002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:50 executing program 0: clock_nanosleep(0xb, 0x1, &(0x7f0000000c80), 0x0) [ 1063.010035][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1063.039983][ T8506] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1063.098318][ T3668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1063.470000][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.482129][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.494368][ T8506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1063.508879][ T8506] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1063.519870][ T8506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.541426][ T8506] usb 2-1: config 0 descriptor?? [ 1064.032688][ T8506] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1064.040536][ T8506] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1064.048291][ T8506] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1064.056389][ T8506] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1064.064566][ T8506] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1064.072500][ T8506] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1064.080402][ T8506] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1064.088677][ T8506] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1064.096645][ T8506] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1064.107756][ T8506] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1064.125223][ T8506] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1064.136270][ T8506] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 1064.155922][ T8506] plantronics 0003:047F:FFFF.0040: No inputs registered, leaving [ 1064.176156][ T8506] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1064.938732][ T8506] usb 2-1: USB disconnect, device number 122 21:38:52 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:38:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 21:38:53 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000004802000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 21:38:53 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) 21:38:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}, 0x14) [ 1065.537337][ T3711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:53 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f0000000240), 0xc) 21:38:53 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r1, r1) r3 = dup2(r0, r2) sendmsg$inet_sctp(r3, &(0x7f00000002c0)={&(0x7f0000000100)=@in={0x10}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@dstaddrv4={0x10, 0x84, 0x9, @remote={0xac, 0x14, 0x0}}, @dstaddrv6={0x1c, 0x84, 0xa, @empty}, @init={0x14}], 0x40}, 0x0) 21:38:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000080)={0x20}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000015c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x14}, 0x0) [ 1065.617725][ T3717] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xef7}, 0x14) 21:38:53 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000004c02000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) [ 1065.899668][ T1181] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1065.915211][ T3740] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1065.986866][ T3744] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1066.289791][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.300968][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.311355][ T1181] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1066.324981][ T1181] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1066.334458][ T1181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.348324][ T1181] usb 2-1: config 0 descriptor?? [ 1066.841365][ T1181] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1066.848832][ T1181] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1066.858230][ T1181] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1066.879016][ T1181] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1066.894384][ T1181] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1066.906277][ T1181] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1066.918900][ T1181] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1066.934322][ T1181] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1066.942618][ T1181] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1066.950615][ T1181] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1066.959259][ T1181] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1066.967277][ T1181] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1066.975682][ T1181] plantronics 0003:047F:FFFF.0041: No inputs registered, leaving [ 1066.986788][ T1181] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1067.786532][T23198] usb 2-1: USB disconnect, device number 123 21:38:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:38:55 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x400c0) 21:38:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x100, 0x0, &(0x7f00000007c0)=0xfffffffffffffd3d) 21:38:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) 21:38:55 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000006002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f00000002c0), 0x4) [ 1068.357733][ T3790] sctp: [Deprecated]: syz-executor.2 (pid 3790) Use of int in max_burst socket option. [ 1068.357733][ T3790] Use struct sctp_assoc_value instead [ 1068.366174][ T3789] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1068.388221][ T3793] sctp: [Deprecated]: syz-executor.3 (pid 3793) Use of int in max_burst socket option deprecated. [ 1068.388221][ T3793] Use struct sctp_assoc_value instead 21:38:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20104, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000340)="1e", 0x1, 0x0, 0x0, 0x0) 21:38:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000002740)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000000040)="1f", 0x1}], 0x1, &(0x7f00000021c0)=ANY=[@ANYBLOB=','], 0x2c}, 0x0) [ 1068.462000][ T3797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, @in, 0xffffffff}, 0x98) 21:38:56 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 21:38:56 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000006802000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000080), &(0x7f0000000140)=0x5a) [ 1068.739364][ T8539] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1068.776310][ T3815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1068.862965][ T3817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1069.150946][ T8539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.161991][ T8539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.171869][ T8539] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1069.184853][ T8539] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1069.194862][ T8539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.205058][ T8539] usb 2-1: config 0 descriptor?? [ 1069.680897][ T8539] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1069.688595][ T8539] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1069.712657][ T8539] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1069.728769][ T8539] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1069.742667][ T8539] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1069.759275][ T8539] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1069.766695][ T8539] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1069.774598][ T8539] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1069.782407][ T8539] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1069.790394][ T8539] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1069.797794][ T8539] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1069.805738][ T8539] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 1069.813997][ T8539] plantronics 0003:047F:FFFF.0042: No inputs registered, leaving [ 1069.825706][ T8539] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1070.582888][ T8585] usb 2-1: USB disconnect, device number 124 21:38:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:38:58 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 21:38:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000180)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000000c0)={r4}, 0x14) 21:38:58 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, 0x0, 0x0) 21:38:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) connect$inet(r2, &(0x7f0000000100)={0x10, 0x2}, 0x10) 21:38:58 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000006c02000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1071.195555][ T3862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1071.244541][ T3875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:38:58 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) listen(r0, 0x0) 21:38:58 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c0000008400000007"], 0x2c}, 0x0) 21:38:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000680)={0x0, 0x400}, 0x8) 21:38:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20104, 0x0, 0x0) 21:38:58 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000007402000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:38:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000019c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@init={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @rand_addr=' \x01\x00'}, @prinfo={0x14}, @prinfo={0x14}, @sndrcv={0x2c}, @sndinfo={0x1c}], 0xa0}, 0x0) [ 1071.567680][ T3894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1071.577518][ T1181] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1071.650626][ T3895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1071.979494][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.990556][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.002571][ T1181] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1072.016964][ T1181] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1072.026508][ T1181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.036454][ T1181] usb 2-1: config 0 descriptor?? [ 1072.511011][ T1181] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1072.518444][ T1181] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1072.541903][ T1181] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1072.558413][ T1181] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1072.573525][ T1181] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1072.588963][ T1181] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1072.596388][ T1181] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1072.604356][ T1181] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1072.612517][ T1181] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1072.620843][ T1181] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1072.628250][ T1181] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1072.636103][ T1181] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 1072.647898][ T1181] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 1072.668109][ T1181] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1073.416857][ T8603] usb 2-1: USB disconnect, device number 125 21:39:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0xf, @string={0xf, 0x3, "1b08032b942ef1b66014a4e547"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:01 executing program 2: socketpair(0x0, 0x0, 0xe1, 0x0) 21:39:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x80) 21:39:01 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x20c}, 0x98) 21:39:01 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000007a02000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:01 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000680)={0x3, 0x400}, 0x8) [ 1074.013609][ T3939] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) 21:39:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0x0, 0x0, 0x381, 0x0, 0x7f}, 0x98) 21:39:01 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x800, 0x314}, 0x98) [ 1074.087169][ T3943] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:01 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)='`', 0x1}], 0x1, &(0x7f00000002c0)=[@init={0x14}, @sndinfo={0x1c}], 0x30}, 0x0) 21:39:01 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000003000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)='M', 0x1, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) [ 1074.359033][ T8539] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1074.779226][ T8539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.790269][ T8539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.800170][ T8539] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1074.813620][ T8539] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1074.822776][ T8539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.843380][ T8539] usb 2-1: config 0 descriptor?? [ 1075.320711][ T8539] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1075.328147][ T8539] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1075.335934][ T8539] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1075.358706][ T8539] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1075.366129][ T8539] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1075.383611][ T8539] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1075.395979][ T8539] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1075.408518][ T8539] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1075.422018][ T8539] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1075.438966][ T8539] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1075.446391][ T8539] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1075.455457][ T8539] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1075.463797][ T8539] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 1075.488952][ T8539] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1076.232162][ T1181] usb 2-1: USB disconnect, device number 126 21:39:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0xf, @string={0xf, 0x3, "1b08032b942ef1b66014a4e547"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:04 executing program 0: r0 = socket(0x2, 0x5, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 21:39:04 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x24, &(0x7f0000000000)=0x1c00, 0xfe6a) 21:39:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000140), 0x4) 21:39:04 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000067000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 21:39:04 executing program 2: open$dir(0x0, 0x160b00, 0x0) 21:39:04 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000400)='S', 0x1, 0x0, &(0x7f0000000500)={0x1c, 0x1c, 0x1}, 0x1c) 21:39:04 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200), &(0x7f0000000040)=0x98) 21:39:04 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 21:39:04 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000081000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x20, &(0x7f00000000c0), 0x4) [ 1077.188786][ T8603] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1077.558644][ T8603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.569901][ T8603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.579912][ T8603] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1077.594849][ T8603] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1077.605468][ T8603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.616329][ T8603] usb 2-1: config 0 descriptor?? [ 1078.100344][ T8603] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1078.107774][ T8603] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1078.131313][ T8603] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1078.148563][ T8603] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1078.156057][ T8603] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1078.178600][ T8603] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1078.186035][ T8603] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1078.194094][ T8603] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1078.202018][ T8603] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1078.209974][ T8603] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1078.217880][ T8603] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1078.225902][ T8603] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 1078.243244][ T8603] plantronics 0003:047F:FFFF.0045: No inputs registered, leaving [ 1078.265025][ T8603] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1079.028807][T23198] usb 2-1: USB disconnect, device number 127 21:39:07 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140), 0x98) 21:39:07 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000003000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000300), &(0x7f0000000340)=0x8) 21:39:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000180)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x10001}, 0x14) 21:39:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0xf, @string={0xf, 0x3, "1b08032b942ef1b66014a4e547"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:07 executing program 2: r0 = socket(0x2, 0x3, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 21:39:07 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x7f}, 0xc) sendmsg$inet_sctp(r0, &(0x7f00000015c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000040)="a3", 0x1}], 0x1, 0x0, 0x14}, 0x0) 21:39:07 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000067000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 21:39:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000180)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000040)=0x10) 21:39:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000008c0)="b3", 0x1, 0x0, &(0x7f0000000740)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:39:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000300), &(0x7f0000000140)=0x90) 21:39:07 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) [ 1079.978730][T23198] usb 2-1: new high-speed USB device number 2 using dummy_hcd 21:39:07 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002020000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:07 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000002c0), 0x88) 21:39:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x32) [ 1080.194407][ T4122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1080.287282][ T4126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1080.358484][T23198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.393684][T23198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.430901][T23198] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1080.462286][T23198] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1080.505342][T23198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.517618][T23198] usb 2-1: config 0 descriptor?? [ 1081.029765][T23198] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 1081.037205][T23198] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 1081.061464][T23198] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 1081.075571][T23198] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 1081.083226][T23198] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 1081.096305][T23198] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 1081.116284][T23198] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 1081.127340][T23198] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 1081.144035][T23198] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 1081.153494][T23198] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 1081.168425][T23198] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 1081.175842][T23198] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 1081.194886][T23198] plantronics 0003:047F:FFFF.0046: No inputs registered, leaving [ 1081.215331][T23198] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1081.962445][ T1181] usb 2-1: USB disconnect, device number 2 21:39:10 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x16, @string={0x16, 0x3, "1b08032b942ef1b66014a4e547a14a00958d338c"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)='`', 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x10, 0x84, 0x9}], 0x10}, 0x0) 21:39:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x1c}, @prinfo={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast2}, @sndrcv={0x2c}, @sndrcv={0x2c}, @dstaddrv4={0x10, 0x84, 0x9, @multicast1}], 0xb4}, 0x0) 21:39:10 executing program 3: setpriority(0x0, 0x7fff, 0x0) 21:39:10 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002030000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:10 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000002c0)={0x0, @in, 0x0, 0xfffffff5, 0x10}, 0x98) [ 1082.542592][ T4169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:10 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r0, &(0x7f0000001c00)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x100) [ 1082.603765][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:10 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) recvmsg(r1, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x3) 21:39:10 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000000240)={0x10, 0x2}, 0x10) 21:39:10 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002040000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:10 executing program 2: nanosleep(&(0x7f0000000000)={0x0, 0x3f}, 0x0) 21:39:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xd, &(0x7f0000000700), &(0x7f0000000740)=0x4) [ 1082.918135][ T8506] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1082.956868][ T4201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1083.000193][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1083.034414][ T4207] sctp: [Deprecated]: syz-executor.0 (pid 4207) Use of int in maxseg socket option. [ 1083.034414][ T4207] Use struct sctp_assoc_value instead [ 1083.328189][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.345755][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.356853][ T8506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1083.370966][ T8506] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1083.380878][ T8506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.393922][ T8506] usb 2-1: config 0 descriptor?? [ 1083.869830][ T8506] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 1083.877260][ T8506] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 1083.902263][ T8506] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 1083.917233][ T8506] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 1083.933202][ T8506] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 1083.946365][ T8506] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 1083.955928][ T8506] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 1083.964430][ T8506] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 1083.972391][ T8506] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 1083.980439][ T8506] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 1083.990809][ T8506] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 1083.998668][ T8506] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 1084.006535][ T8506] plantronics 0003:047F:FFFF.0047: No inputs registered, leaving [ 1084.034264][ T8506] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1084.772050][ T1181] usb 2-1: USB disconnect, device number 3 21:39:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x10, @string={0x10, 0x3, "1b08032b942ef1b66014a4e547a1"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 21:39:12 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240)={0x0, @in, 0x80000000, 0x0, 0x0, 0x0, 0x58}, 0x98) 21:39:12 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002050000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:12 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000140)={0x0, 0x7, 0x0, 0x4}, 0x8) 21:39:12 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) connect$inet(r2, &(0x7f0000000200)={0x10, 0x2}, 0x10) [ 1085.380762][ T4250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000280), &(0x7f00000002c0)=0x18) 21:39:13 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)='d', 0x1}], 0x1, &(0x7f0000001700)=[@init={0x14}], 0x14}, 0x0) [ 1085.438085][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) recvfrom$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) 21:39:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000840)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@dstaddrv6={0x1c, 0x84, 0xa, @rand_addr=' \x01\x00'}, @init={0x14}, @sndrcv={0x2c}, @sndrcv={0x2c}, @prinfo={0x14}, @sndinfo={0x1c}], 0xb8}, 0x0) 21:39:13 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002060000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:13 executing program 2: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/244, 0xf4}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f00000024c0)=[{&(0x7f0000000080)=""/6, 0x6}, {0x0}, {0x0}], 0x3) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xffc2, 0x0, 0x0, 0x800e007cd) shutdown(r2, 0x0) r4 = socket(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="f70276d2b8"], 0x10) shutdown(r3, 0x0) [ 1085.699589][ T1181] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1085.784588][ T4272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1085.845322][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1086.067950][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.079324][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.091007][ T1181] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1086.106453][ T1181] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1086.116379][ T1181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.132344][ T1181] usb 2-1: config 0 descriptor?? [ 1086.619647][ T1181] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 1086.627083][ T1181] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 1086.663652][ T1181] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 1086.687891][ T1181] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 1086.695322][ T1181] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 1086.705168][ T1181] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 1086.713079][ T1181] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 1086.722384][ T1181] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 1086.747720][ T1181] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 1086.755148][ T1181] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 1086.797880][ T1181] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 1086.805309][ T1181] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 1086.827823][ T1181] plantronics 0003:047F:FFFF.0048: No inputs registered, leaving [ 1086.862568][ T1181] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1087.543680][T23198] usb 2-1: USB disconnect, device number 4 21:39:15 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x10, @string={0x10, 0x3, "1b08032b942ef1b66014a4e547a1"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:15 executing program 3: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000000) 21:39:15 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x25, 0x0, 0x0, 0x0) 21:39:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r1, r2) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000680)=ANY=[@ANYBLOB="f1", @ANYRES32=0xffffffffffffffff], &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000000)={r4}, &(0x7f00000000c0)=0xb0) 21:39:15 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002070000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f0000000000)={r2}, 0x8) [ 1088.130407][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:15 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000cc0), 0x90) 21:39:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) [ 1088.192629][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x104, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:39:15 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) 21:39:15 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002080000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:15 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) [ 1088.447630][ T8603] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1088.530440][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1088.585611][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1088.817932][ T8603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.829048][ T8603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.838859][ T8603] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1088.855876][ T8603] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1088.865112][ T8603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.881447][ T8603] usb 2-1: config 0 descriptor?? [ 1089.359803][ T8603] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1089.367235][ T8603] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1089.401133][ T8603] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1089.417537][ T8603] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1089.425019][ T8603] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1089.432609][ T8603] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1089.440329][ T8603] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1089.448004][ T8603] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1089.455410][ T8603] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1089.462900][ T8603] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1089.470581][ T8603] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1089.478146][ T8603] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1089.497922][ T8603] plantronics 0003:047F:FFFF.0049: No inputs registered, leaving [ 1089.518394][ T8603] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1090.261268][ T1181] usb 2-1: USB disconnect, device number 5 21:39:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x10, @string={0x10, 0x3, "1b08032b942ef1b66014a4e547a1"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:18 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 21:39:18 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000180)=0x88) 21:39:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000480), &(0x7f0000000500)=0x8) 21:39:18 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002090000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:18 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) connect$inet(r2, &(0x7f0000000100)={0xfffffffffffffe9a, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000002c0)=ANY=[@ANYBLOB="01a9126f", @ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000640)={r3}, &(0x7f0000000700)=0xb0) [ 1090.851784][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:18 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000100), 0x4) 21:39:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, &(0x7f0000000080), &(0x7f0000000140)=0x90) [ 1090.917697][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:18 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r0, 0x0, 0x1, 0x0, &(0x7f0000000140)) 21:39:18 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000080), &(0x7f0000000000)=0x90) 21:39:18 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000020a0000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:18 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f00000000c0), 0x8) [ 1091.207525][ T1181] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1091.258734][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1091.320744][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1091.608271][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.619265][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.631881][ T1181] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1091.645031][ T1181] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1091.654340][ T1181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.675518][ T1181] usb 2-1: config 0 descriptor?? [ 1092.139324][ T1181] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1092.157469][ T1181] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1092.165148][ T1181] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1092.181943][ T1181] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1092.193605][ T1181] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1092.208564][ T1181] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1092.216003][ T1181] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1092.234016][ T1181] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1092.247712][ T1181] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1092.255146][ T1181] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1092.272091][ T1181] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1092.283049][ T1181] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1092.297307][ T1181] plantronics 0003:047F:FFFF.004A: No inputs registered, leaving [ 1092.317511][ T1181] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1093.049901][T23198] usb 2-1: USB disconnect, device number 6 21:39:21 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x13, @string={0x13, 0x3, "1b08032b942ef1b66014a4e547a14a0095"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000280)={0x0, 0x0, 0xf}, &(0x7f00000002c0)=0x18) 21:39:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000000080)=0x18) 21:39:21 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000040), 0x4) 21:39:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001600)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) 21:39:21 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000020c0000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1093.623515][ T4466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) read(r0, &(0x7f0000000180)=""/140, 0x8c) [ 1093.664480][ T4472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0xe, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2529a0ced8d53fb7ffff002000000000000000"], 0x2c}, 0x0) 21:39:21 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000020e0000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000008c0)="b3", 0x1, 0x0, &(0x7f0000000740)={0x10, 0x2}, 0x10) 21:39:21 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000cc0), 0x6b) 21:39:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x12}, 0x98) [ 1093.892421][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1093.950170][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1094.037156][ T8603] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1094.457534][ T8603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.468686][ T8603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.479998][ T8603] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1094.493677][ T8603] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1094.503964][ T8603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.514110][ T8603] usb 2-1: config 0 descriptor?? [ 1094.998987][ T8603] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1095.006432][ T8603] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1095.029844][ T8603] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1095.052219][ T8603] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1095.063526][ T8603] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1095.080134][ T8603] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1095.092473][ T8603] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1095.104989][ T8603] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1095.120564][ T8603] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1095.131542][ T8603] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1095.145864][ T8603] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1095.156700][ T8603] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1095.171465][ T8603] plantronics 0003:047F:FFFF.004B: No inputs registered, leaving [ 1095.184011][ T8603] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1095.909471][ T8603] usb 2-1: USB disconnect, device number 7 21:39:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x10, @string={0x10, 0x3, "1b08032b942ef1b66014a4e547a1"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:23 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000340)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 21:39:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x28, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:39:23 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) connect$inet(r2, &(0x7f0000000100)={0xfffffffffffffe9a, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000002c0)=ANY=[@ANYBLOB="01", @ANYRES32=0x0], &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) 21:39:23 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x104, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 21:39:23 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000020f0000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1096.468633][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1096.492754][ T4537] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:24 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002100000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:24 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r0, &(0x7f0000001c00)={&(0x7f0000000000)=@un=@file={0xa}, 0xa, 0x0, 0x0, &(0x7f0000001840)=[{0x10}], 0x10}, 0x20001) 21:39:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) read(r0, &(0x7f0000000040)=""/196, 0xc4) 21:39:24 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0xffff, 0x8000, &(0x7f0000000000), 0x4) 21:39:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000080), 0x88) [ 1096.715519][ T4552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1096.747380][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:24 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002480000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1096.916905][ T1181] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1097.073769][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1097.103554][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1097.287354][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.298367][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.314150][ T1181] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1097.332629][ T1181] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1097.356768][ T1181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.378313][ T1181] usb 2-1: config 0 descriptor?? [ 1097.858347][ T1181] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1097.865787][ T1181] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1097.881264][ T1181] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1097.904457][ T1181] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1097.920911][ T1181] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1097.928939][ T1181] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1097.936358][ T1181] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1097.944670][ T1181] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1097.952492][ T1181] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1097.960356][ T1181] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1097.968257][ T1181] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1097.975664][ T1181] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1097.985398][ T1181] plantronics 0003:047F:FFFF.004C: No inputs registered, leaving [ 1098.012222][ T1181] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1098.763061][T23198] usb 2-1: USB disconnect, device number 8 21:39:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x10, @string={0x10, 0x3, "1b08032b942ef1b66014a4e547a1"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:26 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000100)={@random="91387ba52807", @random="95bba80b6551", @val, {@ipv6}}, 0x0) 21:39:26 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) bind(r0, &(0x7f0000000380)=@in={0x10, 0x2}, 0x10) 21:39:26 executing program 5: clock_nanosleep(0xb, 0x0, &(0x7f0000000c80), 0x0) 21:39:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x3, 0x0, 0xa}, 0x98) 21:39:26 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000024c0000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:26 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f0000000040), 0x8) [ 1099.369901][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:26 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="95bba80b6551", @val, {@ipv6}}, 0x0) 21:39:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000140)=ANY=[@ANYBLOB="e9"], &(0x7f00000000c0)=0x8) [ 1099.458336][ T4623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000040), &(0x7f0000000140)=0xc) 21:39:27 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000180)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000240)={r4}, 0x8) 21:39:27 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002600000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1099.756758][ T8603] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1099.786266][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1099.861496][ T4647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1100.148847][ T8603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.159821][ T8603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.170976][ T8603] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1100.184863][ T8603] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1100.194687][ T8603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.209149][ T8603] usb 2-1: config 0 descriptor?? [ 1100.678058][ T8603] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1100.685485][ T8603] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1100.716515][ T8603] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1100.723946][ T8603] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1100.741578][ T8603] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1100.749979][ T8603] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1100.757794][ T8603] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1100.765196][ T8603] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1100.772895][ T8603] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1100.781032][ T8603] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1100.788900][ T8603] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1100.796322][ T8603] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1100.804630][ T8603] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 1100.815828][ T8603] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1101.584419][ T1181] usb 2-1: USB disconnect, device number 9 21:39:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x10, @string={0x10, 0x3, "1b08032b942ef1b66014a4e547a1"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x6d}, 0x98) 21:39:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x104, &(0x7f0000000000), &(0x7f0000000040)=0x4) 21:39:29 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000100)='cubic\x00', 0x4) 21:39:29 executing program 0: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x1812, 0xffffffffffffffff, 0x0) 21:39:29 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002680000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1102.191053][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:29 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 21:39:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000fc0)={&(0x7f0000000a40)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000ec0)=[@dstaddrv6={0x1c, 0x84, 0xa, @local={0xfe, 0x80, '\x00', 0x0}}, @dstaddrv4={0x10, 0x84, 0x9, @broadcast}, @authinfo={0x10}], 0x3c}, 0x0) 21:39:29 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x4e6, 0xffffffff, 0x7}, 0x10) [ 1102.257255][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x401, 0x0, &(0x7f0000000180)) 21:39:29 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000026c0000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)='`', 0x1}], 0x1, &(0x7f00000002c0)=[@sndinfo={0x1c}], 0x1c}, 0x0) [ 1102.556655][T23198] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1102.611498][ T4712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1102.653415][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1102.926450][T23198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.937730][T23198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.947670][T23198] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1102.960740][T23198] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1102.969993][T23198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.983665][T23198] usb 2-1: config 0 descriptor?? [ 1103.487836][T23198] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1103.495267][T23198] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1103.519663][T23198] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1103.543525][T23198] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1103.551482][T23198] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1103.559531][T23198] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1103.567475][T23198] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1103.574880][T23198] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1103.582860][T23198] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1103.590764][T23198] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1103.598584][T23198] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1103.605988][T23198] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1103.615053][T23198] plantronics 0003:047F:FFFF.004E: No inputs registered, leaving [ 1103.625300][T23198] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1104.422648][ T8540] usb 2-1: USB disconnect, device number 10 21:39:32 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x12, @string={0x12, 0x3, "1b08032b942ef1b66014a4e547a14a00"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x2000000, 0x0) lseek(r0, 0x0, 0x3) 21:39:32 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) recvfrom$inet(r1, 0x0, 0x0, 0xc3, 0x0, 0x0) 21:39:32 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffe33, "e631e3fb7a9991f3284879c83749a83ea52a5faec28f6ec429021566deae2f7f5451d3659fbd5c6a2c335e78e0935c2ad95a7ec4d37e625152659bb1ced49ccd3049875cff6759e142e4731baf1aac810b8d982133d1f47b825face50a5a7bebe986872c442f9983f920d1077bf103688b"}, 0x79) 21:39:32 executing program 2: r0 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff8000/0x4000)=nil, 0xb3aa63dcb50326d6) 21:39:32 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002740000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1104.983530][ T4757] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1105.014115][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:32 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)='(', 0x1}], 0x1, &(0x7f0000000400)=[@sndinfo={0x1c}], 0x1c}, 0x0) 21:39:32 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000027a0000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:32 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) 21:39:32 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x14) 21:39:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000080)={0x20, 0x0, 0x3, 0xfea}, 0x8) 21:39:32 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000140)={0xc48, 0x0, 0x7f}, 0x8) [ 1105.295600][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1105.392937][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1105.406403][T23198] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1105.806154][T23198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.817263][T23198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.827316][T23198] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1105.841189][T23198] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1105.850990][T23198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.871483][T23198] usb 2-1: config 0 descriptor?? [ 1106.357196][T23198] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1106.364712][T23198] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1106.398278][T23198] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1106.405707][T23198] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1106.421821][T23198] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1106.431326][T23198] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1106.446030][T23198] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1106.453456][T23198] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1106.472335][T23198] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1106.484484][T23198] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1106.500934][T23198] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1106.511468][T23198] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1106.524523][T23198] plantronics 0003:047F:FFFF.004F: No inputs registered, leaving [ 1106.552531][T23198] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1107.303942][ T8540] usb 2-1: USB disconnect, device number 11 21:39:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x11, @string={0x11, 0x3, "1b08032b942ef1b66014a4e547a14a"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x11, &(0x7f0000000080)=0x495269d0, 0x4) 21:39:35 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000002c0), 0x98) 21:39:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000140)={0x1}, 0x1) 21:39:35 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x25, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 21:39:35 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002f00000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1107.907520][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x5}, 0x98) 21:39:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000b80)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 1107.979584][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000f80)={&(0x7f0000000340), 0xffffffffffffff0b, 0x0}, 0x0) 21:39:35 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) 21:39:35 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000300", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x18, 0x0, &(0x7f00000000c0)) [ 1108.215917][ T1181] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1108.342212][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1108.382069][ T4858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1108.576359][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.596911][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.615884][ T1181] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1108.640951][ T1181] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1108.654467][ T1181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.672898][ T1181] usb 2-1: config 0 descriptor?? [ 1109.177701][ T1181] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1109.185128][ T1181] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1109.192746][ T1181] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1109.200601][ T1181] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1109.208163][ T1181] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1109.215727][ T1181] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1109.223297][ T1181] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1109.230886][ T1181] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1109.238510][ T1181] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1109.247596][ T1181] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1109.255107][ T1181] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1109.262701][ T1181] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 1109.271074][ T1181] plantronics 0003:047F:FFFF.0050: No inputs registered, leaving [ 1109.284386][ T1181] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1110.088814][ T8603] usb 2-1: USB disconnect, device number 12 21:39:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x11, @string={0x11, 0x3, "1b08032b942ef1b66014a4e547a14a"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:38 executing program 5: linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) 21:39:38 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) 21:39:38 executing program 0: socket(0xa, 0x3, 0x5) 21:39:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x4d}]}) 21:39:38 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000500", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:38 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x0, 0x0) [ 1110.706464][ T4903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:38 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x49a801, 0x0) 21:39:38 executing program 2: clone(0x10082000, 0x0, 0x0, 0x0, 0x0) [ 1110.812348][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000c4491b"], 0x24}}, 0x0) 21:39:38 executing program 5: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/5, 0x5) modify_ldt$read_default(0x2, 0x0, 0x0) 21:39:38 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000600", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1111.025609][ T1181] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1111.123386][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1111.172531][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1111.390818][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.402226][ T1181] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.412230][ T1181] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1111.425353][ T1181] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1111.435225][ T1181] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.450935][ T1181] usb 2-1: config 0 descriptor?? [ 1111.937476][ T1181] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1111.944919][ T1181] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1111.980919][ T1181] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1111.995600][ T1181] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1112.003034][ T1181] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1112.012350][ T1181] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1112.019918][ T1181] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1112.027534][ T1181] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1112.034944][ T1181] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1112.042483][ T1181] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1112.049965][ T1181] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1112.062924][ T1181] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 1112.086079][ T1181] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 1112.109410][ T1181] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1112.841960][ T8585] usb 2-1: USB disconnect, device number 13 21:39:40 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x11, @string={0x11, 0x3, "1b08032b942ef1b66014a4e547a14a"}}, &(0x7f0000000940)={0x0, 0x22, 0x8, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x3, "7cecf43e"}, @main=@item_012={0x1, 0x0, 0xb, 'w'}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:40 executing program 2: add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 21:39:40 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x42840, 0x0) 21:39:40 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)=""/221, 0xdd}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009680)=ANY=[], 0x8e0}}, 0x0) 21:39:40 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000060, 0x0) 21:39:40 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000700", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:41 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10100, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009680)=ANY=[], 0x8e0}}, 0x0) [ 1113.454838][ T4971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x7c60d267a3417ac5}, 0x1c}}, 0x0) [ 1113.510832][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x108, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xfffffffffffffd78}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x188}}, 0x0) 21:39:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@private1, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x20) 21:39:41 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000900", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x5, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) [ 1113.753634][ T4990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1113.815597][ T8539] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1113.846382][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1114.245453][ T8539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.256425][ T8539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.267916][ T8539] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1114.280961][ T8539] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1114.290143][ T8539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.305882][ T8539] usb 2-1: config 0 descriptor?? [ 1114.790741][ T8539] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1114.798689][ T8539] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1114.815493][ T8539] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1114.822923][ T8539] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1114.845301][ T8539] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1114.852720][ T8539] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1114.860893][ T8539] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1114.868789][ T8539] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1114.877560][ T8539] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1114.884991][ T8539] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1114.892629][ T8539] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1114.900268][ T8539] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 1114.917542][ T8539] plantronics 0003:047F:FFFF.0052: No inputs registered, leaving [ 1114.935674][ T8539] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1115.496404][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.502815][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.712759][ T8585] usb 2-1: USB disconnect, device number 14 21:39:43 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x12, @string={0x12, 0x3, "1b08032b942ef1b66014a4e547a14a00"}}, 0x0, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x9c8}}}}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:43 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009680)=ANY=[], 0x8e0}}, 0x0) select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000540)={0x8}, &(0x7f0000000580)={0x0, 0x2710}) 21:39:43 executing program 5: pipe(&(0x7f0000000680)={0xffffffffffffffff}) read$eventfd(r0, 0x0, 0x0) 21:39:43 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000140)={0x0, 0x0, 0x7f}, 0x8) 21:39:43 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x88200, 0x0) 21:39:43 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000a00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1116.289777][ T5033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000100)=ANY=[], 0xec4}}, 0x0) [ 1116.333765][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) 21:39:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x800000, 0x4) 21:39:44 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r0+60000000}, 0x0) 21:39:44 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000c00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1116.505361][ T26] audit: type=1326 audit(1634852384.030:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5043 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6e96549 code=0x0 21:39:44 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 1116.679812][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1116.689648][ T8506] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1116.742668][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1117.125313][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.137364][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.149420][ T8506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1117.163077][ T8506] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1117.172970][ T8506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.189773][ T8506] usb 2-1: config 0 descriptor?? [ 1117.666290][ T8506] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1117.675174][ T8506] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1117.682593][ T8506] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1117.713808][ T8506] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1117.721891][ T8506] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1117.738998][ T8506] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1117.748615][ T8506] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1117.756622][ T8506] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1117.764026][ T8506] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1117.771955][ T8506] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1117.779758][ T8506] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1117.787624][ T8506] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 1117.795871][ T8506] plantronics 0003:047F:FFFF.0053: No inputs registered, leaving [ 1117.806301][ T8506] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1118.614362][ T8539] usb 2-1: USB disconnect, device number 15 21:39:46 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x12, @string={0x12, 0x3, "1b08032b942ef1b66014a4e547a14a00"}}, 0x0, 0x0}, &(0x7f0000000cc0)={0x18, &(0x7f0000000a00)={0x0, 0x15, 0xda, "768efbd149f87fba931ecccaf03758e0f5c65fa7771388e6d1750682a4fe93db247dc4cfc9f24897e24141028e4e9fce6d7dded070301978a29b224eb3b7510811402a4a8bfeda6efb90ad51702ffd6c8b9d689eff7ded541e673e2a6ecf83205f6fef551ea3befc628ab29e753bde0791c93dc8e88a280a26059affa79b583aee19bbac893c978e99ca24579cdc9a0824f6a2b8aba7c51af6af5d9a78db3b8b25158b777eb487c87283496e0c0c7d70695a774de029235d187d2dd02fba8bc768051bf8b5796a3241d0736ac6d005b18add64aceb7bb21887d4"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xce}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000b80)={0x20, 0x1, 0xe6, "439836f21d03c498f573c268e5cec6d5027b7b4be4328e20271c5c27cd57ab18701bb3f3880b2f8cd5036ae564e1f52ecd489a65202f338a048c925164efa9862e3be4d1b19a986de3cc3fb9e11c92c397d5e654f9d8735cada793518263579d98a95c40bfd7be8bc9ae35b014bcbb18cf11fd08978c2156d97a986c7c7a096c0388442af2e3f09521ffe6777bc39b985ccc286f40f4ed7cd7417d7099e8f6841ba8a6c09f5ed8fd0faed1fa313b218740d396b7eb7b3e18d162d91eac1a07dd4806f2facea44754881367a302ade73374516f2a94a59e98b772d0241db9fa000ac28c15c0c5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x9}}) 21:39:46 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x9}, 0x0, 0x0, 0x0) 21:39:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000200)) 21:39:46 executing program 2: setitimer(0x0, &(0x7f0000000140), &(0x7f00000000c0)) 21:39:46 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000020e0d00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:46 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x68) [ 1119.205346][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:46 executing program 5: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0xd1257614d05cb799) 21:39:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) 21:39:46 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000007280)) select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000540)={0x8}, &(0x7f0000000580)={0x0, 0x2710}) [ 1119.269044][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:46 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001240)='/sys/block/loop0', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) 21:39:46 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000e00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:47 executing program 0: msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x20, 0x0) [ 1119.535052][ T8539] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1119.612509][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1119.647713][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1119.905027][ T8539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.916379][ T8539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.928057][ T8539] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1119.941769][ T8539] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1119.951859][ T8539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.962266][ T8539] usb 2-1: config 0 descriptor?? [ 1120.436431][ T8539] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1120.443869][ T8539] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1120.466598][ T8539] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1120.474019][ T8539] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1120.499213][ T8539] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1120.514662][ T8539] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1120.529524][ T8539] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1120.547267][ T8539] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1120.559327][ T8539] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1120.571312][ T8539] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1120.583424][ T8539] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1120.598036][ T8539] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1120.608946][ T8539] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 1120.621014][ T8539] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1121.357936][ T8506] usb 2-1: USB disconnect, device number 16 21:39:49 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000100)={0x1, "8e"}) syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x12, @string={0x12, 0x3, "1b08032b942ef1b66014a4e547a14a00"}}, 0x0, 0x0}, 0x0) 21:39:49 executing program 5: clone(0x44104100, 0x0, 0x0, 0x0, 0x0) 21:39:49 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 21:39:49 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) futimesat(r0, &(0x7f0000000240)='./file0\x00', 0x0) 21:39:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2}, 0x20) 21:39:49 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000020d0e00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x92}]}) [ 1121.968239][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:49 executing program 2: msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x1008, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000001180)=""/190) [ 1122.026969][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:49 executing program 3: epoll_pwait(0xffffffffffffffff, &(0x7f0000000300)=[{}], 0x1, 0x0, &(0x7f0000000380), 0x8) 21:39:49 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000f00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:49 executing program 5: openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 21:39:49 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f000000a600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 1122.364712][ T8506] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1122.392593][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1122.446292][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1122.764881][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.776048][ T8506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.788227][ T8506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1122.802284][ T8506] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1122.812046][ T8506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.822630][ T8506] usb 2-1: config 0 descriptor?? [ 1123.306559][ T8506] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1123.313999][ T8506] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1123.338629][ T8506] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1123.354893][ T8506] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1123.369274][ T8506] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1123.378617][ T8506] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1123.390823][ T8506] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1123.398587][ T8506] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1123.406349][ T8506] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1123.414183][ T8506] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1123.421794][ T8506] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1123.438255][ T8506] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1123.452289][ T8506] plantronics 0003:047F:FFFF.0055: No inputs registered, leaving [ 1123.472051][ T8506] plantronics 0003:047F:FFFF.0055: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1124.210350][ T8506] usb 2-1: USB disconnect, device number 17 21:39:52 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140)) 21:39:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xf65}]}) 21:39:52 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002001f00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:52 executing program 0: socketpair(0x1, 0x802, 0x0, &(0x7f0000007280)={0xffffffffffffffff}) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 21:39:52 executing program 5: msgsnd(0x0, &(0x7f0000000040)={0x1, "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"}, 0xfd1, 0x0) 21:39:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000000040)=0x5f) [ 1124.813358][ T5275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00'}) 21:39:52 executing program 3: setrlimit(0x0, &(0x7f0000000000)={0x9, 0x7fff}) 21:39:52 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x410883, 0x0) 21:39:52 executing program 5: pipe(&(0x7f0000000680)={0xffffffffffffffff}) futimesat(r0, 0x0, 0x0) [ 1124.882500][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:52 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f000000a600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 21:39:52 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002002000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:52 executing program 3: msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x8, 0x0) pipe(0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) msgget(0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) 21:39:52 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x450803, 0x0) 21:39:52 executing program 2: keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000180)="91") socketpair(0x1, 0x3, 0x0, &(0x7f0000000240)) 21:39:52 executing program 5: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000040)=""/172) [ 1125.183809][ T5295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1125.252301][ T5299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:52 executing program 3: pipe(&(0x7f0000000680)) getrusage(0x0, &(0x7f0000000100)) 21:39:52 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002004800", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:52 executing program 0: add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) 21:39:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f0000000040)) 21:39:53 executing program 5: r0 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000040)) 21:39:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="c400000079eaab"], 0xc4}}, 0x0) [ 1125.563680][ T5314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1125.635465][ T5321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:53 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000080)) 21:39:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000200)={@mcast2}, 0x14) 21:39:53 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12002, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 21:39:53 executing program 5: pipe(&(0x7f0000000000)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/93) 21:39:53 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002004c00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:53 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f000000a600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 1126.043963][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1126.103777][ T5336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:39:53 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) 21:39:53 executing program 3: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x8bf246cb78307108) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 21:39:53 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) 21:39:53 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002655800", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:53 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000007280)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0xff}, 0x0, 0x0) 21:39:53 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x64000, 0x0) [ 1126.403741][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:54 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x4000000435e, 0x24) 21:39:54 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop3', 0x416102, 0x0) [ 1126.488066][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:54 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000000000003"], 0x1c) 21:39:54 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002006000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:54 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000140), r1) recvmmsg(r0, &(0x7f0000006c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002060, 0x0) 21:39:54 executing program 2: syz_genetlink_get_family_id$ipvs(0xffffffffffffffff, 0xffffffffffffffff) 21:39:54 executing program 5: msgsnd(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) 21:39:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x0, 0x0, 0x0, 0x6}, 0x10) 21:39:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x1, 0x0, 0xf}, 0x20) 21:39:54 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002586500", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:54 executing program 2: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="99", 0x1, 0xffffffffffffffff) 21:39:54 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000006c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009680)=ANY=[], 0x8e0}}, 0x0) 21:39:54 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/bpf', 0x0, 0x0) 21:39:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x4}, 0x20) 21:39:54 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002006800", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:54 executing program 2: r0 = eventfd2(0x800, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffc, 0x8) read$eventfd(r0, &(0x7f00000000c0), 0x8) 21:39:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@local}, 0x0, @in6=@private1, 0x0, 0x4}}, 0xe8) 21:39:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@empty, 0x0, 0x0, 0x0, 0xc}, 0x20) 21:39:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 21:39:55 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) 21:39:55 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002006c00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:55 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$eventfd(r0, &(0x7f0000000040), 0x24) [ 1127.740281][ T5413] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 21:39:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000100)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "54dc612b2d69e55bb735efef557dc15e08e8d3791829e7f8328bc13f47c74a30"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "15cb93f15a56f4d4197138cbbaa4719a8c0ed64140da3951f2b2817efdc5dbeb"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}]}, {0x2ac, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x430, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3c4, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d00f879e2167cc4791c7ae0e82074f2d1b669c3a02f7762ee2957fd160cc89fd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @remote}}]}, {0x6f8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x21c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4c4, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 21:39:55 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002007400", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:55 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x68) 21:39:55 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) 21:39:55 executing program 1: modify_ldt$write2(0x11, &(0x7f0000000080)={0xd0e}, 0x10) 21:39:55 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009680)=ANY=[], 0x8e0}}, 0x0) select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0xff}, 0x0, 0x0) 21:39:55 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x10083, 0x0) 21:39:55 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002007a00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) 21:39:55 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x8, &(0x7f0000000240)={[0x32]}, 0x8) 21:39:55 executing program 3: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000000000), 0xfffffffffffffc53) 21:39:56 executing program 2: msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x1008, 0x0) 21:39:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080)=0x6, 0x4) 21:39:56 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002008100", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:56 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000140), r1) recvmmsg(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)=""/221, 0xdd}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009680)=ANY=[], 0x8e0}}, 0x0) 21:39:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)=ANY=[], 0x68) 21:39:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 21:39:56 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f000000a600)=[{{0x0, 0x0, &(0x7f00000075c0)=[{&(0x7f0000007340)=""/239, 0xef}], 0x1}}], 0x1, 0x10000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) 21:39:56 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200f000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:56 executing program 2: syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x42) 21:39:56 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2012, r0, 0x0) 21:39:56 executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) 21:39:56 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002004003", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:56 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f000000a600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) 21:39:56 executing program 2: r0 = eventfd2(0x100006, 0x80801) read$eventfd(r0, &(0x7f0000000140), 0x8) 21:39:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xff41) 21:39:57 executing program 5: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100) 21:39:57 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000340", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:57 executing program 2: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0xa002, 0x0) sendfile(r0, r0, 0x0, 0x5) 21:39:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000100)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "54dc612b2d69e55bb735efef557dc15e08e8d3791829e7f8328bc13f47c74a30"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "15cb93f15a56f4d4197138cbbaa4719a8c0ed64140da3951f2b2817efdc5dbeb"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}]}, {0x2ac, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x27c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x430, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3c4, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d00f879e2167cc4791c7ae0e82074f2d1b669c3a02f7762ee2957fd160cc89fd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @remote}}]}, {0x6f8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x21c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4c4, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 21:39:57 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) 21:39:57 executing program 5: r0 = socket(0xa, 0x3, 0x5) getsockname$packet(r0, 0x0, &(0x7f0000000280)) 21:39:57 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002ffffe0", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:57 executing program 2: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0xa002, 0x0) sendfile(r0, r0, 0x0, 0x5) [ 1129.966412][ T5515] __nla_validate_parse: 20 callbacks suppressed [ 1129.966432][ T5515] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:57 executing program 2: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0xa002, 0x0) sendfile(r0, r0, 0x0, 0x5) [ 1130.057758][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080)=0x8000, 0x4) 21:39:57 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8188fd6322fd99f7}, 0xc, &(0x7f0000001200)={0x0}}, 0x0) 21:39:57 executing program 3: r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) 21:39:57 executing program 1: futimesat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) 21:39:57 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002fffff0", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:57 executing program 2: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0xa002, 0x0) sendfile(r0, r0, 0x0, 0x5) [ 1130.281352][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:57 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x4d}, {}, {}, {}]}) 21:39:57 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={0x0, 0x8e0}}, 0x0) 21:39:57 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000b80)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) [ 1130.360006][ T5533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 21:39:58 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:58 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x901341, 0x0) 21:39:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 21:39:58 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000042, 0x0) 21:39:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x5, 0xf83d}, 0x10) 21:39:58 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00), 0x532801, 0x0) [ 1130.717804][ T5548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) [ 1130.787589][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:58 executing program 5: eventfd2(0x0, 0x0) pipe(&(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0x5}, &(0x7f0000000200)={0x14}, 0x0, 0x0, 0x0) 21:39:58 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:58 executing program 0: fanotify_mark(0xffffffffffffffff, 0x1, 0x20000010, 0xffffffffffffffff, 0x0) 21:39:58 executing program 1: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:39:58 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x4d, 0x0, 0x2}, {}, {}]}) 21:39:58 executing program 2: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) [ 1131.041928][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) [ 1131.092799][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x80}}, 0x1c}}, 0x0) 21:39:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), 0x4) 21:39:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@local}, 0x14) 21:39:58 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) pipe(0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind$packet(r0, &(0x7f0000001000)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 21:39:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 21:39:58 executing program 3: clock_gettime(0x0, 0x0) clock_getres(0x0, &(0x7f00000003c0)) [ 1131.410898][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:59 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0), 0x0) 21:39:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0xe2, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xfffffffffffffd78}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x188}}, 0x0) [ 1131.487459][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:39:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getsa={0xb8, 0x12, 0x1, 0x0, 0x0, {@in6=@remote}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'sha384-arm64\x00'}}}]}, 0xb8}}, 0x0) 21:39:59 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:59 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000140), r1) recvmmsg(r0, &(0x7f0000006c40)=[{{&(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000880)=""/250, 0xfa}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009680)=ANY=[], 0x8e0}}, 0x0) 21:39:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 21:39:59 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x0) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='c', 0x1, 0xfffffffffffffffd) 21:39:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x2, 0x3}, 0x20) 21:39:59 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000000140)) 21:39:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3d}}, 0x0) 21:39:59 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f000000a600), 0x1, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 21:39:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x80}, {0x6}]}) 21:39:59 executing program 2: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 21:39:59 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:39:59 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1132.467258][ T26] audit: type=1326 audit(1634852400.001:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5642 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6e64549 code=0x0 21:40:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 21:40:00 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00'}, 0x10) 21:40:00 executing program 2: clone(0x82029100, 0x0, 0x0, 0x0, 0x0) 21:40:00 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:00 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000540)={0x8}, &(0x7f0000000580)={0x0, 0x2710}) 21:40:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) 21:40:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) 21:40:00 executing program 5: eventfd2(0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x3f}}, 0x14) 21:40:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x44, 0x0, &(0x7f00000000c0)) 21:40:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0, 0xec4}}, 0x0) 21:40:00 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:00 executing program 3: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) 21:40:00 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) futimesat(r0, 0x0, 0x0) 21:40:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) 21:40:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x2, 0x4) 21:40:00 executing program 5: r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) r1 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r2) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x6000) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r4 = shmat(r3, &(0x7f0000ff9000/0x3000)=nil, 0x5000) shmdt(r4) shmdt(r4) 21:40:00 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2000000000000201, &(0x7f0000000000)=[{}]}) 21:40:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) 21:40:00 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f00000004c0), 0x4) 21:40:00 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000007280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 21:40:01 executing program 3: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WIE_OFF(r0, 0x7010) 21:40:01 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:40:01 executing program 1: r0 = eventfd(0x0) write$eventfd(r0, &(0x7f0000000080), 0x530d096bbf82dc4b) 21:40:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8}]}, 0x24}}, 0x0) 21:40:01 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:01 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/loop', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 21:40:01 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000007280)) 21:40:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, &(0x7f0000000080)={&(0x7f0000000040)={0x1c}, 0xb4fbd0bd034d8edf}}, 0x0) 21:40:01 executing program 2: clone(0xa01000, 0x0, 0x0, 0x0, &(0x7f0000000100)=']') 21:40:01 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:01 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2102, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009680)=ANY=[], 0x8e0}}, 0x0) 21:40:01 executing program 3: getgroups(0x1, &(0x7f0000000040)=[0xee00]) 21:40:01 executing program 1: socket(0x2, 0x0, 0x82dc088) 21:40:02 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x24000825) 21:40:02 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}]}, 0x24}}, 0x0) 21:40:02 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x270a01, 0x0) 21:40:02 executing program 1: msgsnd(0x0, &(0x7f0000002080)=ANY=[], 0x1008, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/134) 21:40:02 executing program 2: openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) 21:40:02 executing program 1: setitimer(0x1, &(0x7f0000000240)={{}, {0x0, 0x2710}}, 0x0) setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0) 21:40:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) 21:40:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000040)) 21:40:02 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000300), 0x4) 21:40:02 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200000d", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:02 executing program 0: msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x1008, 0x0) r0 = msgget(0x0, 0xa6) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000240)=""/119) msgrcv(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000f300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a7600"/203], 0xcb, 0x0, 0x1000) 21:40:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x12, 0x0, &(0x7f0000000300)) 21:40:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x80}, 0x20) 21:40:02 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readlinkat(r0, &(0x7f00000006c0)='./file0\x00', &(0x7f00000000c0)=""/82, 0x52) 21:40:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x5}, {}]}) 21:40:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RVERSION(r0, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) 21:40:02 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) 21:40:02 executing program 2: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000040)) [ 1135.160263][ T5786] __nla_validate_parse: 22 callbacks suppressed [ 1135.160281][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:02 executing program 0: socketpair(0x1, 0x802, 0x0, &(0x7f0000007280)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:40:02 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x2, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009680)=ANY=[], 0x8e0}}, 0x0) 21:40:02 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff}) getdents(r0, 0x0, 0x0) [ 1135.295996][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:02 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/config', 0x0, 0x0) 21:40:02 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0) 21:40:03 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x3a}}], 0x2, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009680)=ANY=[], 0x8e0}}, 0x0) 21:40:03 executing program 5: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002580)=@bridge_getlink={0x24, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) 21:40:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 1135.580260][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:03 executing program 0: openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') dup2(r0, r1) [ 1135.659128][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:03 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002fd5d32", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1135.918865][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1135.968058][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:03 executing program 2: socket(0x1, 0x0, 0x8) 21:40:03 executing program 5: msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x8, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff}) readlinkat(r0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/82, 0x52) linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x1400) r1 = msgget(0x0, 0x82) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000140)=""/117) 21:40:03 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0xa002, 0x0) sendfile(r0, r0, 0x0, 0x1) 21:40:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000), 0x10) 21:40:03 executing program 0: modify_ldt$write2(0x11, &(0x7f0000000080)={0xd0e}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) 21:40:03 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44891) [ 1136.263200][ T5835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:03 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x418801, 0x0) 21:40:03 executing program 0: modify_ldt$write2(0x11, &(0x7f0000000080)={0xd0e}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) [ 1136.321613][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:03 executing program 2: msgrcv(0x0, 0x0, 0x0, 0x0, 0x2800) 21:40:03 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0xa002, 0x0) sendfile(r0, r0, 0x0, 0x1) 21:40:04 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0, 0xffffffcc}}, 0x0) 21:40:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000400)={0x39527f2c}, 0x4) 21:40:04 executing program 2: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000780)=""/263) 21:40:04 executing program 0: modify_ldt$write2(0x11, &(0x7f0000000080)={0xd0e}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) 21:40:04 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0xa002, 0x0) sendfile(r0, r0, 0x0, 0x1) [ 1136.637729][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1136.699533][ T5856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:04 executing program 1: pipe(&(0x7f0000000680)={0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) 21:40:04 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:04 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000007280)={0xffffffffffffffff}) write$P9_RFSYNC(r0, 0x0, 0x0) 21:40:04 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x6d7d9e579b47623a, 0x0) 21:40:04 executing program 0: modify_ldt$write2(0x11, &(0x7f0000000080)={0xd0e}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) 21:40:04 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0xa002, 0x0) sendfile(r0, r0, 0x0, 0x1) 21:40:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 21:40:04 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x80, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) 21:40:04 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:04 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x557101, 0x0) 21:40:04 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 21:40:04 executing program 3: fanotify_mark(0xffffffffffffffff, 0xda95db663b09610c, 0x0, 0xffffffffffffffff, 0x0) 21:40:04 executing program 1: fanotify_mark(0xffffffffffffffff, 0x0, 0xa896722796080579, 0xffffffffffffffff, 0x0) 21:40:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @private}}, 0x14) 21:40:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xff3f, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="0400"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}}, 0x0) 21:40:05 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000040)=""/172) 21:40:05 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:05 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 21:40:05 executing program 1: r0 = socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0) 21:40:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000001000)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 21:40:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 21:40:05 executing program 0: symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 21:40:05 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000058", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=@getsa={0xb8, 0x12, 0x1, 0x0, 0x0, {@in6=@remote}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'sha384-arm64\x00'}}}]}, 0xb8}}, 0x0) 21:40:05 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000007f40)=[{&(0x7f0000007d40)=""/94, 0x5e}], 0x1}}], 0x1, 0x2, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000009fc0)={0x0, 0x0, &(0x7f0000009f80)={&(0x7f0000009680)=ANY=[], 0x8e0}}, 0x0) 21:40:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'wg0\x00'}]}, 0x30}}, 0x0) 21:40:05 executing program 2: clone(0x85200, 0x0, 0x0, 0x0, 0x0) 21:40:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x80045440, 0x0) 21:40:05 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 21:40:05 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000009c0)={&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}}, 0x80, 0x0}, 0x10042) 21:40:05 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) 21:40:05 executing program 5: setgroups(0x1, &(0x7f0000000600)=[0xffffffffffffffff]) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) 21:40:05 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:05 executing program 3: waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000600)) 21:40:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x30}, 0x0) 21:40:06 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, &(0x7f0000000080)="8f194643d2cc21494c6a4104c165a2243d95b890817bfbb9a7f4b22a30336dcf6bdf5ad64cb7e129fda5cd3a7972135bb8092ec69274dcc282b8cdb4f138526b8808e9c23a849409ecaad46bd34265046dd3bc3ab26fc3de222fba172d60f3971e35a36cbd6a8fdaed1ad0ca3fb920e10b56225cf5be53ac93762f4e486fe0a2a1e5c330c671a46fc85ea158cd0cd0b4e368a75b3306c6b7ea97519f4488d0afb5b223036ef7bc4e05", 0xa9, 0x0, &(0x7f0000001080)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 21:40:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4, @empty}, 0x20000010, 0x0}}], 0x1, 0x0) 21:40:06 executing program 5: r0 = socket(0x11, 0x3, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000080)=0xc) 21:40:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x20}, 0x0) 21:40:06 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/user\x00') 21:40:06 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b06b1827"}, 0x0, 0x1, @planes=0x0}) 21:40:06 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/pid_for_children\x00') 21:40:06 executing program 3: setresgid(0x0, 0x0, 0x0) 21:40:06 executing program 5: clock_gettime(0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000100, &(0x7f0000006580)={0x0, 0x3938700}) fork() 21:40:06 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) 21:40:06 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002500)={0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) 21:40:06 executing program 3: mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x0, 0x4020831, 0xffffffffffffffff, 0x82000000) 21:40:06 executing program 1: syz_io_uring_setup(0x386d, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), 0x0) 21:40:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d114b655e6391468f72e44a260f82e8a95ef0763c60cb88bfc92b1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863da5a64853349fd086c22e3fc56d2b0cae5170871c145045174", 0x7c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 21:40:06 executing program 0: fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x0) 21:40:06 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x120c1) 21:40:06 executing program 3: syz_open_dev$usbmon(&(0x7f0000000100), 0x6, 0x200) 21:40:06 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:06 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x7, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x0, 0x10, r0, 0x82000000) 21:40:07 executing program 0: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001700)={0x0, 0x989680}) 21:40:07 executing program 2: syz_io_uring_setup(0x18a1, &(0x7f0000003e00)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 21:40:07 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40084146, &(0x7f0000000440)) 21:40:07 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000080)={0x0, "897465e0f1909be7007f195e13e6c4b0c6e8c5ff43dba2e6c3a34cd123687af4c46636ae7d74b8894b41c8ef2bd06929aa4e0a2578f6bf49816c3dc9f32e8a64", {0x7fff}}) 21:40:07 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002ffffa8", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:07 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/cgroup\x00') 21:40:09 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100007d76bc0835120a0018b0001600010902240001000000000904"], 0x0) 21:40:09 executing program 1: setrlimit(0xd, &(0x7f0000000040)) 21:40:09 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f40)=@bpf_tracing={0x1a, 0x3, &(0x7f0000001b80)=@framed, &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:40:09 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f000000d340)={&(0x7f0000004e00)=@proc, 0xc, 0x0}, 0x0) 21:40:09 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002ffffff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:09 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x401c5820, 0x0) 21:40:10 executing program 3: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) [ 1142.410695][ T6044] __nla_validate_parse: 20 callbacks suppressed [ 1142.410715][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:10 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21:40:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0) 21:40:10 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003980)='ns/ipc\x00') [ 1142.564988][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:10 executing program 3: r0 = epoll_create1(0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 21:40:10 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002ffffff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1142.773118][ T8539] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1142.862170][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1142.886584][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1143.073026][ T8539] usb 6-1: Using ep0 maxpacket: 8 [ 1143.207641][ T8539] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.293148][ T8539] usb 6-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice=b0.18 [ 1143.302274][ T8539] usb 6-1: New USB device strings: Mfr=0, Product=22, SerialNumber=0 [ 1143.316287][ T8539] usb 6-1: Product: syz [ 1143.325977][ T8539] usb 6-1: config 0 descriptor?? [ 1143.594794][ T8539] snd-usb-audio: probe of 6-1:0.0 failed with error -2 [ 1143.604724][ T8539] usb 6-1: USB disconnect, device number 75 [ 1144.342945][ T8585] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1144.592972][ T8585] usb 6-1: Using ep0 maxpacket: 8 [ 1144.713371][ T8585] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.803107][ T8585] usb 6-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice=b0.18 [ 1144.812174][ T8585] usb 6-1: New USB device strings: Mfr=0, Product=22, SerialNumber=0 [ 1144.821555][ T8585] usb 6-1: Product: syz [ 1144.828092][ T8585] usb 6-1: config 0 descriptor?? 21:40:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) 21:40:12 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x401c5820, &(0x7f0000000440)) 21:40:12 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x5450, 0x0) 21:40:12 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f000000d340)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d280)=[@rights={{0x10}}], 0x10}, 0x0) 21:40:12 executing program 3: syz_io_uring_setup(0x386d, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 21:40:12 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000210325d", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1145.113490][ T8585] snd-usb-audio: probe of 6-1:0.0 failed with error -2 [ 1145.146812][ T8585] usb 6-1: USB disconnect, device number 76 [ 1145.233221][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:12 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 21:40:12 executing program 3: sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) 21:40:12 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f000000d340)={0x0, 0x0, &(0x7f000000b000)=[{0x0}, {0x0}], 0x2, &(0x7f000000d280)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x0) 21:40:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xf70f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x3, @pix_mp}) 21:40:12 executing program 5: getresuid(&(0x7f000000b040), &(0x7f000000b080), 0x0) [ 1145.333381][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:13 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000288a8ff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:13 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/ipc\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0xfffffffd}) 21:40:13 executing program 5: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000002f40)) 21:40:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[], 0x1e4}}, 0x0) 21:40:13 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0xd2800) 21:40:13 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000002580), 0x400, 0x0) [ 1145.666969][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1145.747926][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:13 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, 0x0, 0x0) 21:40:13 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) gettid() gettid() get_robust_list(0x0, &(0x7f0000000180)=&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) read(r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000200)=0xc) process_vm_writev(r2, &(0x7f0000002680)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000680)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000500)=""/5, 0x5}], 0x8, &(0x7f0000003ac0)=[{&(0x7f0000003700)=""/160, 0xa0}, {&(0x7f00000037c0)=""/144, 0x90}, {&(0x7f0000003880)=""/1, 0x1}, {&(0x7f00000038c0)=""/153, 0x99}, {0x0}, {&(0x7f0000003a80)=""/21, 0x15}], 0x6, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) 21:40:13 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40049409, &(0x7f0000000440)) 21:40:13 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x2, &(0x7f0000000440)) 21:40:13 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/zoneinfo\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000000)=""/133, 0x85) 21:40:13 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200e0ff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:13 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x94f280, 0x0) 21:40:13 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000d80), 0x24000, 0x0) [ 1146.136983][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:13 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x4143, 0x0) 21:40:13 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40186366, 0x0) [ 1146.228038][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:13 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200f0ff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:13 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0x10, &(0x7f0000000380)={0x0}}, 0x0) 21:40:13 executing program 1: sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 21:40:14 executing program 0: socketpair(0x18, 0x0, 0x6, &(0x7f0000000040)) 21:40:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x3, 0x4) 21:40:14 executing program 3: syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x4, 0x86040) 21:40:14 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f000000d340)={0x0, 0x0, 0x0, 0x0, &(0x7f000000d280)=[@cred={{0x1c}}], 0x20}, 0x0) 21:40:14 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000027fffff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:14 executing program 5: syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x214940) 21:40:14 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket(0x11, 0x800000003, 0x0) dup2(r1, r0) 21:40:14 executing program 2: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002f00), 0x0, 0x0) 21:40:14 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40084149, 0x0) 21:40:14 executing program 5: clock_gettime(0x0, &(0x7f0000004d40)) 21:40:14 executing program 1: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) 21:40:14 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000029effff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:14 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket(0x11, 0x800000003, 0x0) dup2(r1, r0) 21:40:14 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket(0x11, 0x800000003, 0x0) dup2(r1, r0) 21:40:14 executing program 3: mq_unlink(&(0x7f0000000040)='\x00') 21:40:14 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004111, 0x0) 21:40:14 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)=0x41) getegid() 21:40:14 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket(0x11, 0x800000003, 0x0) dup2(r1, r0) 21:40:14 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002f0ffff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:14 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x4147, 0x0) 21:40:14 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket(0x11, 0x800000003, 0x0) dup2(r1, r0) 21:40:15 executing program 5: getresuid(&(0x7f000000b040), 0x0, 0x0) [ 1147.419316][ T6215] __nla_validate_parse: 6 callbacks suppressed [ 1147.419336][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 1147.507181][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:15 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40084146, 0x0) 21:40:15 executing program 3: socketpair(0x3, 0x0, 0x0, &(0x7f0000000200)) 21:40:15 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "32855ea8"}}) 21:40:15 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:15 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) [ 1147.792205][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1147.860738][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:15 executing program 1: fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) 21:40:15 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x82000000) 21:40:15 executing program 3: syz_open_dev$usbmon(&(0x7f0000000240), 0x5, 0x0) 21:40:15 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x40) 21:40:15 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:15 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x5452, &(0x7f0000000440)) [ 1148.371263][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1148.431764][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:16 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000a00)={{0x9}, 'port0\x00'}) 21:40:16 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x2, 0x0) 21:40:16 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, 0x0, 0x24000, 0x0) 21:40:16 executing program 2: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002f00), 0x240a00, 0x0) 21:40:16 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002ffffff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:16 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x801c581f, 0x0) 21:40:16 executing program 3: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0), 0x0) clock_gettime(0x0, &(0x7f0000004d40)) socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) geteuid() fork() 21:40:16 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002080)={'ip_vti0\x00'}) 21:40:16 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:40:16 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r0 = fork() syz_open_procfs$namespace(r0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1148.772384][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1148.812043][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:16 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:16 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f000000d340)={&(0x7f0000004e00)=@proc, 0xc, 0x0, 0x0, &(0x7f000000d280)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x0) 21:40:16 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x40200) 21:40:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8fa0381a"}, 0x0, 0x0, @fd}) 21:40:16 executing program 3: syz_io_uring_setup(0x18a1, &(0x7f0000003e00)={0x0, 0x0, 0x2, 0x0, 0xbc}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003e80), &(0x7f0000003ec0)) [ 1149.082622][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1149.136150][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b362b45c"}, 0x0, 0x0, @userptr}) 21:40:16 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) 21:40:16 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x5421, &(0x7f0000000440)) 21:40:16 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000d80), 0x24000, 0x0) 21:40:16 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:16 executing program 3: syz_open_procfs$namespace(0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) syz_io_uring_setup(0x386d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3d6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:40:17 executing program 2: set_mempolicy(0x0, &(0x7f0000000080), 0x0) 21:40:17 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc0045878, 0x0) 21:40:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) 21:40:17 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/cgroup\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) syz_io_uring_setup(0x386d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x3d6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) 21:40:17 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:17 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40044160, 0x0) 21:40:17 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) geteuid() getegid() read$FUSE(0xffffffffffffffff, &(0x7f000000b240)={0x2020}, 0x2020) fork() 21:40:17 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc0844123, 0x0) 21:40:17 executing program 5: syz_emit_ethernet(0x67, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x0, 0x45, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "f1ab88afbc77fcf6dbbe3b41ada7bc54051fa42744855e73f2d5ebedc6287dd7cdb5817f5b38f2cf4a1d046106b62a6725b80269f0be42131e"}}}}}}, 0x0) 21:40:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 21:40:17 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:17 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc100410a, 0x0) 21:40:17 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1a) 21:40:17 executing program 1: mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x82000000) 21:40:17 executing program 5: madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x16) 21:40:17 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000040)=""/42, 0x2a) 21:40:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 21:40:17 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:17 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/222, 0xde}], 0x1}, 0x41) pidfd_open(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) recvmsg$can_bcm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000000780)=""/23, 0x17}, {&(0x7f00000007c0)=""/50, 0x32}, {&(0x7f0000000800)}], 0x8, &(0x7f00000008c0)=""/253, 0xfd}, 0x10040) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x49f) socketpair(0xb, 0x1, 0x80, &(0x7f0000000a80)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000c80), 0x480c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, 0xee01}}, './file0\x00'}) recvmsg$unix(r0, &(0x7f0000001100)={&(0x7f0000000d00), 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d80)=""/189, 0xbd}, {&(0x7f0000000e40)=""/178, 0xb2}, {&(0x7f0000000f00)=""/14, 0xe}, {&(0x7f0000000f40)=""/78, 0x4e}], 0x4, &(0x7f0000001000)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x60) 21:40:17 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc0189436, &(0x7f0000000440)) 21:40:17 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc0884123, 0x0) 21:40:18 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f00000005c0)) 21:40:18 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1ff, 0x4000) 21:40:18 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:18 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 21:40:18 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/cgroup\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 21:40:18 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x3, "87c33d1e101072465f2a725a2db6a19bb6f6ab3f68f356f1ade8c140df7bc6cf7877cbc5cb77d014f0ae5c8615f7dbe0ce01802ae9dc0a6d98041c0826c4626c"}) 21:40:18 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:18 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x4020940d, &(0x7f0000000440)) [ 1150.832552][ T8539] usb 2-1: new high-speed USB device number 18 using dummy_hcd 21:40:18 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) [ 1151.432994][ T8539] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1151.442415][ T8539] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.450420][ T8539] usb 2-1: Product: syz [ 1151.456107][ T8539] usb 2-1: Manufacturer: syz [ 1151.460704][ T8539] usb 2-1: SerialNumber: syz [ 1151.503510][ T8539] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1152.092359][ T8539] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1152.311951][ T1181] usb 2-1: USB disconnect, device number 18 [ 1153.182260][ T8539] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1153.189377][ T8539] ath9k_htc: Failed to initialize the device [ 1153.196025][ T1181] usb 2-1: ath9k_htc: USB layer deinitialized 21:40:21 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000440)={0x0, [0x200]}) 21:40:21 executing program 3: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:40:21 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 21:40:21 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:21 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7451}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='attr/fscreate\x00') madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) gettid() gettid() get_robust_list(0x0, &(0x7f0000000180)=&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) read(r1, &(0x7f0000001680)=""/4096, 0x1000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000200)=0xc) process_vm_writev(r5, &(0x7f0000002680)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000680)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000500)=""/5, 0x5}], 0x8, &(0x7f0000003ac0)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/160, 0xa0}, {&(0x7f00000037c0)=""/144, 0x90}, {&(0x7f0000003880)=""/1, 0x1}, {&(0x7f00000038c0)=""/153, 0x99}, {&(0x7f0000003980)=""/244, 0xf4}, {&(0x7f0000003a80)=""/21, 0x15}], 0x7, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) getpgrp(r3) 21:40:21 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000100)) [ 1153.572365][ T1181] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1153.597843][ T6431] __nla_validate_parse: 12 callbacks suppressed [ 1153.597861][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:21 executing program 3: syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x86040) 21:40:21 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40184152, 0x0) 21:40:21 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002f00), 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) [ 1153.698659][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 21:40:21 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:21 executing program 5: socket$netlink(0x10, 0x3, 0x1a) 21:40:21 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x4161, 0x0) 21:40:21 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x38414262}) 21:40:21 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc0189436, 0x0) [ 1154.074539][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1154.125560][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:21 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40084146, &(0x7f0000000440)={0x0, [0x200]}) 21:40:22 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 21:40:22 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:22 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003980)='ns/ipc\x00') fsetxattr$system_posix_acl(r0, &(0x7f00000039c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 21:40:22 executing program 3: syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x0, 0x4020831, 0xffffffffffffffff, 0x82000000) 21:40:22 executing program 5: mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 21:40:22 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x4144, 0x0) [ 1154.734164][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:22 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x4140, 0x0) 21:40:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) [ 1154.780737][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:22 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) 21:40:22 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40044103, 0x0) 21:40:22 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "632b8333"}, 0x0, 0x0, @planes=0x0}) 21:40:22 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:22 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 21:40:22 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x4020940d, 0x0) 21:40:22 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc0984124, 0x0) 21:40:22 executing program 2: socketpair(0x15, 0x0, 0x0, &(0x7f0000002080)) [ 1155.045158][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:22 executing program 1: setrlimit(0xd, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) [ 1155.131872][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:22 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:22 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000180)={0x0, [[0x9], [0x5a], [0x9]], '\x00', [{0xff, 0x8001, 0x1}]}) 21:40:22 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40044102, 0x0) 21:40:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="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", 0x130}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 21:40:22 executing program 5: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, &(0x7f0000000080)) getresuid(&(0x7f000000b040), 0x0, 0x0) 21:40:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40805) [ 1155.431898][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:23 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000180)={0x0, [[0x9], [0x5a], [0x9]], '\x00', [{0x0, 0x0, 0x1}]}) [ 1155.484487][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:23 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7451}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) gettid() gettid() get_robust_list(0x0, &(0x7f0000000180)=&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) read(r1, &(0x7f0000001680)=""/4096, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) getpgrp(r3) 21:40:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002100)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80002005}, 0xc, &(0x7f00000020c0)={&(0x7f0000000280)=@newtfilter={0xec4, 0x2c, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_rsvp6={{0xa}, {0xe54, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_RSVP_ACT={0xddc, 0x6, [@m_csum={0x19c, 0x0, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0xe1, 0x6, "6aacfb7f4d2c26b8b4c1a0b297b88f6f9b905be5f49b6335c8df1fc9ea67f0b453a91049dbf91c25245d58c6a63ba91701d8c20d1997094e6b214207617e5498be649748328cef9a9d36dc6f402cf58b6056e099a1b51ea6942899ae7c4594c8a338d5e9f199a8012b89c07cc1725bdf2e9f575cd5e75c608766d5ea052b7bd1fa042bad000bc55a9abee24ad975ab59ef8c357775bb58703c5a32345284391cb7bef743c17ed10410723bdd1c5171541a99c1b1b54bc751abc7ca8583cdfa6ab25f8ab0944dec6ddf3b93cf670a74e684da0cd9ee755daf6db6113052"}, {0xc}, {0xc}}}, @m_police={0xc3c, 0x0, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xec4}}, 0x0) 21:40:23 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:23 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) 21:40:23 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x5451, 0x0) 21:40:23 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x80086601, 0x0) 21:40:23 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, 0x0) 21:40:23 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:25 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) 21:40:25 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 21:40:25 executing program 1: gettid() syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') 21:40:25 executing program 2: socketpair(0x21, 0x0, 0x0, &(0x7f0000000080)) 21:40:25 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:25 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) 21:40:26 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f000000d340)={&(0x7f0000004e00)=@proc, 0xc, &(0x7f000000b000)=[{0x0}, {0x0}], 0x2, &(0x7f000000d280)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}, 0x0) 21:40:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 21:40:26 executing program 3: syz_open_dev$sndpcmc(0x0, 0x0, 0x0) getrusage(0x1, &(0x7f0000000280)) 21:40:26 executing program 1: socketpair(0x3, 0x0, 0x3b9, &(0x7f0000000000)) 21:40:26 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)) 21:40:26 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x41) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1158.756745][ T6607] __nla_validate_parse: 6 callbacks suppressed [ 1158.756762][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:26 executing program 3: syz_io_uring_setup(0x18a1, &(0x7f0000003e00)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003e80), &(0x7f0000003ec0)) 21:40:26 executing program 1: write$midi(0xffffffffffffffff, &(0x7f0000000000)='=', 0x1) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 21:40:26 executing program 5: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socketpair(0xb, 0x0, 0x0, &(0x7f0000000a80)) [ 1158.855062][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:26 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x0) 21:40:26 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:26 executing program 1: syz_io_uring_setup(0x386d, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000100)) 21:40:26 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 21:40:26 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) pidfd_open(0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 1159.170194][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:26 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1159.220078][ T6635] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1159.241846][ T8585] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1159.255934][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:26 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1159.312595][ T1181] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1159.343042][ T6646] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 21:40:26 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x6, 0x2) [ 1159.418246][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1159.459193][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1159.561867][ T8540] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1159.851809][ T1181] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1159.860950][ T1181] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.869831][ T1181] usb 6-1: Product: syz [ 1159.874332][ T1181] usb 6-1: Manufacturer: syz [ 1159.879042][ T1181] usb 6-1: SerialNumber: syz [ 1159.882494][ T8585] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1159.893629][ T8585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.903110][ T8585] usb 3-1: Product: syz [ 1159.913253][ T8585] usb 3-1: Manufacturer: syz [ 1159.924227][ T8585] usb 3-1: SerialNumber: syz [ 1159.934037][ T1181] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1159.984876][ T8585] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1160.081893][ T8540] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1160.090970][ T8540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.101891][ T8540] usb 1-1: Product: syz [ 1160.106076][ T8540] usb 1-1: Manufacturer: syz [ 1160.110684][ T8540] usb 1-1: SerialNumber: syz [ 1160.163384][ T8540] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1160.532064][ T8506] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1160.661820][ T8585] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1160.741684][ T8540] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1160.748990][T23198] usb 6-1: USB disconnect, device number 77 [ 1160.887587][ T8465] usb 3-1: USB disconnect, device number 25 [ 1160.952127][ T8603] usb 1-1: USB disconnect, device number 23 21:40:28 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r1 = socket(0x11, 0x800000003, 0x0) dup2(r1, r0) 21:40:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 21:40:28 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:28 executing program 1: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7451}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) gettid() gettid() get_robust_list(0x0, 0x0, &(0x7f00000001c0)) read(r1, &(0x7f0000001680)=""/4096, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000200)=0xc) process_vm_writev(r4, &(0x7f0000002680)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f0000000480)=""/117, 0x75}, {0x0}, {0x0}, {&(0x7f0000000500)=""/5, 0x5}], 0x8, &(0x7f0000003ac0)=[{&(0x7f0000002700)=""/4096, 0x1000}, {0x0}, {&(0x7f00000037c0)=""/144, 0x90}, {&(0x7f0000003880)=""/1, 0x1}, {&(0x7f00000038c0)=""/153, 0x99}, {&(0x7f0000003980)=""/244, 0xf4}, {&(0x7f0000003a80)=""/21, 0x15}], 0x7, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) getpgrp(r3) 21:40:28 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') [ 1161.506611][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:29 executing program 5: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x2, &(0x7f0000000140)) [ 1161.567591][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1161.574584][ T8506] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1161.598043][ T8506] ath9k_htc: Failed to initialize the device [ 1161.624188][T23198] usb 6-1: ath9k_htc: USB layer deinitialized 21:40:29 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r1 = socket(0x11, 0x800000003, 0x0) dup2(r1, r0) 21:40:29 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r1 = socket(0x11, 0x800000003, 0x0) dup2(r1, r0) [ 1161.741508][ T8585] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1161.748518][ T8585] ath9k_htc: Failed to initialize the device [ 1161.785154][ T8465] usb 3-1: ath9k_htc: USB layer deinitialized [ 1161.812149][ T8540] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1161.819715][ T8540] ath9k_htc: Failed to initialize the device [ 1161.855616][ T8603] usb 1-1: ath9k_htc: USB layer deinitialized 21:40:29 executing program 5: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 21:40:29 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:29 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f40)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:40:29 executing program 0: syz_io_uring_setup(0x2ecf, &(0x7f0000000000)={0x0, 0x86ba, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 21:40:29 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r1 = socket(0x11, 0x800000003, 0x0) dup2(r1, r0) [ 1162.271539][ T8603] usb 1-1: new high-speed USB device number 24 using dummy_hcd 21:40:30 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) 21:40:30 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:30 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x80184132, 0x0) 21:40:30 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r0, 0x0) 21:40:30 executing program 5: socket$nl_rdma(0x10, 0x3, 0x14) openat$fuse(0xffffffffffffff9c, &(0x7f000000d380), 0x2, 0x0) 21:40:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, 0x0) 21:40:30 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:30 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x80184132, &(0x7f0000000440)) 21:40:30 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x4142, 0x0) 21:40:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc, 0x0}, 0x0) 21:40:30 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 21:40:30 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x80044100, &(0x7f0000000440)) 21:40:30 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:30 executing program 1: syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x136d275f514d4eaf) 21:40:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000d94dcd"], 0x24}}, 0x0) 21:40:30 executing program 2: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='attr/fscreate\x00') madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) get_robust_list(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0x0) 21:40:30 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000a00)={{}, 'port0\x00'}) 21:40:30 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:30 executing program 0: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004d80)) 21:40:30 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40044103, &(0x7f0000000440)) 21:40:30 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x200}) 21:40:31 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:31 executing program 3: r0 = fsopen(&(0x7f0000000000)='hpfs\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 21:40:31 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)) 21:40:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x504}, 0x40) 21:40:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x1e4}}, 0x0) 21:40:31 executing program 0: clock_gettime(0x0, &(0x7f0000004d40)) getresuid(&(0x7f000000b040), &(0x7f000000b080), &(0x7f000000b0c0)) [ 1163.776571][ T6802] __nla_validate_parse: 11 callbacks suppressed [ 1163.776592][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:31 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x5460, 0x0) 21:40:31 executing program 2: syz_open_dev$sndmidi(&(0x7f0000000040), 0xffffffffffffffc1, 0x40200) 21:40:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) 21:40:31 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) 21:40:31 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x8, 0x80000, 0x0, &(0x7f00000005c0)) 21:40:31 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:31 executing program 2: syz_open_procfs$namespace(0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) syz_io_uring_setup(0x386d, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x2, 0x3d6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:40:31 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x5452, 0x0) [ 1164.126640][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:31 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20700) 21:40:31 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000180)={0x0, [[0x9], [0x5a], [0x9]], '\x00', [{0xff, 0x8001, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 21:40:31 executing program 1: r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000300)) [ 1164.219550][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:31 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc2604111, &(0x7f0000000440)) 21:40:31 executing program 2: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x1) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000060, &(0x7f0000004d80)) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000004dc0)={0xffffffffffffffff, 0x3ff}) socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000100, 0x0) getresuid(&(0x7f000000b040), &(0x7f000000b080), 0x0) geteuid() fork() 21:40:31 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:32 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x806c4120, &(0x7f0000000440)) 21:40:32 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f000000d340)={0x0, 0x0, 0x0}, 0x0) 21:40:32 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, 0x0) [ 1164.569405][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:32 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) pidfd_open(0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x480c0, 0x0) [ 1164.633518][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:32 executing program 2: syz_io_uring_setup(0x2ecf, &(0x7f0000000000)={0x0, 0x86ba}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x19fd, &(0x7f0000000100), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 21:40:32 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:32 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9b3d01", 0x4, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "b2e7"}, {0x4888}}}}}}}, 0x0) 21:40:32 executing program 0: sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1a) 21:40:32 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/net\x00') [ 1164.856065][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:32 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004111, &(0x7f0000000440)) [ 1164.929989][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:32 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9b3d01", 0x4, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "b2e7"}, {0x4888}}}}}}}, 0x0) 21:40:32 executing program 0: fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1) [ 1165.051371][ T8603] usb 4-1: new high-speed USB device number 27 using dummy_hcd 21:40:32 executing program 1: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) clock_gettime(0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fork() 21:40:32 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:32 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x181501) [ 1165.271813][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1165.345928][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1165.651398][ T8603] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1165.661567][ T8603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.669663][ T8603] usb 4-1: Product: syz [ 1165.676057][ T8603] usb 4-1: Manufacturer: syz [ 1165.680777][ T8603] usb 4-1: SerialNumber: syz [ 1165.722892][ T8603] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1166.361397][ T8603] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1166.567976][T23197] usb 4-1: USB disconnect, device number 27 [ 1167.411123][ T8603] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1167.418122][ T8603] ath9k_htc: Failed to initialize the device [ 1167.425617][T23197] usb 4-1: ath9k_htc: USB layer deinitialized 21:40:35 executing program 3: socketpair(0x8, 0x80000, 0x0, &(0x7f00000005c0)) 21:40:35 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9b3d01", 0x4, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "b2e7"}, {0x4888}}}}}}}, 0x0) 21:40:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 21:40:35 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x208400) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) 21:40:35 executing program 1: sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1a) 21:40:35 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1167.781170][T23197] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1167.825231][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:35 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) 21:40:35 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x4122, 0x0) 21:40:35 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9b3d01", 0x4, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "b2e7"}, {0x4888}}}}}}}, 0x0) 21:40:35 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:35 executing program 1: syz_open_procfs$namespace(0x0, 0x0) syz_io_uring_setup(0x2ecf, &(0x7f0000000000)={0x0, 0x86ba, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x19fd, &(0x7f0000000100), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 21:40:35 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 21:40:35 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0xc0000) 21:40:35 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40044160, &(0x7f0000000440)) 21:40:35 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) 21:40:35 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc0884123, &(0x7f0000000440)) 21:40:35 executing program 3: getresuid(&(0x7f000000b040), &(0x7f000000b080), &(0x7f000000b0c0)) 21:40:35 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200f0ff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:35 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) 21:40:35 executing program 2: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) 21:40:36 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) 21:40:36 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x141000) 21:40:36 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x4112, 0x0) 21:40:36 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000200", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:36 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 21:40:36 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x0) 21:40:36 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) 21:40:36 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc06c4124, &(0x7f0000000440)) 21:40:36 executing program 3: ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000004dc0)) getegid() fork() [ 1168.787193][ T6978] __nla_validate_parse: 6 callbacks suppressed [ 1168.787212][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:36 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x4148, 0x0) 21:40:36 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000300", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:36 executing program 0: syz_io_uring_setup(0x2ecf, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x19fd, &(0x7f0000000100), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 21:40:36 executing program 5: syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9b3d01", 0x46, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "b2e7"}, {0x4888}}}}}}}, 0x0) 21:40:36 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) [ 1169.086521][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:36 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40084149, &(0x7f0000000440)) [ 1169.148841][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) 21:40:36 executing program 1: open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 21:40:36 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000400", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:36 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002f00), 0x240a00, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 21:40:36 executing program 5: syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9b3d01", 0x46, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "b2e7"}, {0x4888}}}}}}}, 0x0) 21:40:37 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) 21:40:37 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000003900)={{}, {}, [{}], {}, [{0x8, 0x0, 0xee01}]}, 0x34, 0x0) 21:40:37 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f000000d340)={&(0x7f0000004e00)=@proc, 0xc, &(0x7f000000b000)=[{0x0}, {0x0}], 0x2}, 0x0) [ 1169.505599][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:37 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) setresuid(0x0, 0x0, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) sync() getresgid(0x0, 0x0, 0x0) clock_getres(0x0, 0x0) 21:40:37 executing program 5: syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9b3d01", 0x46, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "b2e7"}, {0x4888}}}}}}}, 0x0) [ 1169.604770][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:37 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40084149, &(0x7f0000000440)={0x0, [0x200]}) 21:40:37 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000500", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:37 executing program 0: syz_io_uring_setup(0x2ecf, &(0x7f0000000000)={0x0, 0x86ba, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), 0x0) 21:40:37 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000440)={0x0, [0x200], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fffffff}]}) 21:40:37 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x1, @pix_mp}}) 21:40:37 executing program 5: syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9b3d01", 0x46, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {}, {0x4888}}}}}}}, 0x0) [ 1169.913806][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:37 executing program 1: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0)=0x2, 0x0) clock_gettime(0x0, &(0x7f0000004d40)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/58, 0x3a}], 0x1, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f00000002c0), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000003c0)=""/246, 0xf6}], 0x2}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/116, 0x74}, {&(0x7f0000001680)=""/30, 0x1e}, {&(0x7f00000016c0)=""/164, 0xa4}, {&(0x7f0000001780)=""/151, 0x97}, {&(0x7f0000001840)=""/140, 0x8c}], 0x7, &(0x7f0000001980)}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001a40)=""/245, 0xf5}, {&(0x7f0000001b40)=""/171, 0xab}, {&(0x7f0000001c00)=""/67, 0x43}, {&(0x7f0000001c80)=""/194, 0xc2}, {&(0x7f0000001d80)=""/197, 0xc5}, {&(0x7f0000001e80)=""/185, 0xb9}], 0x6, &(0x7f0000001fc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000002040)=@abs, 0x6e, &(0x7f0000002280)=[{0x0}, {&(0x7f0000002180)=""/205, 0xcd}], 0x2, &(0x7f00000022c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000002340), 0x6e, &(0x7f0000004680)=[{0x0}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/205, 0xcd}, {&(0x7f0000003540)=""/196, 0xc4}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/2, 0x2}], 0x6}}], 0x6, 0x40000060, &(0x7f0000004d80)={r0, r1+60000000}) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000004dc0)={0xffffffffffffffff, 0x3ff}) socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg$unix(r4, &(0x7f00000064c0)=[{{&(0x7f0000005ac0), 0x6e, &(0x7f0000005bc0)=[{&(0x7f0000005b40)=""/57, 0x39}, {&(0x7f0000005b80)=""/54, 0x36}], 0x2, &(0x7f0000005c00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000005d40), 0x6e, &(0x7f0000006280)=[{&(0x7f0000005dc0)=""/226, 0xe2}, {&(0x7f0000005ec0)=""/81, 0x51}, {&(0x7f0000005f40)=""/154, 0x9a}, {&(0x7f0000006000)=""/119, 0x77}, {&(0x7f0000006080)=""/20, 0x14}, {&(0x7f00000060c0)=""/183, 0xb7}, {&(0x7f0000006180)=""/193, 0xc1}], 0x7}}, {{&(0x7f0000006300)=@abs, 0x6e, &(0x7f0000006480)=[{&(0x7f0000006380)=""/237, 0xed}], 0x1}}], 0x3, 0x40000100, &(0x7f0000006580)={0x0, 0x3938700}) geteuid() read$FUSE(r2, &(0x7f000000b240)={0x2020}, 0x2020) fork() 21:40:37 executing program 0: syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') [ 1169.994131][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:37 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40044145, 0x0) 21:40:37 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000600", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1170.121803][ T7045] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 21:40:37 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x800) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x24004801) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000003c0)='nl80211\x00', 0x0, 0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20001854}, 0x6000000) socket$netlink(0x10, 0x3, 0x1a) [ 1170.222213][ T7053] sctp: [Deprecated]: syz-executor.2 (pid 7053) Use of int in max_burst socket option deprecated. [ 1170.222213][ T7053] Use struct sctp_assoc_value instead 21:40:37 executing program 5: syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9b3d01", 0x46, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {}, {0x4888}}}}}}}, 0x0) [ 1170.328638][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1170.345214][ T7053] sctp: [Deprecated]: syz-executor.2 (pid 7053) Use of int in max_burst socket option deprecated. [ 1170.345214][ T7053] Use struct sctp_assoc_value instead 21:40:37 executing program 3: syz_open_procfs$namespace(0x0, 0x0) syz_io_uring_setup(0x386d, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [ 1170.388403][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:38 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f00000024c0), 0x40000, 0x0) [ 1170.441296][ T7064] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 21:40:38 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000700", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:38 executing program 5: syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9b3d01", 0x46, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {}, {0x4888}}}}}}}, 0x0) 21:40:38 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x541b, 0x0) 21:40:38 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) 21:40:38 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x100010, r0, 0x0) [ 1170.721005][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1170.731430][ T7077] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 1170.743260][ T7076] sctp: [Deprecated]: syz-executor.2 (pid 7076) Use of int in max_burst socket option deprecated. [ 1170.743260][ T7076] Use struct sctp_assoc_value instead 21:40:38 executing program 3: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000), 0x2) geteuid() fork() 21:40:38 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000800", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:38 executing program 5: syz_emit_ethernet(0x7d, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9b3d01", 0x47, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "b2"}, {0x4888}}}}}}}, 0x0) 21:40:38 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100007d76bc0835120a0018b0001600010902240001000000000904000002cc6c870009050e0200020000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x14, @string={0x14, 0x3, "8aded7420e34d26c87c3cb733e720c3bf6ef"}}, &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f0000000740)={0x84, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x101}, 0x0, &(0x7f0000000500)={0x40, 0xb, 0x2, "5798"}, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="c3cd06832fa6"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "389d"}, 0x0, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x7f}, 0x0, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x20}}) 21:40:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:38 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000a00)={{0x0, 0x20}, 'port0\x00'}) [ 1171.045134][ T7093] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 21:40:38 executing program 5: syz_emit_ethernet(0x7d, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9b3d01", 0x47, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "b2"}, {0x4888}}}}}}}, 0x0) [ 1171.138321][ T7100] sctp: [Deprecated]: syz-executor.2 (pid 7100) Use of int in max_burst socket option deprecated. [ 1171.138321][ T7100] Use struct sctp_assoc_value instead 21:40:38 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000900", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:38 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x319101, 0x0) 21:40:38 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x81204101, &(0x7f0000000440)) [ 1171.333626][ T7110] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 21:40:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:39 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000a00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1171.421069][ T8539] usb 1-1: new high-speed USB device number 25 using dummy_hcd 21:40:39 executing program 5: syz_emit_ethernet(0x7d, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9b3d01", 0x47, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "b2"}, {0x4888}}}}}}}, 0x0) 21:40:39 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000300)={0x0, 0x0}) 21:40:39 executing program 1: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, &(0x7f0000000080)) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0), 0x0) clock_gettime(0x0, &(0x7f0000004d40)) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000004dc0)={0xffffffffffffffff, 0x3ff}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005a80)) getresuid(&(0x7f000000b040), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fork() openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 1171.573539][ T7119] sctp: [Deprecated]: syz-executor.2 (pid 7119) Use of int in max_burst socket option deprecated. [ 1171.573539][ T7119] Use struct sctp_assoc_value instead [ 1171.642754][ T7126] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 1171.661185][ T8539] usb 1-1: Using ep0 maxpacket: 8 [ 1171.781682][ T8539] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.820963][ T8539] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1171.981905][ T8539] usb 1-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice=b0.18 [ 1172.000300][ T8539] usb 1-1: New USB device strings: Mfr=0, Product=22, SerialNumber=0 [ 1172.010408][ T8539] usb 1-1: Product: syz [ 1172.050589][ T8539] usb 1-1: config 0 descriptor?? [ 1172.527623][ T1181] usb 1-1: USB disconnect, device number 25 [ 1173.310664][ T1181] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1173.590628][ T1181] usb 1-1: Using ep0 maxpacket: 8 [ 1173.711178][ T1181] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.721369][ T1181] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1173.810950][ T1181] usb 1-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice=b0.18 [ 1173.820026][ T1181] usb 1-1: New USB device strings: Mfr=0, Product=22, SerialNumber=0 [ 1173.829996][ T1181] usb 1-1: Product: syz [ 1173.838554][ T1181] usb 1-1: config 0 descriptor?? 21:40:41 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100007d76bc0835120a0018b0001600010902240001000000000904000002cc6c870009050e0200020000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x14, @string={0x14, 0x3, "8aded7420e34d26c87c3cb733e720c3bf6ef"}}, &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f0000000740)={0x84, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x101}, 0x0, &(0x7f0000000500)={0x40, 0xb, 0x2, "5798"}, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @random="c3cd06832fa6"}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "389d"}, 0x0, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x7f}, 0x0, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x20}}) 21:40:41 executing program 5: syz_io_uring_setup(0x2ecf, &(0x7f0000000000)={0x0, 0x86ba}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x19fd, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4c}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 21:40:41 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000c00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 21:40:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:41 executing program 1: syz_io_uring_setup(0x386d, &(0x7f0000000040), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) [ 1174.163306][ T1181] usb 1-1: USB disconnect, device number 26 [ 1174.210352][ T7193] __nla_validate_parse: 7 callbacks suppressed [ 1174.210371][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:41 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7451}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 21:40:41 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc020660b, 0x0) 21:40:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1174.344028][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:41 executing program 5: r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/time_for_children\x00') r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/time_for_children\x00') 21:40:42 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000e00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:42 executing program 1: fanotify_mark(0xffffffffffffffff, 0xe4, 0x0, 0xffffffffffffffff, 0x0) [ 1174.633986][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1174.671385][ T1181] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1174.698365][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1174.950667][ T1181] usb 1-1: Using ep0 maxpacket: 8 [ 1175.070700][ T1181] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.082457][ T1181] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1175.171435][ T1181] usb 1-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice=b0.18 [ 1175.180616][ T1181] usb 1-1: New USB device strings: Mfr=0, Product=22, SerialNumber=0 [ 1175.189188][ T1181] usb 1-1: Product: syz [ 1175.196189][ T1181] usb 1-1: config 0 descriptor?? [ 1175.706167][ T1181] usb 1-1: USB disconnect, device number 27 21:40:43 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 21:40:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:43 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000f00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:43 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 21:40:43 executing program 5: sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000003c0)='nl80211\x00', 0x0, 0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 21:40:43 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc06c4124, 0x0) [ 1176.296248][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:43 executing program 2: setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:43 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000040), 0xffffffffffffffc1, 0x0) [ 1176.383005][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:44 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="480000001500197f09004b0101048c590188ffffcf5d3474ff9212e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee22600d4ff5bffff9b226452", 0x48}], 0x1) 21:40:44 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80c0, 0x0) 21:40:44 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002001000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:44 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, 0xfffffffffffffffe) 21:40:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x504, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 21:40:44 executing program 2: setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1176.660049][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:44 executing program 5: syz_open_dev$usbmon(&(0x7f0000000240), 0x0, 0x0) [ 1176.736358][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:44 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6000006, 0x11, r0, 0x82000000) 21:40:44 executing program 0: syz_io_uring_setup(0x648c, &(0x7f0000002d40), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001740), &(0x7f0000002dc0)) 21:40:44 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002004800", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x40) 21:40:44 executing program 2: setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:44 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x80044100, 0x0) [ 1176.942022][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.948352][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.054041][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:44 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000600)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\x01 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xac/\xfd\xd3\x83\x18\x04\nE\xbe\xf5E\x90\xc0Vz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8c\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\x15\xeb\xfa[\xca[\x177\xca\xc2j\x8b\xb5\xe8\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b3000000000020002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 21:40:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 21:40:44 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1177.106787][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:44 executing program 0: syz_io_uring_setup(0x386d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3d6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 21:40:44 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc0884113, &(0x7f0000000440)) 21:40:44 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002004c00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:44 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002f00), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 21:40:44 executing program 3: syz_io_uring_setup(0x2ecf, &(0x7f0000000000)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) 21:40:45 executing program 0: clock_gettime(0x0, 0x0) getresuid(&(0x7f000000b040), &(0x7f000000b080), &(0x7f000000b0c0)) 21:40:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:45 executing program 5: prctl$PR_GET_TSC(0x2, &(0x7f0000000140)) 21:40:45 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002006000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 21:40:45 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/cgroup\x00') setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000), 0x4) syz_io_uring_setup(0x386d, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x2, 0x3d6}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80c0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) 21:40:45 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) read$snddsp(r0, 0x0, 0x0) 21:40:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:45 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7451}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) gettid() gettid() get_robust_list(0x0, &(0x7f0000000180)=&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) read(r1, &(0x7f0000001680)=""/4096, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000200)=0xc) process_vm_writev(0x0, &(0x7f0000002680)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000680)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000500)=""/5, 0x5}], 0x8, &(0x7f0000003ac0)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/160, 0xa0}, {&(0x7f00000037c0)=""/144, 0x90}, {&(0x7f0000003880)=""/1, 0x1}, {&(0x7f0000003980)=""/244, 0xf4}], 0x5, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) getpgrp(r2) 21:40:45 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002006800", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:45 executing program 1: ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, 0x0) 21:40:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000340), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000380)) 21:40:45 executing program 5: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x400a00) 21:40:45 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002006c00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:45 executing program 1: prctl$PR_GET_TSC(0x3, 0x0) 21:40:45 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc0844123, &(0x7f0000000440)) 21:40:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000340), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000380)) 21:40:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:45 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002007400", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:46 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7451}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) gettid() gettid() get_robust_list(0x0, &(0x7f0000000180)=&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) read(r1, &(0x7f0000001680)=""/4096, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000200)=0xc) process_vm_writev(0x0, &(0x7f0000002680)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000680)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000500)=""/5, 0x5}], 0x8, &(0x7f0000003ac0)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/160, 0xa0}, {&(0x7f00000037c0)=""/144, 0x90}, {&(0x7f0000003880)=""/1, 0x1}, {&(0x7f0000003980)=""/244, 0xf4}], 0x5, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) getpgrp(r2) 21:40:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 21:40:46 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc0984124, &(0x7f0000000440)) 21:40:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040), 0x10) 21:40:46 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002007a00", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:46 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7451}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) gettid() gettid() get_robust_list(0x0, &(0x7f0000000180)=&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) read(r1, &(0x7f0000001680)=""/4096, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000200)=0xc) process_vm_writev(0x0, &(0x7f0000002680)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000580)=""/224, 0xe0}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000680)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000500)=""/5, 0x5}], 0x8, &(0x7f0000003ac0)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/160, 0xa0}, {&(0x7f00000037c0)=""/144, 0x90}, {&(0x7f0000003880)=""/1, 0x1}, {&(0x7f0000003980)=""/244, 0xf4}], 0x5, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) getpgrp(r2) 21:40:46 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200f000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:46 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) 21:40:46 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000711000/0x3000)=nil, &(0x7f000076d000/0x4000)=nil, 0x3000}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f00004a7000/0x2000)=nil, 0x2000}}) [ 1179.246881][ T7440] __nla_validate_parse: 12 callbacks suppressed [ 1179.246901][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1179.315944][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:46 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x3c) r1 = getpgid(0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1) sendto$inet6(r0, &(0x7f00000000c0)="3cc9d759b3b358c2924914a1ad3002e3d177f9da1f0684cfc44a47cd", 0x1c, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 21:40:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000011000100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000080003"], 0x28}}, 0x0) 21:40:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:47 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000003", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:47 executing program 1: bpf$BPF_GET_BTF_INFO(0x17, 0x0, 0x0) 21:40:47 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x103382) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1180.085333][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:47 executing program 1: socketpair(0x0, 0x0, 0x489, &(0x7f0000000140)) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) [ 1180.158898][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:48 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x26100, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) fallocate(r0, 0x3, 0x1d, 0x100000fe) creat(&(0x7f00000005c0)='./bus\x00', 0x0) 21:40:48 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 21:40:48 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) 21:40:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:48 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000005", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:48 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x26100, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) fallocate(r0, 0x3, 0x1d, 0x100000fe) creat(&(0x7f00000005c0)='./bus\x00', 0x0) [ 1180.616341][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:48 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000040)=0xfbe) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd84}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r5, r4, 0x0, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r7, 0x5437, &(0x7f0000000100)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000600)={0x0, @l2tp={0x2, 0x0, @multicast2=0xe0000006}, @rc={0x1f, @none, 0x1}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='veth1_to_hsr\x00', 0xffffffff, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000680)={{r6}, r9, 0x4, @unused=[0x101, 0x2, 0xfffffffffffffffe, 0x8], @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000600)={{r4}, r9, 0x10, @unused=[0x1, 0x1ff, 0x10001, 0x2], @subvolid=0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000000c0)={"5e3acfc1578958c17eca5ebb7bb45d67", r9, 0x0, {0x200, 0x1f}, {0x1, 0x7}, 0x2, [0x6, 0x995, 0x80000001, 0x6, 0xfffffffffffffffc, 0x1, 0x5, 0x81, 0x80000001, 0x5, 0x1, 0x0, 0x32, 0x3, 0xffff, 0x1]}) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4112, 0x0) pipe(&(0x7f0000000200)) eventfd2(0x0, 0x0) [ 1180.700208][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:48 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004200)={&(0x7f0000004100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000004140)=""/145, 0x1a, 0x91, 0x1}, 0x20) 21:40:48 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000006", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1180.886464][ T7503] sctp: [Deprecated]: syz-executor.2 (pid 7503) Use of int in max_burst socket option deprecated. [ 1180.886464][ T7503] Use struct sctp_assoc_value instead 21:40:48 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x103000, 0x0) close(r0) 21:40:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1181.135683][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1181.247991][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1181.364208][ T7518] sctp: [Deprecated]: syz-executor.2 (pid 7518) Use of int in max_burst socket option deprecated. [ 1181.364208][ T7518] Use struct sctp_assoc_value instead 21:40:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b40)={'ip6_vti0\x00', 0x0}) 21:40:49 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000040)=0xfbe) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd84}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r5, r4, 0x0, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r7, 0x5437, &(0x7f0000000100)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000600)={0x0, @l2tp={0x2, 0x0, @multicast2=0xe0000006}, @rc={0x1f, @none, 0x1}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='veth1_to_hsr\x00', 0xffffffff, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000680)={{r6}, r9, 0x4, @unused=[0x101, 0x2, 0xfffffffffffffffe, 0x8], @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000600)={{r4}, r9, 0x10, @unused=[0x1, 0x1ff, 0x10001, 0x2], @subvolid=0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000000c0)={"5e3acfc1578958c17eca5ebb7bb45d67", r9, 0x0, {0x200, 0x1f}, {0x1, 0x7}, 0x2, [0x6, 0x995, 0x80000001, 0x6, 0xfffffffffffffffc, 0x1, 0x5, 0x81, 0x80000001, 0x5, 0x1, 0x0, 0x32, 0x3, 0xffff, 0x1]}) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4112, 0x0) pipe(&(0x7f0000000200)) eventfd2(0x0, 0x0) 21:40:49 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000007", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:49 executing program 0: socket$bt_rfcomm(0x10, 0x0, 0x3) 21:40:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:49 executing program 1: bpf$BPF_GET_BTF_INFO(0xe, 0x0, 0x0) [ 1181.767175][ T7534] sctp: [Deprecated]: syz-executor.2 (pid 7534) Use of int in max_burst socket option deprecated. [ 1181.767175][ T7534] Use struct sctp_assoc_value instead [ 1181.803318][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000001240)=@bridge_getlink={0x3c, 0x12, 0x423, 0x0, 0x0, {}, [@IFLA_LINK_NETNSID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x3c}}, 0x0) 21:40:49 executing program 0: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x7000) 21:40:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1181.886247][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:49 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) fallocate(r0, 0x3, 0x1d, 0x100000fe) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 21:40:49 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000009", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1182.112168][ T7552] sctp: [Deprecated]: syz-executor.2 (pid 7552) Use of int in max_burst socket option deprecated. [ 1182.112168][ T7552] Use struct sctp_assoc_value instead 21:40:49 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000040)=0xfbe) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd84}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r5, r4, 0x0, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r7, 0x5437, &(0x7f0000000100)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000600)={0x0, @l2tp={0x2, 0x0, @multicast2=0xe0000006}, @rc={0x1f, @none, 0x1}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='veth1_to_hsr\x00', 0xffffffff, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000680)={{r6}, r9, 0x4, @unused=[0x101, 0x2, 0xfffffffffffffffe, 0x8], @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000600)={{r4}, r9, 0x10, @unused=[0x1, 0x1ff, 0x10001, 0x2], @subvolid=0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000000c0)={"5e3acfc1578958c17eca5ebb7bb45d67", r9, 0x0, {0x200, 0x1f}, {0x1, 0x7}, 0x2, [0x6, 0x995, 0x80000001, 0x6, 0xfffffffffffffffc, 0x1, 0x5, 0x81, 0x80000001, 0x5, 0x1, 0x0, 0x32, 0x3, 0xffff, 0x1]}) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4112, 0x0) pipe(&(0x7f0000000200)) eventfd2(0x0, 0x0) 21:40:49 executing program 1: bpf$BPF_GET_BTF_INFO(0xa, 0x0, 0x0) 21:40:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 21:40:49 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200000a", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:50 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x3c) r1 = getpgid(0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x1) sendto$inet6(r0, &(0x7f00000000c0)="3cc9d759b3b358c2924914a1ad3002e3d177f9da1f0684cfc44a47cd7b9a", 0x1e, 0x40000, &(0x7f0000000140)={0xa, 0x4e21, 0x3f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) [ 1182.520025][ T7569] sctp: [Deprecated]: syz-executor.2 (pid 7569) Use of int in max_burst socket option deprecated. [ 1182.520025][ T7569] Use struct sctp_assoc_value instead 21:40:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000004340), 0x4) 21:40:50 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200000c", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:50 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000040)=0xfbe) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd84}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r5, r4, 0x0, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r7, 0x5437, &(0x7f0000000100)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000600)={0x0, @l2tp={0x2, 0x0, @multicast2=0xe0000006}, @rc={0x1f, @none, 0x1}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='veth1_to_hsr\x00', 0xffffffff, 0x7000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000680)={{r6}, r9, 0x4, @unused=[0x101, 0x2, 0xfffffffffffffffe, 0x8], @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000600)={{r4}, r9, 0x10, @unused=[0x1, 0x1ff, 0x10001, 0x2], @subvolid=0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000000c0)={"5e3acfc1578958c17eca5ebb7bb45d67", r9, 0x0, {0x200, 0x1f}, {0x1, 0x7}, 0x2, [0x6, 0x995, 0x80000001, 0x6, 0xfffffffffffffffc, 0x1, 0x5, 0x81, 0x80000001, 0x5, 0x1, 0x0, 0x32, 0x3, 0xffff, 0x1]}) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x4112, 0x0) pipe(&(0x7f0000000200)) eventfd2(0x0, 0x0) [ 1183.033498][ T7586] sctp: [Deprecated]: syz-executor.2 (pid 7586) Use of int in max_burst socket option deprecated. [ 1183.033498][ T7586] Use struct sctp_assoc_value instead 21:40:50 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) fallocate(r0, 0x3, 0x1d, 0x100000fe) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 21:40:50 executing program 0: bpf$BPF_GET_BTF_INFO(0x13, 0x0, 0x0) 21:40:50 executing program 1: bpf$BPF_GET_BTF_INFO(0x8, 0x0, 0x0) 21:40:50 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000e0d", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:50 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f000049e000/0x4000)=nil, &(0x7f0000e87000/0x3000)=nil, 0x4000, 0x1}) 21:40:50 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) [ 1183.389815][ T7601] sctp: [Deprecated]: syz-executor.2 (pid 7601) Use of int in max_burst socket option deprecated. [ 1183.389815][ T7601] Use struct sctp_assoc_value instead 21:40:51 executing program 5: bpf$BPF_GET_BTF_INFO(0x6, 0x0, 0x0) 21:40:51 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200000e", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:40:51 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x15, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 21:40:51 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) dup3(r0, r0, 0x0) [ 1183.695999][ T7616] sctp: [Deprecated]: syz-executor.2 (pid 7616) Use of int in max_burst socket option deprecated. [ 1183.695999][ T7616] Use struct sctp_assoc_value instead 21:40:51 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) fallocate(r0, 0x3, 0x1d, 0x100000fe) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 21:40:51 executing program 5: socket$bt_rfcomm(0xf, 0x0, 0x3) 21:40:51 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000d0e", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:51 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc028aa03, &(0x7f0000000040)={{&(0x7f00004a7000/0x2000)=nil, 0x2000}}) 21:40:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1184.290973][ T7641] __nla_validate_parse: 10 callbacks suppressed [ 1184.290993][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1184.303368][ T7642] sctp: [Deprecated]: syz-executor.2 (pid 7642) Use of int in max_burst socket option deprecated. [ 1184.303368][ T7642] Use struct sctp_assoc_value instead 21:40:51 executing program 5: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)) [ 1184.386995][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:51 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x22100) 21:40:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, 0x0, 0x0) 21:40:52 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200000f", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:52 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) [ 1184.641932][ T7660] sctp: [Deprecated]: syz-executor.2 (pid 7660) Use of int in max_burst socket option deprecated. [ 1184.641932][ T7660] Use struct sctp_assoc_value instead 21:40:52 executing program 0: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x669c1) 21:40:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) [ 1184.837554][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1184.924940][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:52 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) fallocate(r0, 0x3, 0x1d, 0x100000fe) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 21:40:52 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, 0x0, 0x0) 21:40:52 executing program 5: syz_io_uring_setup(0x3791, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 21:40:52 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200001f", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:52 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000001f000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:40:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 1185.491323][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1185.539299][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), 0x4) sendto$inet6(r0, &(0x7f0000000140)='X', 0x1, 0x0, 0x0, 0x0) 21:40:53 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x7, 0x0) 21:40:53 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$KVM_GET_API_VERSION(r0, 0x5450, 0x0) 21:40:53 executing program 5: r0 = syz_io_uring_setup(0xd4c, &(0x7f00000000c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 21:40:53 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000020", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1185.893692][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:53 executing program 1: munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) [ 1186.057448][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:54 executing program 1: r0 = syz_io_uring_setup(0x20ca, &(0x7f0000000080), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000001c0), 0x1) 21:40:54 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000002580)=[{&(0x7f0000000040)='Z', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 21:40:54 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r3}) 21:40:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)="e6", 0x1}], 0x1}}, {{0x0, 0x240, &(0x7f0000000340)=[{&(0x7f0000000100)=']', 0x1}, {&(0x7f0000000200)='@', 0x1}, {&(0x7f0000000240)="13", 0x20000041}, {&(0x7f0000000280)="f2", 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)='A', 0x1}, {&(0x7f0000000cc0)='^', 0x1}, {&(0x7f0000000040)='w', 0x1}, {&(0x7f0000000180)="1555fbf93cd1", 0xfffffd7c}], 0x4}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001100)="f7", 0x1}, {&(0x7f00000011c0)="8e", 0x1}, {&(0x7f0000001240)="d2", 0x1}, {&(0x7f0000001300)='e', 0x1}, {&(0x7f0000000140)='h', 0x1}, {&(0x7f0000001380)='N', 0x1}], 0x6}, 0x3e8}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="93", 0x1}, {&(0x7f0000001740)='b', 0x1}], 0x2}}], 0x5, 0x60cd800) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}, 0x0) 21:40:54 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000002b000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:40:54 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000048", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1186.653269][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1186.722130][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:54 executing program 2: syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x208400) 21:40:54 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x7, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x24}, 0x10) 21:40:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x2, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000019000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:40:54 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) fstat(r0, 0x0) 21:40:54 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200004c", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:54 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setpipe(r0, 0x408, 0x0) 21:40:54 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x7}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000304000000040320"]}, 0x0) 21:40:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000000)={0x2, {0x3}}) 21:40:54 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) 21:40:54 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x25, 0x0, 0x0) 21:40:54 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002006558", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:54 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000009b000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:40:54 executing program 1: syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@cipso={0x86, 0x20, 0x1, [{0x0, 0x6, "6bf974b6"}, {0x0, 0xe, "2898af089cc7914195f29b6d"}, {0x0, 0xfffffffffffffd8e, "d3cb2beb00f5"}]}, @generic={0x0, 0x2}]}}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 21:40:54 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r1, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0xd, 0x0, 0x0) 21:40:54 executing program 3: munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xe) 21:40:54 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000060", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) fchdir(r0) [ 1187.492933][ T8540] usb 3-1: new high-speed USB device number 26 using dummy_hcd 21:40:55 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x1d, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x24}, 0x10) [ 1187.779687][ T8540] usb 3-1: Using ep0 maxpacket: 32 [ 1187.930350][ T8540] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1188.110239][ T8540] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1188.119317][ T8540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.128338][ T8540] usb 3-1: Product: syz [ 1188.133219][ T8540] usb 3-1: Manufacturer: syz [ 1188.137848][ T8540] usb 3-1: SerialNumber: syz [ 1188.633722][ T8603] usb 3-1: USB disconnect, device number 26 [ 1189.429467][ T8603] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1189.689544][ T8603] usb 3-1: Using ep0 maxpacket: 32 [ 1189.860324][ T8603] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1190.029529][ T8603] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1190.038601][ T8603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.047221][ T8603] usb 3-1: Product: syz [ 1190.051886][ T8603] usb 3-1: Manufacturer: syz [ 1190.056507][ T8603] usb 3-1: SerialNumber: syz 21:40:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000000d000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:40:57 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x0) 21:40:57 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002005865", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0x15, &(0x7f0000000480), 0x14) 21:40:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xb, {0x3}}) 21:40:57 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, r3, 0x0) setregid(0x0, 0x0) [ 1190.173676][ T8603] usb 3-1: USB disconnect, device number 27 [ 1190.246097][ T7815] __nla_validate_parse: 6 callbacks suppressed [ 1190.246117][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:57 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x0) [ 1190.323718][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704000000000000000100000004000180"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 21:40:57 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000030000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:40:58 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000068", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x12, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:40:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000098000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:40:58 executing program 0: syz_emit_ethernet(0x42, &(0x7f00000013c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0x5, [@broadcast, @loopback]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) [ 1190.645595][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1190.699005][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:58 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x20ca, &(0x7f0000000080), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000001c0)=r0, 0x1) 21:40:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xc, {0x3}}) 21:40:58 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200006c", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:58 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='t', 0x1}], 0x300, 0x2) 21:40:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000025000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1191.094443][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1191.164751][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:58 executing program 3: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 21:40:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000008b000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:40:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000088000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:40:58 executing program 0: munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ff0000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) 21:40:58 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000074", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1191.368719][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:58 executing program 1: r0 = syz_io_uring_setup(0xd4c, &(0x7f00000000c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000140)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 21:40:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4188aec6, &(0x7f0000000000)) [ 1191.423779][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:59 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$KVM_GET_API_VERSION(r0, 0x5452, 0x0) 21:40:59 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r0, 0x0, 0x0, 0x0) 21:40:59 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200007a", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:59 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xc) 21:40:59 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x25, &(0x7f00000007c0)={0x5, 0xf, 0x25, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "3e32c840e67be88dc2e57f0a07cbe824"}, @ssp_cap={0xc}]}}) [ 1191.719418][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:59 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x40) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 21:40:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1191.799858][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:40:59 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r0) fallocate(r0, 0x0, 0x0, 0x0) 21:40:59 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000018000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:40:59 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000081", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 21:40:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000480)={@cgroup, r0}, 0x14) 21:40:59 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x3, 0x0, 0x0) 21:40:59 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1192.139670][ T8540] usb 2-1: new high-speed USB device number 20 using dummy_hcd 21:40:59 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000020000f0", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:40:59 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000003a80)='f2fs_truncate_partial_nodes\x00'}, 0xffffffffffffff52) [ 1192.411772][ T8540] usb 2-1: Using ep0 maxpacket: 32 [ 1192.629596][ T8540] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1192.819304][ T8540] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1192.828458][ T8540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.836681][ T8540] usb 2-1: Product: syz [ 1192.841017][ T8540] usb 2-1: Manufacturer: syz [ 1192.845722][ T8540] usb 2-1: SerialNumber: syz [ 1193.115355][ T1181] usb 2-1: USB disconnect, device number 20 [ 1193.899424][ T1181] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1194.159088][ T1181] usb 2-1: Using ep0 maxpacket: 32 [ 1194.379268][ T1181] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1194.549228][ T1181] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1194.558296][ T1181] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.568042][ T1181] usb 2-1: Product: syz [ 1194.572864][ T1181] usb 2-1: Manufacturer: syz [ 1194.577459][ T1181] usb 2-1: SerialNumber: syz 21:41:02 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_rfcomm(r0, 0x0, 0x0) 21:41:02 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, 0x0, 0x0) setregid(0x0, 0x0) 21:41:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x4, &(0x7f0000000480), 0x14) 21:41:02 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000040", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:02 executing program 0: munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000) munmap(&(0x7f0000ff0000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ff4000/0x3000)=nil, 0x3000) 21:41:02 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x6, 0x60, 0x0, 0x0) [ 1194.832469][ T8506] usb 2-1: USB disconnect, device number 21 21:41:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0) 21:41:02 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0xd, 0x0, 0x0) 21:41:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b6d, 0x0) 21:41:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000019000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:02 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000003", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:02 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 21:41:02 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0x21, &(0x7f0000000480), 0x14) 21:41:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001100)={r0, &(0x7f0000000040)="cd", &(0x7f0000000100)=""/4096}, 0x20) [ 1195.250097][ T7998] __nla_validate_parse: 7 callbacks suppressed [ 1195.250118][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x4001, 0x3, 0x2f0, 0x150, 0x68030000, 0x148, 0x0, 0x148, 0x258, 0x240, 0x240, 0x258, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x0, 0x0, 0x0, 0x7000000, 0x0, 0x800, 0x7}}}, @common=@unspec=@rateest={{0x68}, {'geneve0\x00', 'ip6tnl0\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x38d) 21:41:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 21:41:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x800000005) 21:41:03 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200ffff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 21:41:03 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) 21:41:03 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) 21:41:03 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:03 executing program 1: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1195.649869][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1195.723525][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:03 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}, 0x0) 21:41:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000085000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:03 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200ffff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000053000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:03 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000059000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:03 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0x11, &(0x7f0000000480)={@cgroup, r0}, 0x14) 21:41:03 executing program 3: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7ffffffff000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 21:41:03 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0xf, &(0x7f0000000480)={@cgroup, r0}, 0x14) [ 1196.054515][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:03 executing program 1: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0xb, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@lsrr={0x83, 0xf, 0x5d, [@local, @loopback, @multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 21:41:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x60ff}, 0x20) [ 1196.114532][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:03 executing program 3: munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb) 21:41:03 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:03 executing program 2: munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0xffffffffffffffff) 21:41:03 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) bpf$BPF_PROG_ATTACH(0xb, 0x0, 0x0) 21:41:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x40020400) ioctl$KVM_SET_PIT(r1, 0x4010ae68, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) 21:41:03 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) [ 1196.413033][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x2, 0x0, 0x0) 21:41:04 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@cgroup, r0}, 0x14) [ 1196.516903][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4020aeb2, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) 21:41:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000054000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:04 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:04 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000020000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:04 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x208102, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x150, r1, 0x304, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x6f}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc, 0x5}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x80}, @NL80211_ATTR_IE={0xf9, 0x2a, [@fast_bss_trans={0x37, 0xee, {0x7, 0x8, "67557092d3259506655c07647848ea32", "16d383184d5db8c4cca73476225be61f43bb66d3585526f8a4e89c4caedd165e", "256e119f2372ffff507d48357f534a4e3241848025d364b23e3312cf569f3957", [{0x4, 0x4, "38e2c253"}, {0x1, 0xd, "e154e6737b75e3ec93d92d08d2"}, {0x4, 0x24, "5d5aedfac21a03922cff4eeffcc272d6ea6a0d2fc8c7948670f1fe0de663ec669924e193"}, {0x3, 0x1e, "f44cd7fc0a93b115fb35b2728b829ef9df2ead2bb1ccac3330a947e686ea"}, {0x1, 0x9, "d34dbe11e963232306"}, {0x2, 0x8, "60198ebfc47182ea"}, {0x1, 0x1a, "d3ea34868dc585282c90c63fdc5f6e3f381b8d47e0ed18ea7ef3"}, {0x3, 0xe, "0e42902fe271934c28a386fc8338"}]}}, @channel_switch={0x25, 0x3, {0x1, 0xb4, 0x81}}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2800}]}, 0x150}, 0x1, 0x0, 0x0, 0x20840}, 0x831) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x508, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x8, 0x1, 0xffff, 0x7}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0xfffffffc}}) [ 1196.894099][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:04 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) [ 1197.006719][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:04 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x2, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000000e000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:04 executing program 2: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000120067ae"], 0x3c}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 1197.282063][ T8162] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 21:41:04 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x0) 21:41:04 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321f8"], 0x191) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 21:41:04 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4188aec6, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 21:41:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000089000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x0}, 0x20) 21:41:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000064000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:05 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000042000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:05 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffffffffffff, 0x0) 21:41:05 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:05 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) 21:41:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_misc(r0, 0x0, 0xe0) 21:41:05 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000480)={@cgroup, r0}, 0x14) 21:41:05 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) 21:41:05 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:05 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x191) 21:41:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x8, 0x7, 0x2, 0x1}, 0x40) 21:41:05 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x11, &(0x7f00000007c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}}) 21:41:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/76, 0x4c}], 0x1, 0x2f, 0x0) 21:41:05 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1198.508883][ T8540] usb 2-1: new high-speed USB device number 22 using dummy_hcd 21:41:06 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff}) clone3(&(0x7f0000000280)={0x341000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 21:41:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x4018, 0x3, 0x200, 0x150, 0x0, 0x148, 0x0, 0x148, 0x258, 0x240, 0x240, 0x258, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 21:41:06 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000002000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:06 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:06 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="5fab63384d48d302e36304484470376c", 0x10) [ 1198.788761][ T8540] usb 2-1: Using ep0 maxpacket: 32 21:41:06 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x9204, 0x0) 21:41:06 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0xd, &(0x7f0000000480), 0x14) 21:41:06 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:06 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1199.039120][ T8540] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1199.289463][ T8540] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1199.298561][ T8540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.328924][ T8540] usb 2-1: Product: syz [ 1199.333116][ T8540] usb 2-1: Manufacturer: syz [ 1199.337724][ T8540] usb 2-1: SerialNumber: syz [ 1199.607384][T23197] usb 2-1: USB disconnect, device number 22 [ 1200.392501][ T8506] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1200.658708][ T8506] usb 2-1: Using ep0 maxpacket: 32 [ 1200.899002][ T8506] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1201.099135][ T8506] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1201.108330][ T8506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.117982][ T8506] usb 2-1: Product: syz [ 1201.123649][ T8506] usb 2-1: Manufacturer: syz [ 1201.128270][ T8506] usb 2-1: SerialNumber: syz 21:41:08 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0x22, &(0x7f0000000480), 0x14) 21:41:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0x13, &(0x7f0000000480), 0x14) 21:41:08 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e00000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x10, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x24}, 0x10) 21:41:08 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:08 executing program 2: syz_emit_ethernet(0x46, &(0x7f00000013c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x5, [@broadcast, @loopback, @dev]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 21:41:08 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) [ 1201.238653][ T8506] usb 2-1: can't set config #1, error -71 [ 1201.273976][ T8506] usb 2-1: USB disconnect, device number 23 [ 1201.352664][ T8303] __nla_validate_parse: 17 callbacks suppressed [ 1201.352685][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:09 executing program 3: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 1201.415624][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:09 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f00000003c0)=[{}, {r0, 0x2640}, {0xffffffffffffffff, 0x22}, {0xffffffffffffffff, 0x2}], 0x4, &(0x7f0000000400)={0x77359400}, 0x0, 0x0) 21:41:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x12, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 21:41:09 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:09 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000004000000000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0x1d, &(0x7f0000000480)={@cgroup, r0}, 0x14) [ 1201.609870][ T8316] mmap: syz-executor.3 (8316) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 21:41:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x10, &(0x7f0000000480)={@cgroup, r0}, 0x14) [ 1201.717349][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:09 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x19, &(0x7f00000007c0)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) 21:41:09 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$KVM_GET_API_VERSION(r0, 0x541b, 0x0) 21:41:09 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) 21:41:09 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@noop, @generic={0x44, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) [ 1201.825971][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:09 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:09 executing program 2: mlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x14) 21:41:09 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$KVM_GET_API_VERSION(r0, 0xc0189436, 0x0) 21:41:09 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) 21:41:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x4001, 0x3, 0x2f0, 0x150, 0x0, 0x148, 0xc, 0x148, 0x258, 0x240, 0x240, 0x258, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x7}}}, @common=@unspec=@rateest={{0x68}, {'geneve0\x00', 'ip6tnl0\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x38d) [ 1202.116000][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:09 executing program 2: mlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x14) [ 1202.202047][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1202.228675][ T8603] usb 1-1: new high-speed USB device number 28 using dummy_hcd 21:41:09 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 21:41:09 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1202.478552][ T8603] usb 1-1: Using ep0 maxpacket: 32 [ 1202.548962][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1202.585733][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1202.679350][ T8603] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1202.758568][ T8506] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1202.878728][ T8603] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1202.887814][ T8603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.932375][ T8603] usb 1-1: Product: syz [ 1202.936687][ T8603] usb 1-1: Manufacturer: syz [ 1202.941617][ T8603] usb 1-1: SerialNumber: syz [ 1203.027548][ T8506] usb 6-1: Using ep0 maxpacket: 32 [ 1203.189207][ T8506] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1203.206606][ T8406] usb 1-1: USB disconnect, device number 28 [ 1203.298621][ T8506] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1203.508649][ T8506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1203.521292][ T8506] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.535129][ T8506] usb 6-1: Product: syz [ 1203.541038][ T8506] usb 6-1: Manufacturer: syz [ 1203.546218][ T8506] usb 6-1: SerialNumber: syz [ 1203.797268][ T8506] usb 6-1: USB disconnect, device number 78 [ 1204.018401][ T8603] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1204.258377][ T8603] usb 1-1: Using ep0 maxpacket: 32 [ 1204.458935][ T8603] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1204.568688][ T8506] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1204.658483][ T8603] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1204.667581][ T8603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.684447][ T8603] usb 1-1: Product: syz [ 1204.691980][ T8603] usb 1-1: Manufacturer: syz [ 1204.696575][ T8603] usb 1-1: SerialNumber: syz [ 1204.808333][ T8506] usb 6-1: Using ep0 maxpacket: 32 21:41:12 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(r0, 0xfffffffffffff801, 0x0, 0x0) 21:41:12 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x24}, 0x10) 21:41:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x3, &(0x7f0000000480), 0x14) 21:41:12 executing program 2: mlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x14) 21:41:12 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1204.867816][ T8603] usb 1-1: USB disconnect, device number 29 [ 1204.966621][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1204.988372][ T8506] usb 6-1: unable to get BOS descriptor or descriptor too short 21:41:12 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080), 0x10) 21:41:12 executing program 2: mlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x14) [ 1205.036255][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40805}, 0x20000051) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x24c20082, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x24c20082, r6}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x18c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000001) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xfc, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x2400c040}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r8, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xaf}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x80) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x5d}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x50}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x44000) setresuid(0x0, r9, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 1205.078392][ T8506] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 21:41:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4188aec6, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) 21:41:12 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1205.299104][ T8506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1205.329422][ T8506] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.371518][ T8506] usb 6-1: Product: syz [ 1205.418387][ T8506] usb 6-1: Manufacturer: syz [ 1205.423034][ T8506] usb 6-1: SerialNumber: syz 21:41:13 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x408, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x9, 0xde, 0x6, 0x6d, 0x5, 0x3, 0x0, 0x401, 0x0, 0x84f}, 0x0, 0x1, 0xffffffffffffffff, 0x11) 21:41:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x7, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) 21:41:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) close(r0) 21:41:13 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1205.528477][ T8506] usb 6-1: can't set config #1, error -71 [ 1205.548670][ T8506] usb 6-1: USB disconnect, device number 79 21:41:13 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) getpeername(r0, 0x0, 0x0) 21:41:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') 21:41:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0x541b, 0x0) 21:41:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7f2b, 0x0) 21:41:13 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200fd5d", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:13 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') readv(r1, &(0x7f0000000080)=[{&(0x7f0000000240)=""/227, 0xe3}], 0x1) 21:41:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/172, 0xac}], 0x1, 0x0, 0x0) 21:41:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000029000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:13 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) read$FUSE(r0, 0x0, 0x0) 21:41:13 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 21:41:13 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:13 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000007c000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:13 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001100)={r0, &(0x7f0000000040)="cd", &(0x7f0000000100)=""/4096}, 0x20) 21:41:13 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@cipso={0x86, 0xd, 0x1, [{0x0, 0x6, "6bf974b6"}, {0x0, 0xe, "2898af089cc7914195f29b6d"}, {0x0, 0xfffffffffffffd8e, "d3cb2beb00f5"}]}, @generic={0x0, 0x2}]}}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 21:41:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r2) close(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1177440, 0x158) sendfile(r1, r3, 0x0, 0x800000000021) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x10, 0x17, 0x37, &(0x7f0000000080)}) 21:41:13 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 21:41:13 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:13 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) dup3(0xffffffffffffffff, r0, 0x0) 21:41:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 21:41:14 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 21:41:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x4b46, &(0x7f0000000040)) [ 1206.547727][ T8511] __nla_validate_parse: 8 callbacks suppressed [ 1206.547748][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1206.615503][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000001e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000043000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0x23, &(0x7f0000000480), 0x14) 21:41:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5414, &(0x7f0000000000)={0x2, {0x3}}) 21:41:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x300) 21:41:14 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000082000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1206.877141][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000057000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:14 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 21:41:14 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000044000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1206.967720][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:14 executing program 3: pipe(0xffffffffffffffff) 21:41:14 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x3, 0x1, 0x9}) 21:41:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000099000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:14 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') readv(r0, 0x0, 0x0) 21:41:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000072000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1207.265416][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:14 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='t', 0x1}], 0x300, 0x0) [ 1207.343311][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) pipe2$9p(&(0x7f0000000040), 0x0) pipe2$9p(&(0x7f0000000040), 0x0) sendmsg$nl_route(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=@ipv4_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x3ff}, 0x0, 0x0, 0x0) 21:41:14 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x12, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:15 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_fuse_handle_req(r0, &(0x7f0000000740)="f820bc69e9ddb87cd96045f3802d8919e6332445b47e5a2051c0ed2f850932769a7c7e5eb08fd28c2739fb71e0e9c992450864774dfe932e7385b327732f55d054408596b5d6d3cbba23a3ee3314a6cb1d19b3d9c30ceb99248fdb73fe9c5205594a53c06c111590771fc83fc98566362a54e8445fd0689d8dd5bf35ca865d8f94922b30130cd724c719b62d88b9f6af3a68753f605aa22e77237c5ca5223c88fa042c8d9515f3ad1370f96841d85f967d2d89e6f88463f96792e2b983f2687edf7e18549a826441f9e5df7fb7afd4672c5750c9718f2c2a494e2d79ae130a523040329b9bfe72fc03f9a4718b1f2c338ea87d93c45ef91f504838ef803c003854937cae8982f7d6e122056ef17115b517a997f6b0a5d4db30debc0819e7372ca5af57c91aa32aad256fbc4040f274e879d22d95b636acd0c91823f9b131677dea5cdcc2475a62c596abd0b15bd1ad3fda7a6f1e9a6362c26453cf673a972d24980b3566a5e2ab65eeda70c376b87ce6fc657325088047fbf49edebfe866dbcd3f68a5c7fae057fd7112f732d6c1e2943c2fdf8f468c23d995260e735f1ee482a9bbad7004b3017bae7dde4580cbb2f866e90004029ea3d48651a821ad5870ba5ba858080e6a247ecafe7a75fec1e3fc4590cbaa5f0a01258fbd3401d502054dc1852c729b42b20b1b5bbf382d67d402453bc77f5275a39b8e06c23fb45493c4942fa83f9192e2964bf1928fdae891b5c51c2d74245abc07f5866978339eb8432ef64097598eef2517919d7a088dcb7b0d68d9a9095fef494708bf89ab7871e76b72d572307a0780fce605647b0b7d399cdba5f9b0aa664f0a0d6849252d2fa56097e458fb52df3b22aa475095c3b11458bc50eae40003fc25db09f5cda82f17637bc323b5db0d6e35ef0fbea8b1f820d5a3e0f2c68d0eca8225396a622b9237d4c1c595651a58defc3814428806e9029c5d94707def4d260a8af0dde1d2d10c42baa96d16182e1af44f9171a6138e9b0e44edb8d97708b154893444fc5c51778e70c0dfb6372ec93e45ebbcbaccb240b537c58dcd3e712a2e98b8645b6af0cf0672c95d954522b60c886e031813eb11f21e15a1c3f48b4a292eaa168143677134dd71c8f7899bb5edd50621280706e49b7fbfb12786b83974450a4b8e12e0fcbc400375a87c5bf243ec7a4ba8d8ac0090e90599d02a9a57c934d586a17c44d2cd19892f7ca8814872107c5aba3ae2474ff78d95fed02d0f19dfb36037ccf056c3af856b8d0eae286ce21c49e74290a8ea9011795a62acd68759e9c0ef0f2fe37cb166284d2852a57652d6953c0f6a6cb143df60f8c7dcbc31cca04fd9b62a810dd1c33a5328553b007a4d67955eb9ce72b6dfb2ee5d1422b8d20e7ad881e0ce03b40be79830747ac44bbc0a06def08da76eff066bd910c4f04db94bda9f4f5bfc63a7c940ceb91fa80cdd38300e6356b80776cbfb3819a908b4a91b5c89ce46ba4a26240be7735648a3a4a9d7643fac01ff88d1d2f9ae2a7321d6db232d55c76ac8f15bf4da91d494337e38b36315253883bf55ea4b18eaf8052c2ea03c9c402f3829972bb3c1e6485bc3af6f323109effb8eae8938b076cedb88b0f8737e113d908ee723eef645a1b659bbed0348febf9c588fca7d58f6312b6cc8c2592afc1bbf0242f461e2a8bc8cbe64cc6c49ccbf22ab16d2b3785db3de9cfcc26cb4ca04969cdbb2d803ff67781d35128bca823d5ebca83b56257b170a701b0fc4761c4935da958dfbcc4a12c890b72cd1a2b571e3a6d274a7faf69ffdb61e359916c54f6c036521c3b80dfc058f4151c3a2ebb991d324b98ef5c3a999eabf0b011aa61162748ce329520df89926502eea24dc8ba802ff9b1499c7df7de8a00528dcce1cc1df3f0801c3ed705fdd91a8d56e0afe2f55be996504c06c4c98d9a2a3321b9701e0549a0c012473670945418b4e8e5e45daed8bb7fdea14f37245f2d6a365e760c3863725ee9d4cd4fcb1b7fe571a90fd41b66ddc276a8bab02e7ceceff043fc212000b266f9ce2ab7614a06e59bae62158d36c8eb9acdc92135fe1103f17e5495227bf54fcea6d2f385737a5b304c2912b9aabe0e81cde1ad8540103e18d32c3c949b7e97e915d3453585da06d60ad5baf35f739d253a3fb897fc75bb51e67d80bf4fbc74c70497593f22da005c7082fcdfb2cfd80e9da9c5469f77c45b0bc7ccc274d0ecaf63df7007f1dc4cf8d5cf11463eaf74b0adf0714fed20fb82890978f9a30108e5d129c87ef7ff6b6833c1cc84b1919c5b33a29aab730f7316a6da6f9968d5285adcd4a84c8e705faeb220eccdb8cb4b60ad81d8265ce0fd208d88569e6d4fe0d468eb89c49aa3282a4657032967fe64f61be22b020df0dc6c1e282583690ffb0bb9e09e4b64ae3f33787fe17fc4b231168a20fd916513caf88f310b884862e740108a0418291121a2e1373f7dc5f6fcbcac6f6df31cab6b7f19451784f88a22689d337d6c6574901a02a8b5294c610e0afbdcafc16b1879d8820af9da396dae28fe0616055ec1027744112eedea87325ff4fe672565fe26b095ea50a7fd42ffde861f7d267f4c2ff820e7825077d728ae200ad12104494e119c33686a25fb7425dd36fbe40d074c42a0c376904412b072d5bc9babd8895bb06f04081e90fd126c2b8c96bfc7bd3e2eafc41cab32483152f46b70990ca02ab0b4d979ab005dfc2afa3ff6db150f3ec5db0db8505fa6ec6edc37759a27286019f6644af3a9743d3c0c19cb359f64d17c4f13841f19c95bf1d0736e3865a7cfe8b386853b2094d4884d0ab541ba2a0ca0ececdfd433b831888f57ae634583577028fd7f92f014e0c179fc3a8972f22d047efd607e62caf0cb135d51fa495574d40633c8b5dba36acc25a34df9c850b4283a978830a325086be21f4c141662b280cbd9439ae32a45e932f883daafb13e62d9b8a3fb660bc4cdc023a4cd36ad64f3145d7c2dcf1fb04e816540670b1b2f58e74726b7edc310be5585cef859b85932c02182b64cc8e9b51a3eebbe85d8e5dc435bd3bade78fba015f0d336378c0839f67c86818c2ee79532647372755998f08fd61fa85a850eaa1b6b8fd40c0091c7df54075b51689cbd9894a66d998290a3dbb2f8fc9545cf70dea6c54e35028b8856aebcece4422428c678cffca8c546721990544e066bf5720a15311232a74a9a39437b3d24248caa74191c39167dbd9dd72c16d791551b0ca3950e387a5f5e3b3ca470c98e5dd6babbb198b6988888ed53f7b39d781cc9f4ed2344b30d93593359361fc0a38a6518e5f6276525380593c80b570991dfd6f248a0fb90860b3057a7e14dac85886461f13d901a31c6b777abc986b89ecd1abc1b2136ab7f74e3a153e11160258bec0eb47b9b2db96c3fad53ef1f7d4d8f18deb3716441bcbc998bb69403d10dde5771cf831742825774391188ccfe58b4cd07a0139577bbb36b3523f83045a3ceaaebd1175f8cdb5853329b55e45b7e01db727a24407ef6e5430fb7d3c199e9a7a1fb0d75568cfb63312b4c6359ef2525a518943711cc9cd3860b5b834b54abf296efb1f0f04611617d25a7e193dae4008358d1e9b343617687a402122fc04bde8117167eca9d9d4bcbad5eb0b39a92da5fb72e29ea0e5e68714c73e922d4225c9516ffa264fedd0a443620390a5388e502f47084697cf87cb83e9147ae471e729140ee732a7e92a31fbf45086fa067765387bf5327d96fb6aacdbb748f526c0999406f691b0efc239d2e48dc21c4852de7de1e008fa1906bfd0b869789f2a783685bc7475c0402eb2f73346a9f79ecc29c17a574405defe75a98968db69c0e18f34e7ce07a9092eb1c527c5ab02e08b47d0071a01fa945348b13641e1c311457c6e5b165e2d657dcc1865b8b9ea002e557b7ebd0ab9e1903ad27a7c2f4e60e1cbad78d07a9971635d405d17b3b95e9aa9ca25b31d50c56a3394c79af4ce54380ce1bfd88574cd6022a5366fb1eb5061b4f6fcddbbd0f9018c4225c0b9da7ecb6f3162ffe1692c3a4ea8adcc837394027deaf3c20b4979617948d79ab763e78058f771d9ccd7feaa61a9f6aa81f4fac297f44e5fcab94cdf0ee4c53c5d1ee0e4e310f495819c061f8a3feb56f02077f35fe8663a41c18924566f66458acc54efa46ddd44565b4e9960fb506dd912bc27e75a0fcb2d7d21f3342d7647207150251249d45358e8224a76ef6522d46455918d51e6fa38bfa15768c60339dcad5a9f4c3317c0ccdc91584d1df02839b59b03d367a5715a79f82e168882a6f6c9c8e5a67174b03232de59d4cbeb074c14d9acb145afb128f655a816b080e11b0df6484967dc9aaceb054a9e5c4a25dfacae71ef338403e074e221901d2373885086cb8064cd52458a872d1441095b5eac2cd81cf875d41baa37659b0361e282cd32bd71780a03c76d609133d3c6f0d766a3f0b6e5160c0d03ef6625a1cb18a786b1e3d4095b3a08a48d0999e3cfd075064b85df55f2923567828d33517e7e8332454044cfe28c892e922e68b873f7eac25aa51eeb7523dc25e21a1d4a0fcb524afae63cf642417217a852ef287efc4227e9b65d8e3e07d1eee38cf751a6ae17fa24ef26934777aa2882db2a4c54c5552400391c2e131fbbe6e35028058668c8632dd2888fdb1b329ba8ab254ace2b9e9496f1a620c8b8b5113153025e33c6710df669e09913b75b3124066d3e752be3fc993e185081de95413e4efcd59d2be9f1f12be04a49e23045f2ae3af6d6dd5d897edb47ff21d70b271bc1ff8fbe38a9be8df78694c9f06d8d0d94a6f81a149ce068dc88962c28538cd79326fb6ebbbf2b9eb0d275be9b80da63110c5c117c04f7e865d9d0e6160b02a51a4bbfa489aaf3d2bbb74254d4fc62a1d036e11e01f11834c32b3792edd603900c7640522b5ad243b29d8fc441fbdad044c313f491bf4d0d92db8b560cfabff6b736b464dc1a230bccc75123c0a4d80d6dcce2a796ce8fed84d78cce8839344dd94b9092df92a914a5a6f9726a7b0980444c79735f7b858a152c975b0999538fdcd89b92ee9cefb9a93b7b7421a1d75ba7436880072ac69f83bac6934c76fd898dcc717751d93e9be57130114eba27998c6bedfdd6e085f4c49386bca45b29740836bc9dcca6256f244dbbaf530ae980f08ceb970a4d826b3f3d3546f1e7c235234426da35229229b1436531d91359d776ef70214e676e9d8de456789e0f63fcf32f2fcf9acc8ac269c9a6232ca1922fba5b541a0335d6cceeb42d16707e33c73cd397c3a0ce24d6a53b353b5a5a3795c4e03d302a91fdc3f998b39cd244ea41f6e68e2c9c187030e19b37c55eb188c88f9a0685dae266a8ea22bae45927266541bf4a612bc914d03254b91958b7cc63b591be877da2ec4e32911b1d4f905e239d8e5c44c5aa756bc70c6ed9ce2041a67e045798d41586a517377a83460f846452f8e91698024fb6c517023e3e75f8d8b3da2037cd76da77b7138550cc349e78c291f256c53a0e577d546fa1ee4004d49a5305e83b603d171545157465643b3c824fc0b1081843eb4bd851eca2230cc8a261ba51be32bbd14201c443c61a52a7d44c8d9c0a3f59997dd82e39a9e3021236ea050d2d234b650a68eb7e2e53bd532f4a1a8cc3c1c3ce52837d1e83fd8cc86e35eeac608137005e3c685e8ee732cabbbf4ef8f0562fae956f564e1caca8fc4e53f80b309300d609b2824ed16057a3134e3f8f2fceb422602c778ee1bbc8f79c22dd4c5243fed7fb69e7a7f05c47d8d9f5e4e9e14fe59febc2555d182a60a2e7b183ee0412b7084752627bd48d16f8dc336933b3f720526c695b3a271e1df23035a080e527f0d48d52e68b7872c2d123436c00c9768a7f1db186efcbd5b4e3c43b0552d14ac4248414b0783a42d0e0ad36e5f3852b1ae65391ba36153cc0e380ebcfc8dccfb7c7a6126c9e639fac999514d90c2bfccda043721213feeeb4df13c14a647c8f341e2d0394d294d2580b49f387d1b353936fb2c5183f8817d3aee01ae125d9462c030c88ca6f054533b00c941023cef2aae844c46d4172e7bea9ba2ce09d605ef4bc92ece8f45e7fa99b2b7e2292d8bb566aa0afd5aef0639011ff676942c5069aa3d68d43e70d148305cb33e67e1b771aa41331a4410227f10cb917260f7adf13df379f5e28a2026b578976dd1f07744399a37e18c12c5c55a693e3b8431619a00b74264db4614e845fb17b96cb49f9f82229466b3e4244d57863e2caeaa2b5c5bd1039ced57f29f951712180cbfd47b68c31f3ee7e997ce84ee504ceba090bd0311ecd1500469aa013dc690168ca2b857ddfa851aa135b785f74b64ba682057485b4c8c3de479d6677710517109e8be7b1729ca5831399a7f25e4edbc332f06ba9b5c8397ea4c35456fda1cbe93d1d3278dc5d756c92110ed612c7e6cf5589c4edea0807345cc48e93f547c8ebddb9f87294c02591d86092df86308b4fb6232060d38b2e0301adb7bf5b19f42c0489d5ed2754acc6e599dcf13bb9e046ff527878e07b8f332835f1adcb08101766aa8da84e8ded7bd54afeb9aa81810eb3084b4c4b25cde92284ff69f5d373e811ca3c0138ecb52e702a4620828fc8e90f48d1f48b10ee5b9a8a1daf6d48ccac3a8754b1806697e600e0cce102f51084deb44ffedf936ec20cb075c5814e3782b22a5d3d9a79073d1e648cd1497ceae690ba0012cfc534c91cd52d9ca2e1b6141d0d8592363ab78eb4fc802bb37658e95b63af6bc62315dfc6e37a5529434260ee4dd7be3a6fff4fba65a7d441cd69a8b8f5e5d88b48fcd80c3eaba3eaebd312cb232a075ffc1c062311a4a1543fac457b11d725752993ba64316bdbd30d023ea34993d326ebcab61bd55c98da3c3ece73318ce276f1c4b10c1949e9864cddae39aa3bbc3d4ebd011be7deabd9aca570755b671f9536824bfb7ee62a38cd1459c90972ebfc20d4bd4db295ffd05e1538efac6e128f7cd3c243f42f1154680ee3612aece4253052f0828c96d6c69458478c4d678c50de8e39e96b385557e01417f9214df37df7559b1f615708a93a924d9b5236d264e82e688ba2c33e4de04834e088dc29593b03770df24d907e6dcb58cae3cb95cc041037b8ae4df24d3341553011f0e15eb4a1af5cae325f59f8fd4b6bbf7ef58b4f6f46e95b78833e433534d33d73c481dcf20f34849e20593592551740a8decf23db63a3898815a76c504bd062c34ac21baca6530b23c929aed0352f0ef2489c60696f7a702b5939a6267ceba5a96840eb5e56c31bef5cb06d1b3338fd9825c545831ac6a97ad4f3a198822a6ecdfbe0bac85bac8d5d6c5bc31dca7ce96a45762a24d56b0572f118c58b19c1c49995673b43b95b20e66bca34af0e36d9a3cd60b5647b25743962ded7abbef119f5b61a3e5a6383e825e3d6d8eec71f446e99184ae1771f1eca4cdc1c22a418d7546ebe19179e92d1c245ce15c9587cb17c683a47969e012aa1bbd94b1a05e01f954bfc63eb1018849050e75db81f097f10cf74cd77ad5fd174b4ae917aaf75c9fd196e928c8eaa762dc2ff2829c5efd44f4289b5a50fe5612040010f49b0639cd2de1887b1905f24b43b8bff55abae80cd8a6dd7fb728acd614d0c6b0ebf8207cc2db89baf24d421456c26a24ede72d07e35b03cc36a956fbfd948837fe7566205f822e14ba62c6b4bcf14a0e613940294432573742c8c176830795d02c0140fbd913141e140abc79d4c2e5793fe4a4da70f872bed4fd2a5096cb7a7e3e9b87195e01c1eb77f630420120f8347211a58398aec9c8a55e269125db0eb31b7d1912f6abaec072f29b51e9babf154115087eae3ea92db5a92c2e316aedcf92b826895a2998d37192a980168503192a65247abe62a8b9cd57c50dae730fc75b14057728dc7c969960fb6da1dee41df1602ab9b61019cfb18306eb47aa2485d0a4eccfda87d8d2cb30133f29faecd6814942e329fe329be693fad16016fcd5586bd9e612c3f0f865721bd2dbb450ab77a7f01fc587d28e298804ca484af5cd7221be595ff11a34bf8ee338f180edad99627fe40d41bfe45ee30b580f33c64ebb776574d565ed219c838b0e191df4a9232cf075859f19bb05bb0d621d6f354d37fa4f4b6e7fbe581b06bc201b9d9d3db1be651975a259f397e29ded814b4a8067290e7541945b5f837e23fd56e20cdb6aea13cd7a695dec273349ba73661370b16d6ea1d521f2d4c377a792eae4b5eea2f042536f658fd095d8d63fbdf3ffcf083c048fdc52584ef1fbda233b0bf1fc394f6aef18bd7a94089b5da03b63a11e5f8ed561a5a7b193b8deaf3b4838f6ca0d9bbcb3438ef142b2edea3efcbeac8d3483329792f02cf39d7eecffefd5f27ec5f06cd6ed6f9b6bde6299671dc4cbfb92c437c1a6bea0ab68d0ead0fa4add922c6f66b281eb5b7b230590f739128588b3d33fadd595ccc8ea413e4f10cf3920f9a3844e1ba2d5944a49699fdeefdee0a15399c3511f5a0bf847cf64348794133455022296623bf4f17202a9b493d59ba317eeb49b93c704665e974aeecb49bbb9a74242a798cbae1844e4a704fcb238ecabe5ecd08e7761f6d3bd1e8d58ef43556647df9a47d0c7d1fdc84e5e6562e47a3a19a0552140f7d6d61ad760b63871e0adcf9d3ea62afd9d188d0ffe39cf1d695262619ab78dfd86a3ed376afa88e223580d83a05ec5773ce50ce0a625f88972342516ecec6272d55c7df0b40fd7d6f2690df10a3bb9ea4b527c8b62ff9d4d92db7795a35a0624ccd9c03b4601d2cd5bbd8dfde1c08e523e7fbc328b1ec0ae47092f414a6abe26ab3644baf225f906d1f6b6699c0821b36ce5229e660d94818cc39997021cab4b16661c45443f8b468891635f4b239d73840d1217af3a450634f2be5213b0a6fb73e4ab043aa2417f0e22fbfc064b7815f761a6a67ea50a05232f2c17a894ba6831a3430dc509a5e555dd217b8bea398d2cf445ca8db2a6274da4b1a64f58affbde9e1de3ebfb9314a2ef438f52bf14d8ea64b3ac12ab36af9aef13113199f5ae6bb115e3e20b152a077d2fdccaf8a3b530c05e60ad8e6b4a4f81f9d2a5932388eee477e7c55c14ab89c487847c6cccf84bab9c2bf4a3ced012f6f8da53528aabe61575a79764ebd68d0dca80532dfe1ec01a8a0baee710225c312f23a5a3543730ddaaf46b71e8ce39f3cc72c04bad7114856531799eb32d9a149e5969c8fbcf2249d50274588c6a71e99a7706ad7879adafdd2a0a102b2e1ac0630a1dfbdf06446eee0c528cdc61659ba5303d7f2bca0104ebe426b03af5423dc0d191c304626725b0b765b7c603a8a76d47ca7e2904b19b3321eda3ea4748ef90728ad5f631c4ec687a4221c5da8c4fc748188b4d916dd137c277b187362c81a3df1319b38b3771bf92676c56f046dd31caaa0d381de350682ae0a433f1c5ed69f05b425a9a98edeeebc98cc1c0a08761942a866b0576a722d64d28408ed59364eca5cd6493ce6682fce22d15bf7dd28427807e5017c4732573e156825538ff6f6537d12b74b2bd41e4f627c9338a59c4df826b1a912c3dbe512a640b5b025f1aa95f32be72cd828629314175a5969805989513a337219ed5480211961f45e98f4dd10cd235436deb133beced86dba8ce54ca9c4e0d760091692b132b137a94dcff9afba5d6f045cfde0a1fc70cfc08a76cd9c376714789c416c50a3942c7424e6f5465c93f7acdd0875168fa72e8ac4eeba618597a3ee6f417b497380acd3a91daf8bf76b18608d56274c9208569288daa1a9b2fbafcee183e3771617a1f72f4da5f647569b1365e2d24869999def758e5ea94cf779edeb87c9e7fa41f65523db0ecca723993949b1ec1e04cf36e2912b7abcaa64f088202959828cca0ae90e3c5b1762cbbd8da57178ef67099d258cc3a5ddb965c35111def63517218c5843c7a62a5f3f975942583ad3f0f851f99d397062c2b0a2e69be7acd0011889c8f6258eb1fcf995c97466cbcfdf8232d1069d27bcf1b925fcd6989fa4c1f39c80adc63f82ed38eeb21050cdb03e155173707ad3b386cba5c6577497ccd4d51118a520125d58298cb2c9c386f4174ab3c61c9551cccef66ef47f7da978c8705435bb65cd7851e9de91ce3569480f8ad96726acf5a247977b661fd0c22afbe72c329fa1f7d2efd86e0ad958de60d851a217cbabf5878792704e4584bd11eddd2797f79e3cbd0c69463f7590a9e644a205f2caa463c2a5be00adb5702d05926698511f835d16f45ddc0b8247a01ef19138dd05b9dc2f984001c30f537bbc2f846773c59277cb8762f4a23fcd77c351212a0371856f0cdbb7aa0a86a72bbfdcde518847679546abff970b15690a7e2bf9f6b20a6e2c73b37840c821b27c34f4321128c75a1a39743de4fa1b25fb1c38f99839cda5edf12bfffcca9722f60d66ee3b421e056dff9bb3a3ce28eb88ae262d3f91712f724d91ca43790749e4a0560ca94bbbfaa51ef0222c4ca6b23c7851362be11b080f9258294ae8a860e69bf947332736205cafffb79bd863ff71bf9acba7b7a96d3d2f3a04510a4b46a981f404c6c7fec0f2511b7f3e4d57ba9a4cb81c67eb85b2ffc155b057b681f0d91c66f175ae107a2f5a2dbe1f8e04ddbcc00ee8f9202cc12c0f11a32bbe8e65bfb6369288682aaab02486335467a6e29ce555cd73dd02243cc4c30050df2909b4710448774dde8051163075f0f3bb73c52f8e13c0e3b4c1233fab9b88b7356eec974935e205ee66868e3f7005e53a99a2e33d91589eeb6c38d49f388ef5d9125b123ec451db0074d04d31c2583e22d2f6e605b7e7d87b8e6730b03e993fb5d5bb8ac6aff636b7ffe16e462794b7e0d219c32288ddb0e9e2b797d7161f03e54556fd6bedb7d8a75b8afcca46db5a38751125b14abba3a20ad4e37ba57ef34cfacb4695ace34cd8bcca9659c6b71acdd23bc0cca8cbe25c4f8dc0478a73becb013263bd0c522351522a51ab344226ebea38e9a640599c5b051c77f2a9243e5ec707b8a73b1b98c123941ce880ae05166cc59708d9aa5314203238b6f68299eb63f389c27c656b7b3ee2482d0940c56fd2eff913093a41f24142f7d53122a664e97958952764e06611d8189d87a70afed58ddd288212e8becb961fcf41341539b556d268a5051e316338bf3693dacec350d5ad3469c7c3616f81ac04dbcddfe64d92d3c557402f4011d513304749afa9c053e684bc6201a5e47394e687efb6695c060df634b1a40a041b2bd4bb103b29e1628ef60427847d954cb5fcc611737d2f837713ed8dd9a910096f961f73a6ded5a8f274d43e547c4a095c609c40be64b17391cd75f486dc026d7ee374d6197007798399e8ed6d2b60e4837bf51cea86d2863230d96890bcb7b51b2f8d81883ed086a2834ef2c406ff53ce20398afa4bbfeeba9bcea0a91407724eb7f543da5386afaca52a68ea1d7bff38f985c0c1b649ef55eb89b84abb229c70b5f4bf278321a987408f4790a19220e9bcc9453570bd8bc370b1ea3d936fef1c5323a8daf8d59bab9fdc8307436d27fbc0877303d778c1daf5abb6a5", 0x2000, &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21:41:15 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x19, &(0x7f00000007c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "fad614edb0727b781d6010ed776e652f"}]}}) 21:41:15 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x2, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:15 executing program 5: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf) 21:41:15 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$ppp(r0, 0x0, 0x0) [ 1207.667863][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:15 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x191) close(r0) [ 1207.727666][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:15 executing program 3: prlimit64(0x0, 0x9, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x183, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 21:41:15 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xe0) [ 1207.858204][ T8585] usb 1-1: new high-speed USB device number 30 using dummy_hcd 21:41:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000076000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:15 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 21:41:15 executing program 3: sched_setparam(0x0, &(0x7f0000000000)=0x8) [ 1207.990573][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1208.072203][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1208.138309][ T8585] usb 1-1: Using ep0 maxpacket: 32 [ 1208.368986][ T8585] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1208.580736][ T8585] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1208.598185][ T8585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.606231][ T8585] usb 1-1: Product: syz [ 1208.613164][ T8585] usb 1-1: Manufacturer: syz [ 1208.617795][ T8585] usb 1-1: SerialNumber: syz [ 1208.885957][ T8585] usb 1-1: USB disconnect, device number 30 [ 1209.658078][ T8506] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1209.897940][ T8506] usb 1-1: Using ep0 maxpacket: 32 [ 1210.098172][ T8506] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1210.268452][ T8506] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1210.277600][ T8506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.287209][ T8506] usb 1-1: Product: syz [ 1210.292097][ T8506] usb 1-1: Manufacturer: syz [ 1210.296708][ T8506] usb 1-1: SerialNumber: syz 21:41:18 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 21:41:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000061000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:18 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x0, 0x42) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000600)="bd38cffd8d3895fc4b08cda11b89979abac6e8c0aa860480b95cd889f018181b99f0b6cb3204d53f144bae2f4768b4af902d47ea3300e9c51dc78bdb92c8bead490fbf6c20ce50b4ed8ee72794037f3e6802c75008182374d910be59c648e43f963aec030063eee7beb0dc996477295bab20859cc9cdccb5eb70b76964280e437f6ea0df2b51091cc0abcc1cbd0c406461ac3edd07c5993cc0eeb911e3d05faf32f051fdfd1cf60bc279e3fa5f015327f8d8763980231e013c7fcbb76f80ab0cdb7f5f7d2cfa9e9defff9cf8b9021d1c4dbf0f247505fe9345286c86dc41b2377f841226bcb5d69e21d0110644305c54cc1e12f77a2fcd73f8f5c7d6878f24993959b8d52d0d2f777769602057eab6fac164f7c0ce3f5ac47f8731565eedcbc83bdba7f8abf276a2481261386ee59636525c685709c2966b752130d37051150080c59cae210587c6605c5806116e83c6f0957d5ea961ad3fb3f335d3945403f73a577446a05927a4a418d4144b23be49cf5c07315f9d04290d2b426a8780f575acc8afe3cc5e6b4fcf2d02783f5b298ced139d1b1f8fbc84dbdc40cfeeef924920c46fcd683857bfbfafa6100d745dcc1873babfcf6b23e5f232e4886b771b648966b9860cac53cebba267145c61ede3fcd3dc9c6f2ab33c1f151e665c64c79fdf296a5826378775d09ae11c9d17e955bb47cbb49b65b8477279eb2f381a3c65dd70819c7e8aeb12012a43b7eeae660b29c3dcafc3fd840d70d030929cd1c471521ac97da3a373b67e090212fa22e4469e2fe205c97d8dc0e40e98916b56179fdb51f4aa6f6ec3a475ae04ed97810798585b2051d46718db249aff5dda4fec40ffbf930b963f5df9478195515d2ceebdbe23181ecca5dae1007ca2c52d643f573a8527393534dc1975bb5b89d23c3086a3f3b2e3e4b62389165a099541fd09739bad80beea6f44a912c303d5d26e2efb4be81478e68cad30d07d086d59f1b4f3070577ba22bd53e295cfcb490094d3c6850e028254d8623f3e730bcc3d6ba46c519db207ed784673e7ec32dc739cc9284b1e07721ebf7347638aabc4edfcc61c460c45c9d092717bc156734a318b41353d53a901c09d8b2792cde1b2389aba428b894009aa629a740d0cc9ea95baed1231613e3e82a236b9dfea8fde53ad5a63cab1559ebb9f1caf91f514ddc2c7abe4beee496fda3de1bc993c848c7cbb1b41f111314d5e03de904585bb5647904aaea4f680614bf104dc8078d8f33f28f52999661cc311434722f462b510aac49a92b4a2dd30fbcca0513ba58fcbdbe73db04c3fa2d3e86c7c83e56f611a04c4c4f908190b2a1f98aff89d48969829d5666953bf2eb5d10e305149a4925491183b844f0f37d65827e7600dd83953caf50a7f8f34f2cfe1bf28316d41ec4b2766f79180eeb9d197aafc214f28bb20cb06e5e9ecbbeb70ab757f33f60a9bb8394ac9df8f00cb1434f47763ada6dfdec24df0cb9bf6d9b6ae146b47cafae13d13257db7156725af335d9fba8a2c73254f5c59cc3c9cba657509170753c0072cf53d0315aa9665f10473e78e287d254df7fe2c88543f8ac8f9c54fe3e6dcf4733be3c74504cdc0f54be3114e61751857270b029dc96e732304bea782e5828bd216236f93597b6be5409e042c318df42067c26376e3a94d4c9ebf7016ff3f92274de27f960c6c90763b0047a11ee4cc3b6af105c3b99b25a26a7c91f6793299f3c51892248c6bdefb5bacf031ceec69bfb8d16f760976496c0b35405c1c68610c90fa7cad734218d68505483e8c76d72d4931d9933e01aca341db540fe453fe8e8efa0130d20133d1fc58a64fb1ff78f4aaed3dd0e507bbeed288d60d3378f0df73951476d99d792d8f1053aabbd5c61fa8b892ce54c86f13287ad187a7bc08e6c11885a4ea430ed825e9517b92fe85f429bc594922f05f358375efa9e49bc857d939336adcfe414b6584ede2b0c78e2d0ef52552ce45d66a57e6581e5b2a60ad11141d33ff08adf6c63b78876d7561de8070863a44af1a27855c4e9622466ab6e712a622642d182789807b0a5284cc0fe3682471a73dbaef791a918d27da3b13ccb5a0a9ba39fd70936e58126f5126d81cba412c8aa92ff03fa2cfe49383fd148353632418e7a74439ab877c02ac343cf3cdabc8ed1516004202892eaded90dcf10e2be2ad4a2bcb3cf0d4f2577bec2763f46355f000b705df2ca9f0f343530a0de6718de01cdd1315bae9e4e56dccbad57e15a3abcc6c5aedb742c1eca721ee85a04912bd0e9a07be249c21af63ddd3eca6027160d6b3ba4ea41d47852db7be3ef29ce94aee049429fbd99c4fc37a8aa4c904ce60b5b4f05fd1ccb7dc9205a2538bad3bbaf4f50ac8f6a0e24acf4faf0a6ae159d0b96d23ffde43cb4775a2571c838531d1aaa01e9b6deb7613479362b4149bfb62eff511edd96461e647f807f2aaad293e683305d28b69f2033f31621fce5269182e5d022f3bf13e95fa243cfc8c4d9aa7f68f6f8f43cf007188a364d6e7c947cd66334604aac187bc94d3821f7364b7357e8c51018aa3a7137928fbcdf7d1e47ed2ec9647cde74d24f16fb13ff619f0c1cefb12b1cf5e77dc5d020cdb7c5c7b042988e8485616064c47795cb4512b88e5c3a2f25f36f5ce37c4d56b1f5f34881369b2dbe312348174adf16cceeed7d47393a7b012f4f3ce47fe2262ac7cc381f005dcd61d00080d143fa3ee1fb93fde6cd9e34400b37c878da2b2ae5ae55a02032a071d84997d489e52b611c88f0fcc9dde92930c5059d5cacc69cc1475cca72130df24938a16d012dc9f6c9be87e77f9a43a5a96dbbc1528757506fd18fd7c6e15d28aec2aa9c41c63ed43773d025172c524243da7c25fb4f6d9a4ad82c69249c11e14ccdddaf146dc3e8b777c0a2d74e58dbdc77fb4140b88a3b6ea44e40bf5ef6d066b9217ca814e8df5b06ea18c1e7b438004a0e0569f4bc98c6b8122a49af0bf3ab581b4f2fbda72865f3fa17562ac6dc294cfd319b281836d2a5f1a199efbc3e4f4e865a3bbc8a0c7794a41e1d23f35eeccb7048bfc61d555603244c7d52b9987ddbce5e7119b082f481e0aa39dce19f29106e4ee7ae1f9786c355ceaaad934d1fb4374682faf91374ea4f817109d31c64220bb2dab7c26a3b8ca016fa25199e0372998df03818ba8beb05e169525c5091f6c2666948c664436a0b7df2dae949a2b629398a82e18c892aa53b871631f9b818d0df4946c13f8ad5996d20be0e8240281720ad4574ef52832b4973ceae0ba81b853ee39da3ef39f13786c1c69f77b972be09b5c04909661986d237328f54091d4841a0ab3b0acc302d7b9ba7c7d72bcf6df7551c388c518b91cca9b29604e7e8481267a9f3e486d28866fdb96f2726c55568fad8603a3e18e1750972a4dc46e9790781de4c36ebe4a2fc0b4bfd57dbcb404297c6c12154c7a220596d13d4b573b34c24514a7e4aca5990ecc26b66148a80c3135f43daec997be42ae4ccb9308f111ac2d041ab097822c0c81c27914d976a12fdb9de8f5918f9f75034a01acd52bf8e0dd25e4372482314f1c72fce30a28793ba5377a86fd767e23b911f2954ea7e9213b5adc73adecac57e2", 0xa01}, {0x0}, {&(0x7f0000000080)='^', 0x1}], 0x3, 0x0, 0x0) 21:41:18 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_ATTACH(0x12, &(0x7f0000000480), 0x14) 21:41:18 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:18 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(r0, 0x0, 0x0, 0x8) [ 1210.549837][ T8585] usb 1-1: USB disconnect, device number 31 21:41:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 21:41:18 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) listen(r0, 0x0) 21:41:18 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/kernel', 0x0, 0x0) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x8161, 0x103) 21:41:18 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x12, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b71, &(0x7f0000000000)={0x2, {0x3}}) 21:41:18 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:18 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000084000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:18 executing program 3: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffffe) 21:41:18 executing program 2: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x38) 21:41:18 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe) 21:41:18 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @val={@void}, {@generic={0x4305, "e3c82e442667d8962afeae16eef4d15644aa504386316184"}}}, 0x0) 21:41:18 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:18 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000082000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x4}, 0x10) 21:41:18 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) 21:41:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000060000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:18 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:18 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000006e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:19 executing program 0: munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000) 21:41:19 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff}) syz_open_dev$vcsu(0x0, 0x5, 0x480140) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000480)) clone3(&(0x7f0000000280)={0x341000000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000080), {0x1e}, &(0x7f0000000100)=""/53, 0x35, &(0x7f0000000300)=""/165, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) 21:41:19 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000086000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:19 executing program 5: clone3(&(0x7f0000000200)={0x40108080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 21:41:19 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 21:41:19 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:19 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xa5d49f8477ba7577, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 21:41:19 executing program 3: r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) 21:41:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) ioctl$KVM_CREATE_PIT2(r1, 0x8070ae9f, &(0x7f0000000000)) [ 1211.811885][ T8715] __nla_validate_parse: 8 callbacks suppressed [ 1211.811905][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:19 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) [ 1211.915696][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:19 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002640)={0xffffffffffffffff, 0x10, 0x1, 0x0, 0x0}, 0x20) 21:41:19 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200ffff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:19 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x12, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1212.299606][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1212.398837][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="d8"], 0x380}}], 0x2, 0x0) 21:41:22 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x6, 0x21, 0x0, 0x0) 21:41:22 executing program 5: bpf$BPF_PROG_ATTACH(0x6, 0x0, 0x0) 21:41:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) ioctl$KVM_CREATE_PIT2(r1, 0x8070ae9f, &(0x7f0000000000)) 21:41:22 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200ffff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000083000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1214.975911][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/220, 0xdc}], 0x1, 0x33, 0x0) 21:41:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x4001, 0x3, 0x2f0, 0x150, 0x0, 0x148, 0x0, 0x148, 0x258, 0x240, 0x240, 0x258, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x0, 0x0, 0x0, 0x7000000, 0x0, 0x800, 0x7}}}, @common=@unspec=@rateest={{0x68}, {'geneve0\x00', 'ip6tnl0\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x38d) 21:41:22 executing program 0: munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1215.050415][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:22 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200ffff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:22 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000009c0), 0x4) 21:41:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) ioctl$KVM_CREATE_PIT2(r1, 0x8070ae9f, &(0x7f0000000000)) 21:41:22 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000740), &(0x7f0000000780)=0x4) r3 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd3, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1a, 0x49, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x81, 0x8}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x350, 0x2, 0x80, 0x40, 0x20, 0xff}, 0x79, &(0x7f00000007c0)={0x5, 0xf, 0x79, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "3e32c840e67be88dc2e57f0a07cbe824"}, @ssp_cap={0x24, 0x10, 0xa, 0x7c, 0x6, 0x0, 0xf00, 0xfff9, [0xff00, 0xff00cf, 0x3f, 0xff0000, 0xc000, 0xffc000]}, @ssp_cap={0x14, 0x10, 0xa, 0x1f, 0x2, 0xcc0, 0xf, 0x5, [0xc000, 0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "fad614edb0727b781d6010ed776e652f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x0, 0xfd, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x2, 0x3}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40b}}, {0x1e, &(0x7f0000000180)=@string={0x1e, 0x3, "fdac33bae30200a394fd0ca7b8dafbc88fd30370713265a36f1a7627"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf0ff}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000440)={0x14, &(0x7f0000000300)={0x60, 0x3, 0xff, {0xff, 0x22, "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"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x20, 0xb, 0x6c, "438138d0ba9fabb1c3aeae8d7ad035b142bc177baf5dc75cded368354507feab3d92d6cedafbff1e065e5e40ded79c8bbdcb06261d27e43a1f0039c64f105b097cb5f26860d526a847957d4659b345a77c26b9254fa164d8e17d022c4a5d899b7c2c3c6d97a8547bf1b8881d"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x8d, {0x8b, "1676fe3e4db6dc7215050a008d6f79958772ab1660dc6115005aae9dd870a7fa54fdff1b997e8abc36865d02f7b75f69f521ff436c65e9160754c15689663c3b0458f28a51551d3e6214f375d1cc7697a9ce9f6549ac54f3db13e1fa25ccd8c2cc28052feb4bc354c7b47c9bb5cdb5e189b375f0c44fbfd59eab919939a2d353761023ea3e4d5a854f9996"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x3f}}) 21:41:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b61, 0x0) 21:41:22 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r0) bpf$MAP_UPDATE_ELEM(0x22, &(0x7f0000000a00)={r0, 0x0, 0x0}, 0x20) [ 1215.384750][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2302) close(r0) [ 1215.452437][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:23 executing program 5: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 21:41:23 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002001032", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:23 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000100)) 21:41:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) ioctl$KVM_CREATE_PIT2(r1, 0x8070ae9f, &(0x7f0000000000)) 21:41:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x1}) [ 1215.737694][ T8539] usb 1-1: new full-speed USB device number 32 using dummy_hcd 21:41:23 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa181, 0x0) [ 1215.778337][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1215.815286][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:23 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000020088a8", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:23 executing program 2: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x23e09764daf3fb04) [ 1216.139044][ T8539] usb 1-1: not running at top speed; connect to a high speed hub [ 1216.228320][ T8539] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1216.257606][ T8539] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1216.297923][ T8539] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1216.467564][ T8539] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1216.476727][ T8539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.490806][ T8539] usb 1-1: Product: 곽먳ˣꌀﶔ꜌죻펏瀃㉱ꍥᩯ❶ [ 1216.500453][ T8539] usb 1-1: Manufacturer: Ћ [ 1216.504957][ T8539] usb 1-1: SerialNumber:  [ 1216.532944][ T8833] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1217.022060][ T8539] usb 1-1: USB disconnect, device number 32 21:41:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000003000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4188aec6, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 21:41:25 executing program 3: syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 21:41:25 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 21:41:25 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x0) 21:41:25 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000020000e0", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1217.583302][ T8899] __nla_validate_parse: 2 callbacks suppressed [ 1217.583322][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1217.682441][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000087000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:25 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000150001000000000000000000020000f0", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x1000)=nil) 21:41:25 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1217.867523][ T8585] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1217.875257][T23197] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1217.932419][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:25 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8864}}}}}}, 0x0) 21:41:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b60, 0x0) [ 1217.980190][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:25 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002007fff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:25 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x204c00, 0x0) [ 1218.147613][T23197] usb 6-1: Using ep0 maxpacket: 32 [ 1218.152896][ T8585] usb 4-1: Using ep0 maxpacket: 32 [ 1218.252474][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1218.290703][T23197] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1218.304612][ T8585] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1218.332343][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1218.507472][ T8585] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1218.516657][ T8585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.524835][T23197] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1218.534014][T23197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.543036][ T8585] usb 4-1: Product: syz [ 1218.547936][T23197] usb 6-1: Product: syz [ 1218.552118][T23197] usb 6-1: Manufacturer: syz [ 1218.556716][T23197] usb 6-1: SerialNumber: syz [ 1218.563110][ T8585] usb 4-1: Manufacturer: syz [ 1218.568906][ T8585] usb 4-1: SerialNumber: syz [ 1218.837050][ T8539] usb 6-1: USB disconnect, device number 80 [ 1218.864790][ T8506] usb 4-1: USB disconnect, device number 29 [ 1219.627223][ T8539] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1219.634897][ T8506] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1219.867259][ T8539] usb 4-1: Using ep0 maxpacket: 32 [ 1219.877485][ T8506] usb 6-1: Using ep0 maxpacket: 32 [ 1219.987287][ T8539] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1220.000814][ T8506] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1220.167419][ T8539] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1220.176506][ T8539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.184969][ T8506] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1220.194326][ T8506] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.202857][ T8539] usb 4-1: Product: syz [ 1220.207623][ T8506] usb 6-1: Product: syz [ 1220.211812][ T8506] usb 6-1: Manufacturer: syz [ 1220.216437][ T8506] usb 6-1: SerialNumber: syz [ 1220.221281][ T8539] usb 4-1: Manufacturer: syz [ 1220.225906][ T8539] usb 4-1: SerialNumber: syz 21:41:28 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@lsrr={0x83, 0x3, 0x64}, @generic={0x44, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) [ 1220.488912][T23197] usb 4-1: USB disconnect, device number 30 [ 1220.496326][ T8465] usb 6-1: USB disconnect, device number 81 21:41:28 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 21:41:28 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 21:41:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000000e000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)) 21:41:28 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002009eff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1220.663591][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000086000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:28 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='t', 0x1}], 0x300, 0x0) [ 1220.741272][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:28 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) sendmsg$tipc(r1, 0x0, 0x0) 21:41:28 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x0, 0x42) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000300)="a5", 0x1}], 0x1, 0x0, 0x0) 21:41:28 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200f0ff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:28 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) 21:41:28 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, 0x0) 21:41:28 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 21:41:28 executing program 3: sched_setparam(0x0, &(0x7f0000000000)) 21:41:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x40) [ 1221.071975][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:28 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) accept4(r0, 0x0, 0x0, 0x0) [ 1221.153205][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:28 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) 21:41:28 executing program 3: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x18, 0xffffffffffffffff, 0x0) 21:41:28 executing program 2: socketpair(0x22, 0x0, 0x0, &(0x7f0000000200)) 21:41:28 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) [ 1221.407135][T23197] usb 1-1: new high-speed USB device number 33 using dummy_hcd 21:41:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000057000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:29 executing program 1: munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) [ 1221.677230][T23197] usb 1-1: Using ep0 maxpacket: 32 [ 1221.827230][T23197] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1221.837816][T23197] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1222.008783][T23197] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1222.018069][T23197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.026068][T23197] usb 1-1: Product: syz [ 1222.031792][T23197] usb 1-1: Manufacturer: syz [ 1222.036387][T23197] usb 1-1: SerialNumber: syz [ 1222.513684][ T8506] usb 1-1: USB disconnect, device number 33 [ 1223.286954][T23197] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1223.527033][T23197] usb 1-1: Using ep0 maxpacket: 32 [ 1223.647089][T23197] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1223.657689][T23197] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1223.827742][T23197] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1223.836799][T23197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.850557][T23197] usb 1-1: Product: syz [ 1223.854701][T23197] usb 1-1: Manufacturer: syz [ 1223.864908][T23197] usb 1-1: SerialNumber: syz 21:41:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4188aec6, &(0x7f0000000000)) 21:41:31 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r0, 0x10000000) 21:41:31 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:31 executing program 3: ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd3}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, &(0x7f0000000300)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) 21:41:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x12, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000000a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1224.097690][T23197] usb 1-1: USB disconnect, device number 34 [ 1224.168845][ T9081] __nla_validate_parse: 2 callbacks suppressed [ 1224.168866][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000022000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:31 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) [ 1224.238482][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:31 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) 21:41:31 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000000200ffff", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1224.407081][ T8465] usb 4-1: new high-speed USB device number 31 using dummy_hcd 21:41:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x40, &(0x7f0000000000)={@rand_addr, @remote}, 0x8) 21:41:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x400, 0x300}}) [ 1224.506248][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1224.563463][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:32 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000002000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:32 executing program 1: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd3}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, 0x0) 21:41:32 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1224.646869][ T8465] usb 4-1: Using ep0 maxpacket: 32 [ 1224.767883][ T8465] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1224.780457][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1224.799079][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1224.963707][ T8465] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1224.972907][ T8465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.988185][ T8585] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1225.026308][ T8465] usb 4-1: Product: syz [ 1225.032406][ T8465] usb 4-1: Manufacturer: syz [ 1225.057178][ T8465] usb 4-1: SerialNumber: syz [ 1225.226918][ T8585] usb 2-1: Using ep0 maxpacket: 32 [ 1225.346935][ T8585] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1225.516974][ T8585] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1225.526054][ T8585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.535365][ T8585] usb 2-1: Product: syz [ 1225.540368][ T8585] usb 2-1: Manufacturer: syz [ 1225.544994][ T8585] usb 2-1: SerialNumber: syz [ 1225.580848][ T8465] usb 4-1: USB disconnect, device number 31 [ 1226.013081][ T8406] usb 2-1: USB disconnect, device number 24 [ 1226.316825][ T8539] usb 4-1: new high-speed USB device number 32 using dummy_hcd 21:41:33 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 21:41:33 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000040000000000000000850000000c000000850000000e00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)) 21:41:33 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:33 executing program 0: munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 21:41:34 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x14, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000002000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1226.517225][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:34 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000140)) 21:41:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18090000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1226.577090][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:34 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4188aec6, &(0x7f0000000000)) [ 1226.796721][ T8406] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1226.821571][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1226.873590][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1227.056743][ T8406] usb 2-1: Using ep0 maxpacket: 32 [ 1227.176974][ T8406] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1227.351816][ T8406] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1227.361042][ T8406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.374906][ T8406] usb 2-1: Product: syz [ 1227.379181][ T8406] usb 2-1: Manufacturer: syz [ 1227.383780][ T8406] usb 2-1: SerialNumber: syz 21:41:35 executing program 1: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd3}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, 0x0) 21:41:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0xe, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x24}, 0x10) 21:41:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000014000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:35 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x6, 0xd, 0x0, 0x0) 21:41:35 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:35 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) fstatfs(r1, 0x0) [ 1227.685840][ T8406] usb 2-1: USB disconnect, device number 25 21:41:35 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x0, 0x42) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000300)="a56f4e690c4eeb3397d0fe0b07b6d9a6af3a5e6e6a662445", 0x18}, {&(0x7f0000000340)="b82dfc51923215381813b616f531648128dc352658e5262254f441e42b2ff4a29de3eea6fc91b3b8fd4596323bb7aadc93ff45c919b5ebb47573", 0x2000037a}, {&(0x7f0000000380)="471d3115796e056abd8d56f67186656df40901d8375f1d8fdde7308a945bcb9abf48576fa80ebf47e40a1f1eb347ef4d4b5612fe40d2ce9ff1a5916139c5ac9ba9e7d3bfee59719607e14c762b52c237de2c5a11cce1481122f3cfbd2512693db87f5f51267f0c06da9ff7ac95edc9c239278f4dd4a15e0eba1557bdcb02bb0e4c6ae21d0ec2c21975dbf516aedc37a5d3f01dc85b649da676b20761c57f4fe60a25f03fc19f7fffdca55dd8a17c65a1de984e8229796cc396318730cc718bd2f5602a6b95d9c54ae6d0f5bed97161b574c508b9c9b977792b0afb37fb5d", 0xde}, {&(0x7f0000000540)="6685977c0ecc62fa4a731ede6c7b67bd85c256d262139108920e5a9ca741a906fa575d8c8ec8193accd2cc5d3b27203590716741af4264aa8584e08a44a2f23a06a30e93ce1c436cf2c7e433d4d3541ddb487f5d8d7fc0574b67aaab455e58dd7b76c86dcbaa866e5fddca86879e657d6d2d63754de10f1807f5ca81592b6c435e2ac20d873878934d0bafeb1109f8a2a81c2702aaae218e974525b10ca3322d2bc65439d4", 0xa5}], 0x4, 0x6, 0x1) 21:41:35 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x3, 0x0, 0x0) 21:41:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}) 21:41:35 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:35 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001100)={r0, 0x0, &(0x7f0000000100)=""/4096}, 0x20) 21:41:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x4001, 0x3, 0x2f0, 0x150, 0x0, 0x148, 0xc, 0x148, 0x258, 0x240, 0x240, 0x258, 0x240, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x0, 0x0, 0x0, 0x7000000, 0x0, 0x800, 0x7}}}, @common=@unspec=@rateest={{0x68}, {'geneve0\x00', 'ip6tnl0\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x38d) [ 1228.226657][ T8406] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1228.466619][ T8406] usb 2-1: Using ep0 maxpacket: 32 [ 1228.596761][ T8406] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1228.797402][ T8406] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1228.806691][ T8406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.817957][ T8406] usb 2-1: Product: syz [ 1228.822157][ T8406] usb 2-1: Manufacturer: syz [ 1228.828159][ T8406] usb 2-1: SerialNumber: syz [ 1229.348957][ T8465] usb 2-1: USB disconnect, device number 26 21:41:37 executing program 1: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd3}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, 0x0) 21:41:37 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:37 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x10, &(0x7f0000000180)=@string={0x10, 0x3, "fdac33bae30200a394fd0ca7b8da"}}]}) 21:41:37 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000040000000000000000850000008c000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 21:41:37 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x5}, 0x10) 21:41:37 executing program 0: syz_usb_connect(0x0, 0x9a, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xa8, 0x8c, 0xc3, 0x20, 0x2040, 0xc613, 0x98d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdc, 0x0, 0x1, 0xd0, 0xaf, 0x5a, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x7}, {0x6}}], [{{0x9, 0x5, 0x6, 0x1b}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x7}}, {}]}}, {{0x9, 0x4, 0x0, 0x0, 0x2, 0x62, 0xfa, 0xd, 0x80, [], [{}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x1a, 0xb, "dffc32b9d8698dc9fff7c2c55afd820a4d093a9be6d80c68"}]}}]}}]}}]}}, 0x0) [ 1229.932048][ T9251] __nla_validate_parse: 4 callbacks suppressed [ 1229.932067][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1229.995218][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 21:41:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r0, &(0x7f0000000100)="7f"}, 0x20) 21:41:37 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) pkey_free(0xffffffffffffffff) 21:41:37 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 21:41:37 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000400000000000000008500000017000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1230.193931][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1230.227507][ T8465] usb 3-1: new high-speed USB device number 28 using dummy_hcd 21:41:37 executing program 3: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x10000000000000, 0x0) [ 1230.257975][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1230.326611][T23197] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1230.406749][ T8539] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1230.486672][ T8465] usb 3-1: Using ep0 maxpacket: 32 [ 1230.567447][T23197] usb 2-1: Using ep0 maxpacket: 32 [ 1230.606653][ T8465] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1230.616329][ T8465] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1230.666484][ T8539] usb 1-1: Using ep0 maxpacket: 32 [ 1230.696543][T23197] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1230.786983][ T8465] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1230.796067][ T8465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.807514][ T8539] usb 1-1: config 0 has an invalid interface number: 220 but max is 2 [ 1230.813092][ T8465] usb 3-1: Product: syz [ 1230.815700][ T8539] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 1230.821996][ T8465] usb 3-1: Manufacturer: 곽먳ˣꌀﶔ꜌ [ 1230.835284][ T8465] usb 3-1: SerialNumber: syz [ 1230.845598][ T8539] usb 1-1: config 0 has no interface number 1 [ 1230.852259][ T8539] usb 1-1: config 0 interface 220 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1230.864399][ T8539] usb 1-1: config 0 interface 220 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1230.875771][ T8539] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1230.876775][T23197] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1230.891206][ T8539] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1230.907841][ T8539] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1230.926615][T23197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.934736][T23197] usb 2-1: Product: syz [ 1230.939857][T23197] usb 2-1: Manufacturer: syz [ 1230.944478][T23197] usb 2-1: SerialNumber: syz [ 1231.106513][ T8539] usb 1-1: New USB device found, idVendor=2040, idProduct=c613, bcdDevice=98.d9 [ 1231.113730][ T8465] usb 3-1: USB disconnect, device number 28 [ 1231.115578][ T8539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.115610][ T8539] usb 1-1: Product: syz [ 1231.115631][ T8539] usb 1-1: Manufacturer: syz [ 1231.115651][ T8539] usb 1-1: SerialNumber: syz [ 1231.186795][ T8539] usb 1-1: config 0 descriptor?? [ 1231.237595][ T8539] usb 1-1: dvb_usb_v2: found a 'Hauppauge WinTV-Aero-M' in warm state [ 1231.262895][ T8539] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1231.296955][ T8539] dvbdev: DVB: registering new adapter (Hauppauge WinTV-Aero-M) [ 1231.323694][ T8539] usb 1-1: media controller created [ 1231.354187][ T8539] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1231.395742][ T8539] usb 1-1: selecting invalid altsetting 1 [ 1231.426367][ T8539] set interface failed [ 1231.426386][ T8539] ------------[ cut here ]------------ [ 1231.472964][ T8539] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1231.473045][ T8539] WARNING: CPU: 0 PID: 8539 at kernel/locking/mutex.c:575 __mutex_lock+0x9ee/0x12f0 [ 1231.505003][ T8539] Modules linked in: [ 1231.509866][ T8539] CPU: 0 PID: 8539 Comm: kworker/0:8 Not tainted 5.15.0-rc6-syzkaller #0 [ 1231.519146][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1231.529478][ T8539] Workqueue: usb_hub_wq hub_event [ 1231.534611][ T8539] RIP: 0010:__mutex_lock+0x9ee/0x12f0 [ 1231.540392][ T8539] Code: 08 84 d2 0f 85 19 08 00 00 8b 05 c5 68 36 04 85 c0 0f 85 27 f7 ff ff 48 c7 c6 a0 ef 8b 89 48 c7 c7 20 ed 8b 89 e8 0e 54 bb ff <0f> 0b e9 0d f7 ff ff 48 8b 44 24 40 48 8d b8 88 08 00 00 48 89 f8 [ 1231.560619][ T8539] RSP: 0018:ffffc90017336da8 EFLAGS: 00010286 [ 1231.566997][ T8539] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1231.576332][ T8539] RDX: 0000000000040000 RSI: ffffffff815e88a8 RDI: fffff52002e66da7 [ 1231.584474][ T8539] RBP: ffff88807da0a1d8 R08: 0000000000000000 R09: 0000000000000000 [ 1231.592810][ T8539] R10: ffffffff815e264e R11: 0000000000000000 R12: 0000000000000000 [ 1231.601389][ T8539] R13: dffffc0000000000 R14: ffff88807da0a158 R15: 0000000000000001 [ 1231.609609][ T8539] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1231.619236][ T8539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1231.625811][ T8539] CR2: 00007ffeb49d3720 CR3: 00000000703a0000 CR4: 00000000003506f0 [ 1231.634174][ T8539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1231.642434][ T8539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1231.650707][ T8539] Call Trace: [ 1231.653995][ T8539] ? devkmsg_read+0x730/0x730 [ 1231.659102][ T8539] ? mxl111sf_ctrl_msg+0xc2/0x240 [ 1231.664250][ T8539] ? lock_release+0x720/0x720 [ 1231.669221][ T8539] ? mutex_lock_io_nested+0x1150/0x1150 [ 1231.674789][ T8539] ? mark_held_locks+0x9f/0xe0 [ 1231.679864][ T8539] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1231.686226][ T8539] ? irq_work_claim+0x76/0x90 [ 1231.691209][ T8539] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1231.697799][ T8539] ? irq_work_queue+0x29/0x80 [ 1231.703025][ T8539] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1231.709711][ T8539] mxl111sf_ctrl_msg+0xc2/0x240 [ 1231.714590][ T8539] mxl111sf_write_reg+0x97/0x150 [ 1231.719846][ T8539] ? mxl111sf_frontend_attach_mercury_mh+0x9b0/0x9b0 [ 1231.726960][ T8539] ? usb_hcd_map_urb_for_dma+0x10ef/0x11b0 [ 1231.732786][ T8539] mxl1x1sf_soft_reset+0x6b/0x190 [ 1231.739511][ T8539] mxl111sf_lgdt3305_frontend_attach.constprop.0+0x24c/0x7c0 [ 1231.747157][ T8539] ? mxl111sf_lg2161_ep6_frontend_attach+0xac0/0xac0 [ 1231.753845][ T8539] mxl111sf_frontend_attach_mercury+0x1f/0xa0 [ 1231.760255][ T8539] ? mxl111sf_lg2161_ep6_frontend_attach+0xac0/0xac0 [ 1231.767024][ T8539] dvb_usbv2_probe.cold+0x258d/0x2fa9 [ 1231.772547][ T8539] ? dvb_usb_fe_sleep+0x560/0x560 [ 1231.777891][ T8539] ? lockdep_hardirqs_on+0x79/0x100 [ 1231.783112][ T8539] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1231.789284][ T8539] ? __pm_runtime_set_status+0x48a/0xc30 [ 1231.795022][ T8539] usb_probe_interface+0x315/0x7f0 [ 1231.800404][ T8539] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 1231.806148][ T8539] really_probe+0x245/0xcc0 [ 1231.811703][ T8539] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1231.818214][ T8539] __driver_probe_device+0x338/0x4d0 [ 1231.823525][ T8539] driver_probe_device+0x4c/0x1a0 [ 1231.828861][ T8539] __device_attach_driver+0x20b/0x2f0 [ 1231.834316][ T8539] ? driver_allows_async_probing+0x150/0x150 [ 1231.840597][ T8539] bus_for_each_drv+0x15f/0x1e0 [ 1231.845477][ T8539] ? bus_for_each_dev+0x1d0/0x1d0 [ 1231.850851][ T8539] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1231.857021][ T8539] ? lockdep_hardirqs_on+0x79/0x100 [ 1231.862243][ T8539] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1231.868411][ T8539] __device_attach+0x228/0x4a0 [ 1231.873291][ T8539] ? device_driver_attach+0x210/0x210 [ 1231.879087][ T8539] ? kobject_uevent_env+0x2bb/0x1650 [ 1231.884544][ T8539] bus_probe_device+0x1e4/0x290 [ 1231.890009][ T8539] device_add+0xc17/0x1ee0 [ 1231.894455][ T8539] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1231.900979][ T8539] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 1231.906438][ T8603] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1231.908078][ T8539] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1231.920834][ T8539] ? create_intf_ep_devs.isra.0+0x18d/0x1f0 [ 1231.926794][ T8539] usb_set_configuration+0x113f/0x1910 [ 1231.932270][ T8539] usb_generic_driver_probe+0xba/0x100 [ 1231.937849][ T8539] usb_probe_device+0xd9/0x2c0 [ 1231.942685][ T8539] ? usb_driver_release_interface+0x180/0x180 [ 1231.949134][ T8539] really_probe+0x245/0xcc0 [ 1231.953642][ T8539] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1231.960478][ T8539] __driver_probe_device+0x338/0x4d0 [ 1231.965761][ T8539] driver_probe_device+0x4c/0x1a0 21:41:39 executing program 1: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd3}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, 0x0) 21:41:39 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001a40), 0x420000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000006000)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005fc0)={&(0x7f00000060c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="140929bd7000ffdbdf252000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000007f0017fb6aa40000"], 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @ntf_ch_w}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000480ffffffff08000200e0"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000015000100000000000000000002000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) [ 1231.971499][ T8539] __device_attach_driver+0x20b/0x2f0 [ 1231.978009][ T8539] ? driver_allows_async_probing+0x150/0x150 [ 1231.986689][ T8539] bus_for_each_drv+0x15f/0x1e0 [ 1231.991566][ T8539] ? bus_for_each_dev+0x1d0/0x1d0 [ 1232.011573][ T8539] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1232.036339][ T8539] ? lockdep_hardirqs_on+0x79/0x100 [ 1232.044933][ T8539] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1232.052985][ T8539] __device_attach+0x228/0x4a0 [ 1232.058274][ T8539] ? device_driver_attach+0x210/0x210 [ 1232.069966][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1232.079287][ T8539] ? kobject_uevent_env+0x2bb/0x1650 [ 1232.085768][ T8539] bus_probe_device+0x1e4/0x290 [ 1232.093406][ T8539] device_add+0xc17/0x1ee0 [ 1232.100683][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1232.100738][ T8539] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 1232.131437][ T8539] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1232.147158][ T8539] usb_new_device.cold+0x63f/0x108e [ 1232.157877][ T8539] ? hub_disconnect+0x510/0x510 [ 1232.174402][ T8539] ? rwlock_bug.part.0+0x90/0x90 [ 1232.180711][ T8539] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1232.185949][ T8539] hub_event+0x2357/0x4330 [ 1232.186311][ T8603] usb 3-1: Using ep0 maxpacket: 32 [ 1232.191886][ T8539] ? hub_port_debounce+0x3c0/0x3c0 [ 1232.201748][ T8539] ? lock_release+0x720/0x720 [ 1232.207137][ T8539] ? lock_downgrade+0x6e0/0x6e0 [ 1232.211989][ T8539] ? do_raw_spin_lock+0x120/0x2b0 [ 1232.218666][ T8539] process_one_work+0x9bf/0x16b0 [ 1232.223635][ T8539] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1232.229698][ T8539] ? rwlock_bug.part.0+0x90/0x90 [ 1232.234640][ T8539] ? _raw_spin_lock_irq+0x41/0x50 [ 1232.240545][ T8539] worker_thread+0x658/0x11f0 [ 1232.245224][ T8539] ? process_one_work+0x16b0/0x16b0 [ 1232.251248][ T8539] kthread+0x3e5/0x4d0 [ 1232.255328][ T8539] ? set_kthread_struct+0x130/0x130 [ 1232.261316][ T8539] ret_from_fork+0x1f/0x30 [ 1232.265777][ T8539] Kernel panic - not syncing: panic_on_warn set ... [ 1232.272345][ T8539] CPU: 0 PID: 8539 Comm: kworker/0:8 Not tainted 5.15.0-rc6-syzkaller #0 [ 1232.280738][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1232.290777][ T8539] Workqueue: usb_hub_wq hub_event [ 1232.295798][ T8539] Call Trace: [ 1232.299068][ T8539] dump_stack_lvl+0xcd/0x134 [ 1232.303660][ T8539] panic+0x2b0/0x6dd [ 1232.307572][ T8539] ? __warn_printk+0xf3/0xf3 [ 1232.312148][ T8539] ? __warn.cold+0x1a/0x44 [ 1232.316555][ T8539] ? __mutex_lock+0x9ee/0x12f0 [ 1232.321322][ T8539] __warn.cold+0x35/0x44 [ 1232.325554][ T8539] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1232.331822][ T8539] ? __mutex_lock+0x9ee/0x12f0 [ 1232.336573][ T8539] report_bug+0x1bd/0x210 [ 1232.340954][ T8539] handle_bug+0x3c/0x60 [ 1232.345267][ T8539] exc_invalid_op+0x14/0x40 [ 1232.349796][ T8539] asm_exc_invalid_op+0x12/0x20 [ 1232.354636][ T8539] RIP: 0010:__mutex_lock+0x9ee/0x12f0 [ 1232.359996][ T8539] Code: 08 84 d2 0f 85 19 08 00 00 8b 05 c5 68 36 04 85 c0 0f 85 27 f7 ff ff 48 c7 c6 a0 ef 8b 89 48 c7 c7 20 ed 8b 89 e8 0e 54 bb ff <0f> 0b e9 0d f7 ff ff 48 8b 44 24 40 48 8d b8 88 08 00 00 48 89 f8 [ 1232.379677][ T8539] RSP: 0018:ffffc90017336da8 EFLAGS: 00010286 [ 1232.385731][ T8539] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1232.393687][ T8539] RDX: 0000000000040000 RSI: ffffffff815e88a8 RDI: fffff52002e66da7 [ 1232.401671][ T8539] RBP: ffff88807da0a1d8 R08: 0000000000000000 R09: 0000000000000000 [ 1232.409649][ T8539] R10: ffffffff815e264e R11: 0000000000000000 R12: 0000000000000000 [ 1232.417614][ T8539] R13: dffffc0000000000 R14: ffff88807da0a158 R15: 0000000000000001 [ 1232.425578][ T8539] ? wake_up_klogd.part.0+0x8e/0xd0 [ 1232.430781][ T8539] ? vprintk+0x88/0x90 [ 1232.434840][ T8539] ? __mutex_lock+0x9ee/0x12f0 [ 1232.439851][ T8539] ? devkmsg_read+0x730/0x730 [ 1232.444518][ T8539] ? mxl111sf_ctrl_msg+0xc2/0x240 [ 1232.449538][ T8539] ? lock_release+0x720/0x720 [ 1232.454219][ T8539] ? mutex_lock_io_nested+0x1150/0x1150 [ 1232.460187][ T8539] ? mark_held_locks+0x9f/0xe0 [ 1232.464936][ T8539] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1232.471163][ T8539] ? irq_work_claim+0x76/0x90 [ 1232.475822][ T8539] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1232.482051][ T8539] ? irq_work_queue+0x29/0x80 [ 1232.486710][ T8539] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1232.493460][ T8539] mxl111sf_ctrl_msg+0xc2/0x240 [ 1232.498307][ T8539] mxl111sf_write_reg+0x97/0x150 [ 1232.503272][ T8539] ? mxl111sf_frontend_attach_mercury_mh+0x9b0/0x9b0 [ 1232.509933][ T8539] ? usb_hcd_map_urb_for_dma+0x10ef/0x11b0 [ 1232.515726][ T8539] mxl1x1sf_soft_reset+0x6b/0x190 [ 1232.520741][ T8539] mxl111sf_lgdt3305_frontend_attach.constprop.0+0x24c/0x7c0 [ 1232.528108][ T8539] ? mxl111sf_lg2161_ep6_frontend_attach+0xac0/0xac0 [ 1232.534813][ T8539] mxl111sf_frontend_attach_mercury+0x1f/0xa0 [ 1232.540868][ T8539] ? mxl111sf_lg2161_ep6_frontend_attach+0xac0/0xac0 [ 1232.547527][ T8539] dvb_usbv2_probe.cold+0x258d/0x2fa9 [ 1232.552900][ T8539] ? dvb_usb_fe_sleep+0x560/0x560 [ 1232.557963][ T8539] ? lockdep_hardirqs_on+0x79/0x100 [ 1232.563194][ T8539] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1232.568986][ T8539] ? __pm_runtime_set_status+0x48a/0xc30 [ 1232.574607][ T8539] usb_probe_interface+0x315/0x7f0 [ 1232.579709][ T8539] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 1232.585083][ T8539] really_probe+0x245/0xcc0 [ 1232.589600][ T8539] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1232.595874][ T8539] __driver_probe_device+0x338/0x4d0 [ 1232.601188][ T8539] driver_probe_device+0x4c/0x1a0 [ 1232.606286][ T8539] __device_attach_driver+0x20b/0x2f0 [ 1232.611904][ T8539] ? driver_allows_async_probing+0x150/0x150 [ 1232.617869][ T8539] bus_for_each_drv+0x15f/0x1e0 [ 1232.622797][ T8539] ? bus_for_each_dev+0x1d0/0x1d0 [ 1232.627880][ T8539] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1232.633696][ T8539] ? lockdep_hardirqs_on+0x79/0x100 [ 1232.638878][ T8539] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1232.644674][ T8539] __device_attach+0x228/0x4a0 [ 1232.649435][ T8539] ? device_driver_attach+0x210/0x210 [ 1232.654814][ T8539] ? kobject_uevent_env+0x2bb/0x1650 [ 1232.660093][ T8539] bus_probe_device+0x1e4/0x290 [ 1232.664941][ T8539] device_add+0xc17/0x1ee0 [ 1232.669372][ T8539] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1232.675623][ T8539] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 1232.681852][ T8539] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1232.687560][ T8539] ? create_intf_ep_devs.isra.0+0x18d/0x1f0 [ 1232.693446][ T8539] usb_set_configuration+0x113f/0x1910 [ 1232.698898][ T8539] usb_generic_driver_probe+0xba/0x100 [ 1232.704347][ T8539] usb_probe_device+0xd9/0x2c0 [ 1232.709128][ T8539] ? usb_driver_release_interface+0x180/0x180 [ 1232.715182][ T8539] really_probe+0x245/0xcc0 [ 1232.719680][ T8539] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1232.725911][ T8539] __driver_probe_device+0x338/0x4d0 [ 1232.731191][ T8539] driver_probe_device+0x4c/0x1a0 [ 1232.736430][ T8539] __device_attach_driver+0x20b/0x2f0 [ 1232.741808][ T8539] ? driver_allows_async_probing+0x150/0x150 [ 1232.747781][ T8539] bus_for_each_drv+0x15f/0x1e0 [ 1232.752622][ T8539] ? bus_for_each_dev+0x1d0/0x1d0 [ 1232.757642][ T8539] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1232.763435][ T8539] ? lockdep_hardirqs_on+0x79/0x100 [ 1232.768632][ T8539] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1232.774429][ T8539] __device_attach+0x228/0x4a0 [ 1232.779179][ T8539] ? device_driver_attach+0x210/0x210 [ 1232.784535][ T8539] ? kobject_uevent_env+0x2bb/0x1650 [ 1232.789816][ T8539] bus_probe_device+0x1e4/0x290 [ 1232.794665][ T8539] device_add+0xc17/0x1ee0 [ 1232.799094][ T8539] ? __fw_devlink_link_to_suppliers+0x2d0/0x2d0 [ 1232.805331][ T8539] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1232.811561][ T8539] usb_new_device.cold+0x63f/0x108e [ 1232.816759][ T8539] ? hub_disconnect+0x510/0x510 [ 1232.821607][ T8539] ? rwlock_bug.part.0+0x90/0x90 [ 1232.826533][ T8539] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1232.831741][ T8539] hub_event+0x2357/0x4330 [ 1232.836153][ T8539] ? hub_port_debounce+0x3c0/0x3c0 [ 1232.841269][ T8539] ? lock_release+0x720/0x720 [ 1232.845952][ T8539] ? lock_downgrade+0x6e0/0x6e0 [ 1232.850841][ T8539] ? do_raw_spin_lock+0x120/0x2b0 [ 1232.855875][ T8539] process_one_work+0x9bf/0x16b0 [ 1232.860828][ T8539] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1232.866191][ T8539] ? rwlock_bug.part.0+0x90/0x90 [ 1232.871144][ T8539] ? _raw_spin_lock_irq+0x41/0x50 [ 1232.876609][ T8539] worker_thread+0x658/0x11f0 [ 1232.881277][ T8539] ? process_one_work+0x16b0/0x16b0 [ 1232.886481][ T8539] kthread+0x3e5/0x4d0 [ 1232.890541][ T8539] ? set_kthread_struct+0x130/0x130 [ 1232.895821][ T8539] ret_from_fork+0x1f/0x30 [ 1232.900517][ T8539] Kernel Offset: disabled [ 1232.904828][ T8539] Rebooting in 86400 seconds..