Warning: Permanently added '10.128.0.133' (ECDSA) to the list of known hosts. 2020/08/28 07:11:51 fuzzer started 2020/08/28 07:11:51 dialing manager at 10.128.0.26:40033 2020/08/28 07:11:52 syscalls: 3161 2020/08/28 07:11:52 code coverage: enabled 2020/08/28 07:11:52 comparison tracing: enabled 2020/08/28 07:11:52 extra coverage: enabled 2020/08/28 07:11:52 setuid sandbox: enabled 2020/08/28 07:11:52 namespace sandbox: enabled 2020/08/28 07:11:52 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/28 07:11:52 fault injection: enabled 2020/08/28 07:11:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/28 07:11:52 net packet injection: enabled 2020/08/28 07:11:52 net device setup: enabled 2020/08/28 07:11:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/28 07:11:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/28 07:11:52 USB emulation: enabled 2020/08/28 07:11:52 hci packet injection: enabled 07:16:25 executing program 0: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x8981, &(0x7f0000001840)) [ 419.392653][ T8486] IPVS: ftp: loaded support on port[0] = 21 [ 419.782872][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 419.906381][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.914260][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.923677][ T8486] device bridge_slave_0 entered promiscuous mode [ 419.938085][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.945313][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.954815][ T8486] device bridge_slave_1 entered promiscuous mode [ 420.005217][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.022896][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.072717][ T8486] team0: Port device team_slave_0 added [ 420.085815][ T8486] team0: Port device team_slave_1 added [ 420.131441][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.138695][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.165241][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.181163][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.188632][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.214738][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.275338][ T8486] device hsr_slave_0 entered promiscuous mode [ 420.284652][ T8486] device hsr_slave_1 entered promiscuous mode [ 420.534614][ T8486] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 420.552227][ T8486] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 420.570075][ T8486] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 420.595703][ T8486] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.921302][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.959476][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 420.968425][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.988964][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.011075][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 421.021240][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 421.030629][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.038038][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.050832][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 421.072533][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 421.081709][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.091140][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.098500][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.138330][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 421.149188][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 421.188555][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 421.199267][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.209502][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 421.219954][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.230378][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 421.233166][ T3217] Bluetooth: hci0: command 0x0409 tx timeout [ 421.239841][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.274851][ T8486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.288391][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.328656][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.338798][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.348411][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.388541][ T8486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.397581][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 421.405244][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 421.471289][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 421.481351][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 421.540627][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 421.550801][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 421.574768][ T8486] device veth0_vlan entered promiscuous mode [ 421.583902][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 421.593329][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 421.624778][ T8486] device veth1_vlan entered promiscuous mode [ 421.698727][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 421.708670][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 421.718117][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 421.727988][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 421.751052][ T8486] device veth0_macvtap entered promiscuous mode [ 421.771547][ T8486] device veth1_macvtap entered promiscuous mode [ 421.788951][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 421.799278][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 421.848636][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.856388][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 421.869243][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.895859][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.904425][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 421.914385][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:16:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000002c0)={0x14, r1, 0x6ff5ecb65e441d89}, 0x14}}, 0x0) 07:16:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_CTL_GET_FREE(r0, 0x8912) 07:16:30 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$can_j1939(r0, 0x0, 0x0) 07:16:30 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "702dc08fed70a0b23795332025bc3c34"}]}}) [ 423.297988][ T3217] Bluetooth: hci0: command 0x041b tx timeout [ 423.349788][ T3739] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 423.597536][ T3739] usb 1-1: Using ep0 maxpacket: 8 [ 423.798035][ T3739] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 423.806946][ T3739] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 423.817703][ T3739] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.987330][ T3739] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.996449][ T3739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.004737][ T3739] usb 1-1: Product: syz [ 424.009129][ T3739] usb 1-1: Manufacturer: syz [ 424.013807][ T3739] usb 1-1: SerialNumber: syz [ 424.347322][ T3739] usb 1-1: 0:2 : does not exist [ 424.385708][ T3739] usb 1-1: USB disconnect, device number 2 [ 425.057438][ T3739] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 425.297514][ T3739] usb 1-1: Using ep0 maxpacket: 8 [ 425.387403][ T3217] Bluetooth: hci0: command 0x040f tx timeout [ 425.498249][ T3739] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 425.507235][ T3739] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 425.517734][ T3739] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.687650][ T3739] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 425.697028][ T3739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.705091][ T3739] usb 1-1: Product: syz [ 425.709514][ T3739] usb 1-1: Manufacturer: syz [ 425.714196][ T3739] usb 1-1: SerialNumber: syz 07:16:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x13, 0x0, &(0x7f0000000380)) [ 426.107255][ T3739] usb 1-1: 0:2 : does not exist [ 426.154820][ T3739] usb 1-1: USB disconnect, device number 3 07:16:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x81000) ioctl$sock_proto_private(r1, 0x89e6, &(0x7f0000000040)="b9b6a8d8c63802deb19bd23ef5e1f02dc940d562b6b23abd9759744fd1cbafed6cd5ef75ffc7600243a874255707684bbfae6fa5f8f001f58d09dbf42d7f8c11eff1e9fb2c31efd9cf907a25c37893d28248a67a1b1e71854862701c704040c8aaa91e8122355ee033fcae163b75a796f38505747734a8277d6d99be6b98df1f72eb4ba37ffdfb0bf939de08309df5c50f0d6332f76cbeb079989c4b6fb2f52a6427108af9d833975060c33ba3") r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0xac14140a}}], 0x1c) 07:16:34 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x5e, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@remote, @rand_addr, 0x0}, &(0x7f0000000200)=0xc) sendmsg$can_raw(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x1d, r2}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x3, 0x1, 0x0, 0x1}, 0x2, 0x2, 0x0, 0x0, "8e12cd5869215197"}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x4, "d71f4c50f5c6a8bb2da2729206343b319e00800000000000000000ee000800"}) 07:16:34 executing program 1: sendto$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x600, 0x156, "83b1e6ca6133e6ef69cda70a7d8ad382dffad1b77af529aa84497c7a6d73a1264fdded122636a96353d33dee014ca9f6db8a72e368c1f0746db7c38f59431037101a7d67cf32d0bb8fe0952be73d218b80350e5f8ef66ec9b485d9d38759da1492f31aee9ddcc766ec9227ddb85b3dd6b37867c67a0d8832f33019b0f23edf5b92c4f2b6919a8d66b8a155720041e919a74bc184396cb712ce69accca7"}, 0xa5, 0x40c4880, &(0x7f00000000c0)={0x22, 0x0, 0xa4, 0x3, 0xb8}, 0x6) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x18000, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x1a, 0xc6, &(0x7f0000000180)="cc8c3b0c2b5629a9fe425220d55d5c9a23994b9afb558a52e7ba", &(0x7f00000001c0)=""/198, 0x4, 0x0, 0x59, 0x93, &(0x7f00000002c0)="46ccc9c9b997532650fb2337654deeb29eb8a10788fcb5e6fc1c913d622e222d1fae81eccd233c4c602c4e800655e324ce0ddf9290b82d678cde3b06d3585b5a58b4e30a21f98580a01042c777ee48000789e3f3dee9a94580", &(0x7f0000000340)="5ee59c9347799f0f13f6c5eb06211c622a860ddd02bff86565c9cdaa61d4caba57f5e4a95bb091944bc67cb73a438bbd56dc60b9a01b19514519a2da5eb62e12d0375f8d71752b801db87c0f4b7f58090bec4a1cf4deb898cb5907fabfc5a59e87970b40316d51e571abb4e7edee2c6b15b6b3fc13079e2e4fe15466923fc4b3a16e9c50b20e38a805618f2fc7e68e97be8c6f"}, 0x40) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x3, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x800}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000005c0)=0x100, 0x4) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x4004510f, &(0x7f0000000600)=0xe17) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) rt_sigsuspend(&(0x7f0000000740), 0x8) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000007c0)={0x0, 0x1f}, &(0x7f0000000800)=0x8) clone3(&(0x7f0000000a00)={0x10000, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)=0x0, {0x34}, &(0x7f0000000900)=""/22, 0x16, &(0x7f0000000940)=""/69, &(0x7f00000009c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r4}}, 0x58) get_robust_list(r5, &(0x7f0000000bc0)=&(0x7f0000000b80)={&(0x7f0000000ac0)={&(0x7f0000000a80)}, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)}}, &(0x7f0000000c00)=0x18) write$P9_RWALK(r3, &(0x7f0000000c40)={0x57, 0x6f, 0x1, {0x6, [{0x20, 0x0, 0x4}, {0x2, 0x1, 0x8}, {0x8, 0x2, 0x4}, {0x1, 0x4, 0x2}, {0x2, 0x3, 0x1}, {0x8, 0x0, 0x1}]}}, 0x57) [ 427.276761][ T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 427.461332][ T3739] Bluetooth: hci0: command 0x0419 tx timeout [ 427.547447][ T28] usb 1-1: device descriptor read/64, error 18 [ 427.957168][ T28] usb 1-1: device descriptor read/64, error 18 [ 428.238963][ T28] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 428.527082][ T28] usb 1-1: device descriptor read/64, error 18 [ 428.855017][ T8788] IPVS: ftp: loaded support on port[0] = 21 [ 428.937291][ T28] usb 1-1: device descriptor read/64, error 18 [ 429.061251][ T28] usb usb1-port1: attempt power cycle [ 429.219242][ T8788] chnl_net:caif_netlink_parms(): no params data found [ 429.381064][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.388804][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.397740][ T8788] device bridge_slave_0 entered promiscuous mode [ 429.430769][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.439119][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.448532][ T8788] device bridge_slave_1 entered promiscuous mode [ 429.495052][ T8788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.511687][ T8788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.556728][ T8788] team0: Port device team_slave_0 added [ 429.570252][ T8788] team0: Port device team_slave_1 added [ 429.615350][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.622535][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.648750][ T8788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.665355][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.672696][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.699281][ T8788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.761628][ T8788] device hsr_slave_0 entered promiscuous mode [ 429.771127][ T8788] device hsr_slave_1 entered promiscuous mode [ 429.780326][ T8788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.788865][ T8788] Cannot create hsr debugfs directory [ 429.799381][ T28] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 430.063195][ T8788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 430.081942][ T8788] netdevsim netdevsim1 netdevsim1: renamed from eth1 07:16:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x1693d, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43b000000e3bd6efb440009000e000a000d000000008000001201", 0x2e}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1, 0x30}, 0xc) [ 430.112149][ T8788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 430.126809][ T28] usb 1-1: device descriptor read/8, error -71 [ 430.147442][ T8788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 430.337337][ T28] usb 1-1: device descriptor read/8, error -71 [ 430.345469][ T9000] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 430.354413][ T9000] bridge0: port 3(ipvlan0) entered blocking state [ 430.361160][ T9000] bridge0: port 3(ipvlan0) entered disabled state 07:16:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000000)={0x80000001, 0x7fff, 0x3f, 0x80000001, 0x8, 0x5}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x38, 0x30, 0x0, 0x1d, 0xb, 0x5d5, 0x1, 0x39, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002d80), 0x4000000000006b9, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506"], 0x14}}, 0x0) [ 430.657099][ T3739] Bluetooth: hci1: command 0x0409 tx timeout [ 430.687275][ T8788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.744809][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 430.753785][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 430.781541][ T8788] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.825917][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 430.836000][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 430.845334][ T8698] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.852614][ T8698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.921787][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 430.931204][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 430.940945][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 430.950148][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.957433][ T8698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.966364][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 430.977196][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 430.988001][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 430.998348][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.035306][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 431.051129][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 431.060697][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.118954][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.128939][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.138370][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.147955][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 07:16:38 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x4a0000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000020026000000ff"], 0x24, 0x0) [ 431.169889][ T8788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 431.296946][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 431.304690][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 431.346144][ T8788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.498240][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 431.509252][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.600846][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 431.611452][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.642602][ T8788] device veth0_vlan entered promiscuous mode [ 431.652174][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 431.661419][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.701242][ T8788] device veth1_vlan entered promiscuous mode [ 431.788336][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 431.797863][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 431.807294][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 431.817248][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 431.849545][ T8788] device veth0_macvtap entered promiscuous mode [ 431.875410][ T8788] device veth1_macvtap entered promiscuous mode [ 431.936186][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 431.949881][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.963555][ T8788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.971928][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 431.981587][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 431.991017][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 432.001073][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 432.049644][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 432.060674][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.075547][ T8788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.090554][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.101155][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:16:40 executing program 0: r0 = socket(0x10, 0x10000000000003, 0x0) write(r0, &(0x7f0000000040)="26000000130046f10701c1b00ed95d182800fe8f635778a20100008007000000090000000000", 0x26) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x384d, 0x4) socket$nl_audit(0x10, 0x3, 0x9) recvmsg(r0, &(0x7f0000f95fd7)={0x0, 0x0, 0x0, 0x0, &(0x7f0000f91000), 0xffffffffffffff5d}, 0x0) 07:16:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0x7, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="660f6cfe65430f01c2f2460f08c4e279131966b839010f00d00f01c38fa9f812c2b9790100000f32470fedbf8e0000000f30", 0x32}], 0x1, 0x59, 0x0, 0x0) [ 432.738306][ T8700] Bluetooth: hci1: command 0x041b tx timeout [ 432.918922][ T9029] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 07:16:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x1215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0xd6, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x89, 0xff, 0x1, {0x22, 0x49f}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x8, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x80, 0x5}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1, 0x1f, 0x60, 0x40, 0x25}, 0x3f, &(0x7f00000006c0)={0x5, 0xf, 0x3f, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x0, 0x6}, @generic={0x28, 0x10, 0x4, "76eb5a346639f97a5a65bbd383ae4ad639d35a5f2ff1e8e32c8faea9a8a007043ce9c5024b"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x1, 0x0, 0x82}]}, 0x7, [{0x33, &(0x7f0000000140)=@string={0x33, 0x3, "3002fde8b567be9202ab447042ede7d73dc9c9bca4807086f6066ff29e773c0416d7da9c42a841613d7f727576504c800e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x804}}, {0xef, &(0x7f0000000340)=@string={0xef, 0x3, "04cab429e9db3a78433952da4214d94ee384b18e2318abc6a3af5b2edcaeb3191be8c3705b09b6323757fb81b9cd8e1b24e5d50fd14a30a44f39633281c2cfdff5e305e7b391aee065ca11e68024298113c797814022e8b30391c5203563bd5b14a7eb9542a59453940708bc227d27bf8fd87405cd1b970eeab77e89e56320e56fdc9e002d84e3c7397ee28274291a45afce695f3b5c8ff07b05db0572a70acd6f4649dc2449db223d44e06b8ba998670f11b7f25d086ab0e16dd6e5494546b76cfa1407ab14f69de3eb083499d099a9fb859bb11c94af276ac9eeb64757c7539fcd69c169e323f5ba4e89849d"}}, {0xce, &(0x7f0000000580)=@string={0xce, 0x3, "4ea70e3db7b36891101714b15cb76371e18a8a7370711ac7dbdfff2cbaf0129179f9da9e6a65c8147f6f61b7538ce2f34d49b3a11b381e9bd731e8435e7003e94b3761fd04326a1ba62db9bb32d428c3dbda3210e70ee7138141edf248b8b21f1116b5d3abec94d3c339d32bf7ac11047e1a69ed84052122331f914476bb65db5b43e67ed1ce5c39cf0df2f6b7b3c5455e0e31654afbf290520e1e180c3226c00c0ece40ba385fe20d8308d870078bfefd3abaf44da65617d49666b319d946a6e6fbc1bbe452aedbef4d6977"}}]}) r6 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000680)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ddbfe908f8060400016200ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c14779f4775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a63f4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d13"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000540)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000033000000330090861c9b5edf0ef70a3e257eef9f911bdeb7c22d"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 433.387827][ T9041] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:16:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000076280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="00000000000000000a0000000b000100666c6f77657200000c0002000800160012"], 0x3c}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 433.677708][ T8699] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 433.762594][ T9047] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 433.812279][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 07:16:41 executing program 1: syz_usb_connect(0x5, 0x146, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX], 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x6, 0x40) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x1, "1d7d39cefe1bbb3f14ee1217d84c52ca86c800f6e0680c2ad8b8e9ddf5ea559a", 0x2, 0x181, 0x2, 0x2000000, 0x2}) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x3a) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 433.916813][ T8699] usb 1-1: Using ep0 maxpacket: 8 [ 434.037907][ T8699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.049361][ T8699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.059500][ T8699] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 434.072506][ T8699] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 434.081815][ T8699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.205018][ T8699] usb 1-1: config 0 descriptor?? [ 434.451826][ T9041] udc-core: couldn't find an available UDC or it's busy [ 434.459342][ T9041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 434.496863][ T8700] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 434.513423][ T9041] udc-core: couldn't find an available UDC or it's busy [ 434.520777][ T9041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 434.570640][ T9041] udc-core: couldn't find an available UDC or it's busy [ 434.578372][ T9041] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 434.776539][ T8700] usb 2-1: device descriptor read/64, error 18 [ 434.817658][ T3739] Bluetooth: hci1: command 0x040f tx timeout [ 434.886625][ T8699] usbhid 1-1:0.0: can't add hid device: -71 [ 434.893045][ T8699] usbhid: probe of 1-1:0.0 failed with error -71 [ 434.915346][ T8699] usb 1-1: USB disconnect, device number 8 [ 435.166431][ T8700] usb 2-1: device descriptor read/64, error 18 [ 435.321845][ T9041] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:16:43 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0x2c) [ 435.436808][ T8700] usb 2-1: new high-speed USB device number 3 using dummy_hcd 07:16:43 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000281d27c265e44c24beac5f9975006110180000000000b60500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 435.709297][ T8700] usb 2-1: device descriptor read/64, error 18 07:16:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x0, 0xfb7d, 0x1c5a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fallocate(r0, 0x100000011, 0x0, 0x28120001) [ 436.097551][ T8700] usb 2-1: device descriptor read/64, error 18 07:16:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x40d, 0x0, 0x0, {{@in=@dev, @in6=@remote, 0x0, 0x2, 0x0, 0x0, 0x2}, {@in6=@rand_addr=' \x01\x00', 0x34000, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) [ 436.218656][ T8700] usb usb2-port1: attempt power cycle 07:16:44 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a66f1b40da0b7f31cc9d000000010902240001000000000904000002ffffff0009058100000000000009050e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="2c7417efbdb90b3fee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000010000009857639458ed78de5428a97f0ab5bfaa4a54e6cdc416f13a8020d45ed417717babe88f6052f203027784ac34a32d69b7b233cf96dcd0a8887e388a940c6b18776770c81992b88a9133efee3d9a02b8915e73453846c3dd88582bdd31c980cfd4853f61b3d0b67d2f8e1192fdcee83f053dcde09b913947b5644e60dfcf37c77429270ce414b6526ade5e3ac107e6e797713ec7ffa71bef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x00') [ 436.750369][ T9020] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 436.896967][ T3739] Bluetooth: hci1: command 0x0419 tx timeout [ 436.938226][ T8700] usb 2-1: new high-speed USB device number 4 using dummy_hcd 07:16:44 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d533b20886120120872cec1f0001090224000100000000090400000230da67170900001328010b000009058ae6"], 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/239, 0xef) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x200, @mcast2, 0x8}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000001c0)={r0, @in={{0x2, 0x4e20, @private=0xa010102}}}, 0x84) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000080)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) [ 437.107563][ T8700] usb 2-1: device descriptor read/8, error -61 [ 437.117935][ T9020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.127962][ T9020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 437.137988][ T9020] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 437.147215][ T9020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.240524][ T9020] usb 1-1: config 0 descriptor?? [ 437.317243][ T8700] usb 2-1: device descriptor read/8, error -71 [ 437.496504][ T9020] rtl8192cu: Chip version 0x10 [ 437.717314][ T9020] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 437.806887][ T8700] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 437.897878][ T8700] usb 2-1: Using ep0 maxpacket: 8 [ 438.016909][ T8700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 438.026870][ T8700] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 438.036977][ T8700] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.187182][ T8700] usb 2-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=2c.87 [ 438.196766][ T8700] usb 2-1: New USB device strings: Mfr=236, Product=31, SerialNumber=0 [ 438.205160][ T8700] usb 2-1: Product: syz [ 438.209727][ T8700] usb 2-1: Manufacturer: syz [ 438.274710][ T8700] usb 2-1: config 0 descriptor?? [ 438.348887][ T9020] rtl_usb: reg 0xfe67, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 438.358063][ T9020] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 438.365182][ T9020] usb 1-1: This Realtek USB WiFi dongle (0x0bda:0x317f) is untested! [ 438.373613][ T9020] usb 1-1: Please report results to Jes.Sorensen@gmail.com [ 438.487684][ T9020] usb 1-1: Unsupported USB TX end-points [ 438.493407][ T9020] usb 1-1: Fatal - failed to identify chip [ 438.500057][ T9020] rtl8xxxu: probe of 1-1:0.0 failed with error -524 [ 438.550829][ T9020] usb 1-1: USB disconnect, device number 9 [ 438.562774][ T8700] usb8xxx: probe of 2-1:0.0 failed with error -12 [ 438.570109][ T8700] lbtf_usb: probe of 2-1:0.0 failed with error -12 [ 438.609603][ T8700] usb 2-1: USB disconnect, device number 5 [ 438.996754][ T9020] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 439.296290][ T8698] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 439.357056][ T9020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.367052][ T9020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 439.377041][ T9020] usb 1-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 439.386361][ T9020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.397833][ T9020] usb 1-1: config 0 descriptor?? [ 439.547655][ T8698] usb 2-1: Using ep0 maxpacket: 8 07:16:47 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x8002, 0x40) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x3f, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 439.667494][ T8698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 439.677555][ T8698] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 439.687610][ T8698] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 07:16:47 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x18000) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000140)={{0x9, 0x1, 0x100, 0x20, 'syz0\x00', 0xffffffd3}, 0x400, 0x2000041f, 0x3, 0xffffffffffffffff, 0xa, 0x2, 'syz0\x00', &(0x7f00000000c0)=['/dev/audio#\x00', '/dev/audio#\x00', ')\x00', '/dev/audio#\x00', '/dev/audio#\x00', '/dev/audio#\x00', '.\'\x00', '$+\x00', ')\x00', '\x87&:J)[-\x00'], 0x4e, [], [0x5, 0x3f, 0xfffa, 0x90]}) setpriority(0x1, 0x0, 0x1c64d08d) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280), 0x4) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000002c0)=""/225) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000003c0)={0x1f, 0x7, 0x9}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000400)=0x7, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='numa_maps\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000480)={0x6000, 0xf000, 0xfdb, 0x4, 0xb3a96000}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000004c0)=0x1, 0x4) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000500)) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000d40)={0xffffffe1, {{0x2, 0x4e21, @loopback}}}, 0x88) statx(r1, &(0x7f0000000e00)='./file0\x00', 0x0, 0x200, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001180)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x198, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x47, 0x4, "d873b7f74fe8317b118894152e0789e96c80268040a5af9bd24bb22f586dd3940ab07473f59a5da2dff006f4a753f66a4965acb80793fafb0af772b415a4c6ae66282c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/audio#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'numa_maps\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffd402}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x99, 0x4, "ec892f2af48755d28a49d60937db31e2c6d18bbff1bc4ab796426cc167ab77a9443ed725054b417a83ac53d6d0e5861695bb458fe04fe0e404b08c902422976d08fe689047705e084d531b3281699a1ee7ceba2f9450f59ca1004125c671d0416682e293a0074c4f152d8ac2b046b6dbf06faa71f0f7532d4c64d45bdcc1739e4b878ace60cc53328cceabd113979edad0da15d04d"}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x880}, 0x4) [ 439.867271][ T8698] usb 2-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=2c.87 [ 439.876557][ T8698] usb 2-1: New USB device strings: Mfr=236, Product=31, SerialNumber=0 [ 439.884943][ T8698] usb 2-1: Product: syz [ 439.889509][ T8698] usb 2-1: Manufacturer: syz [ 439.896881][ T9020] rtl_usb: reg 0xf0, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 439.905734][ T9020] rtl8192cu: Chip version 0x10 [ 439.962744][ T8698] usb 2-1: config 0 descriptor?? [ 440.107463][ T9020] rtl_usb: reg 0xa, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 440.268304][ T8698] usb8xxx: probe of 2-1:0.0 failed with error -12 [ 440.275104][ T8698] lbtf_usb: probe of 2-1:0.0 failed with error -12 07:16:47 executing program 1: r0 = socket(0xa, 0x1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x0, 0xe, 0x0, 0x0, r2}, 0x10) [ 440.319614][ T9020] rtl_usb: reg 0xfe66, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 440.359666][ T8698] usb 2-1: USB disconnect, device number 6 [ 440.536549][ T9020] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 440.543792][ T9020] usb 1-1: This Realtek USB WiFi dongle (0x0bda:0x317f) is untested! [ 440.552139][ T9020] usb 1-1: Please report results to Jes.Sorensen@gmail.com [ 440.647760][ T9020] usb 1-1: Unsupported USB TX end-points [ 440.653608][ T9020] usb 1-1: Fatal - failed to identify chip [ 440.660251][ T9020] rtl8xxxu: probe of 1-1:0.0 failed with error -524 [ 440.713594][ T9020] usb 1-1: USB disconnect, device number 10 [ 441.106263][ T9020] usb 1-1: new low-speed USB device number 11 using dummy_hcd 07:16:49 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x1, 0xe9, 0x57, 0x40, 0x41e, 0x400c, 0x87e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5f, 0x75, 0x3e}}]}}]}}, 0x0) process_vm_writev(0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/198, 0xc6}], 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)=""/227, 0xe3}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000002c0)}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x4, 0x0) socket$l2tp6(0xa, 0x2, 0x73) [ 441.467919][ T9020] usb 1-1: LPM exit latency is zeroed, disabling LPM. [ 441.547172][ T9020] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 441.806270][ T3217] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 441.992573][ T9169] IPVS: ftp: loaded support on port[0] = 21 [ 442.343022][ T9020] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 442.352293][ T9020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.439802][ T3217] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=87.e9 [ 442.449137][ T3217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.457461][ T3217] usb 2-1: Product: syz [ 442.461762][ T3217] usb 2-1: Manufacturer: syz [ 442.466625][ T3217] usb 2-1: SerialNumber: syz [ 442.582017][ T3217] usb 2-1: config 0 descriptor?? [ 442.640774][ T3217] pwc: Creative Labs Webcam 5 detected. [ 442.648403][ T9020] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 442.680144][ T9020] usb 1-1: USB disconnect, device number 11 [ 442.858934][ T9169] chnl_net:caif_netlink_parms(): no params data found [ 442.896670][ T3217] pwc: Failed to set LED on/off time (-71) [ 442.918282][ T3217] pwc: send_video_command error -71 [ 442.923638][ T3217] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 442.931657][ T3217] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 443.013269][ T3217] usb 2-1: USB disconnect, device number 7 [ 443.153447][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.160810][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.171206][ T9169] device bridge_slave_0 entered promiscuous mode [ 443.186466][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.193756][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.203418][ T9169] device bridge_slave_1 entered promiscuous mode [ 443.255087][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.276965][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.334971][ T9169] team0: Port device team_slave_0 added [ 443.354685][ T9169] team0: Port device team_slave_1 added [ 443.406380][ T9020] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 443.415706][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.423017][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.449278][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.465236][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.473203][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.499325][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.575711][ T9169] device hsr_slave_0 entered promiscuous mode [ 443.586158][ T9169] device hsr_slave_1 entered promiscuous mode [ 443.595633][ T9169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.604249][ T9169] Cannot create hsr debugfs directory [ 443.660356][ T3217] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 443.864510][ T28] Bluetooth: hci2: command 0x0409 tx timeout [ 443.887360][ T9020] usb 1-1: LPM exit latency is zeroed, disabling LPM. [ 443.987030][ T9169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 443.988703][ T9020] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 444.033478][ T9169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.090360][ T9169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.119276][ T9169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.186659][ T9020] usb 1-1: string descriptor 0 read error: -71 [ 444.193194][ T9020] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.202525][ T9020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.330693][ T3217] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=87.e9 [ 444.338716][ T9020] usb 1-1: can't set config #1, error -71 [ 444.340104][ T3217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.353783][ T3217] usb 2-1: Product: syz [ 444.358189][ T3217] usb 2-1: Manufacturer: syz [ 444.362917][ T3217] usb 2-1: SerialNumber: syz [ 444.371049][ T9020] usb 1-1: USB disconnect, device number 12 [ 444.440447][ T3217] usb 2-1: config 0 descriptor?? [ 444.494486][ T3217] pwc: Creative Labs Webcam 5 detected. 07:16:52 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x1, 0xe9, 0x57, 0x40, 0x41e, 0x400c, 0x87e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5f, 0x75, 0x3e}}]}}]}}, 0x0) process_vm_writev(0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/198, 0xc6}], 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)=""/227, 0xe3}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000002c0)}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x4, 0x0) socket$l2tp6(0xa, 0x2, 0x73) [ 444.707589][ T3217] pwc: Failed to set LED on/off time (-71) [ 444.727663][ T3217] pwc: send_video_command error -71 [ 444.732941][ T3217] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 444.741475][ T3217] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 444.823611][ T3217] usb 2-1: USB disconnect, device number 8 [ 444.940917][ T9169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.992429][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.001750][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.025303][ T9169] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.051221][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.061274][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.071682][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.079069][ T8705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.147396][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.157151][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.166986][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.176356][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.183581][ T8698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.192886][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.203764][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.225139][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.234879][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.286583][ T3217] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 445.310100][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 445.320106][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.330671][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.412810][ T9169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 445.423894][ T9169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.473071][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 445.482745][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.493158][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 445.503142][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.627759][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 445.637150][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.644851][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.685511][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.816636][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 445.826703][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 445.846791][ T3217] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=87.e9 [ 445.856428][ T3217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.864556][ T3217] usb 2-1: Product: syz [ 445.869003][ T3217] usb 2-1: Manufacturer: syz [ 445.873736][ T3217] usb 2-1: SerialNumber: syz [ 445.894493][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 445.904377][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 445.930923][ T9169] device veth0_vlan entered promiscuous mode [ 445.942709][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 445.952056][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 445.956047][ T8702] Bluetooth: hci2: command 0x041b tx timeout [ 445.989955][ T9169] device veth1_vlan entered promiscuous mode [ 446.002913][ T3217] usb 2-1: config 0 descriptor?? [ 446.062712][ T3217] pwc: Creative Labs Webcam 5 detected. [ 446.141562][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 446.151356][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 446.160683][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.170709][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.213915][ T9169] device veth0_macvtap entered promiscuous mode [ 446.237786][ T9169] device veth1_macvtap entered promiscuous mode [ 446.305946][ T3217] pwc: Failed to set LED on/off time (-71) [ 446.309720][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.323031][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.333145][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 446.335999][ T3217] pwc: send_video_command error -71 [ 446.343720][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.349019][ T3217] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 446.362234][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.366615][ T3217] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 446.378047][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 446.390792][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.400164][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.410010][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.482392][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.493077][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.503256][ T9169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.514226][ T9169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.527861][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.536940][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.547216][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 446.558113][ T3217] usb 2-1: USB disconnect, device number 9 07:16:54 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x4}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000080)) 07:16:54 executing program 1: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000000)={0x0, 0x0, 0xfff}) rename(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0)='./file1\x00') r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = socket(0x18, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x100, 0x0) connect$qrtr(r2, &(0x7f00000002c0)={0x2a, 0x2, 0x7fff}, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000240)=0x1e) lsetxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f00000001c0)='&-&}\x00', 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000100)={0x6, 'veth1_to_batadv\x00'}) [ 447.599568][ T9445] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 07:16:55 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9f3, 0x0, @perf_config_ext={0x7ff, 0x74c}, 0x810, 0x200, 0x800c31e, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x101240, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x80000001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}]}, &(0x7f00000000c0)=0x10) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x100, 0x4100) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x3, "547380", "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"}}, 0x110) [ 448.016028][ T8705] Bluetooth: hci2: command 0x040f tx timeout [ 448.091482][ C1] hrtimer: interrupt took 129469 ns 07:16:55 executing program 1: unshare(0x20000400) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000480)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x280001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x5a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000080)={0x0, 'dummy0\x00', {0x4}, 0xbf6}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000680)=0xd05) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/118}, {&(0x7f0000000240)=""/93}, {&(0x7f00000002c0)=""/219}], 0x4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x200002, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000680)=0xd05) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) fcntl$addseals(r3, 0x409, 0x0) 07:16:56 executing program 1: unshare(0x20000400) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000480)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x280001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x5a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000080)={0x0, 'dummy0\x00', {0x4}, 0xbf6}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000680)=0xd05) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/118}, {&(0x7f0000000240)=""/93}, {&(0x7f00000002c0)=""/219}], 0x4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x200002, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000000)=0x5a) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000680)=0xd05) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) fcntl$addseals(r3, 0x409, 0x0) 07:16:56 executing program 2: syz_usb_connect$hid(0x0, 0xffffffffffffff23, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x5c4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9721a92eebee00ae, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x2}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3f, 0x7}}}}}]}}]}}, 0x0) 07:16:56 executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x8000003) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="a0f431bd879a7599545699107d3fd3809a4acd191432dfff54d18357852e93a038260a6ada6215db7fbe56922f8e98735608235ca5c216866633d52d", 0x3c) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) [ 449.637853][ T8700] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 450.086909][ T8700] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 450.094986][ T8700] usb 3-1: can't read configurations, error -22 [ 450.105729][ T8698] Bluetooth: hci2: command 0x0419 tx timeout 07:16:57 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) [ 450.296479][ T8700] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 450.697356][ T8700] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 450.705453][ T8700] usb 3-1: can't read configurations, error -22 [ 450.748220][ T8700] usb usb3-port1: attempt power cycle 07:16:58 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$FUSE(r1, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000100)={0x10, 0x24, r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x3b0, 0x110, 0xe0, 0xe0, 0x0, 0x0, 0x318, 0x2e8, 0x2e8, 0x318, 0x2e8, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffff00, 0xff000000, 'netdevsim0\x00', 'ip6gre0\x00', {}, {}, 0x6c, 0x1}, 0x0, 0xa0, 0x110, 0x0, {0x6020000}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x280}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "a4bcf0ebf5d09e8706000000b1000000124ac31d4fda375c7794e420aa63529ebcf847246a5e8846085b0a30510b266347a84ae5ffea89b8654e4400"}}}, {{@ip={@local, @multicast1, 0xffffff00, 0x0, '\x00', 'wg1\x00'}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'wg2\x00', {0x800, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x8}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "29f0be44329ad4d94a815c71ad95092b933b5e380a7e5d3c56c51e9d0027"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000140)={'veth0_macvtap\x00', 0x2}) syz_genetlink_get_family_id$tipc2(0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x6d, &(0x7f0000000200)={r7}, &(0x7f00000000c0)=0xfffffffffffffcec) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r9, 0x400, 0x6}, 0xc) [ 451.475889][ T8700] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 451.726647][ T8700] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 451.734834][ T8700] usb 3-1: can't read configurations, error -22 07:16:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x103382) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, 0x0, 0x24002d00) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add12ae18e13b1fbd14dade59e0dbdefaeb3d4c975b9ce5b06e58e929c2dc5a54dbf7887c6dcefca909d6618", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000080)=""/206) [ 451.917182][ T8700] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 452.179706][ T8700] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 452.187969][ T8700] usb 3-1: can't read configurations, error -22 [ 452.214027][ T8700] usb usb3-port1: unable to enumerate USB device 07:17:00 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[], 0xa) close(r4) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc}]}, 0x144}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r4, 0x0, 0x80000001, 0x0) [ 452.478538][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:17:00 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000024c0)="2e00000021008102e00f80ecdb4cb902020000fffd000000810040fb12000c000006ca1b40d719a906000500000f", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket(0x18, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffe0f) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x3d}, 0x5, 0x0, 0x0, 0x2, 0x12, 0x7}, &(0x7f00000000c0)=0x20) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x10000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='highspeed\x00', 0xa) 07:17:00 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [], {0x4, 0xaf4896eda62f02d8}, [{0x8, 0x7}, {}, {0x8, 0x7, 0xee00}, {0x8, 0x7, r5}], {}, {0x20, 0x6}}, 0x44, 0x3) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002200)={r3, r4, r5}, 0xc) r6 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 452.780636][ T9503] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 452.842134][ T9505] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 07:17:00 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x248b80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x14}, {0x6}]}) 07:17:00 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="050f050002"]}) pipe2$9p(&(0x7f0000000040), 0x84000) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000100)={{0x2b, @local, 0x4e22, 0x1, 'dh\x00', 0x11, 0x1, 0x70}, {@broadcast, 0x4e22, 0x2000, 0xfffffe01, 0x7, 0x9}}, 0x44) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r1, &(0x7f00000000c0)={0x8, 0x35, 0x2}, 0x8) [ 453.143505][ T29] audit: type=1326 audit(1598599020.749:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9511 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 07:17:01 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r6 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r7}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000002c0)={"ac75ed36520ccc4117e1608655d2fbd9", 0x0, 0x0, {0x5, 0x80000000}, {0x8, 0x1}, 0xffffffffffffffff, [0x80, 0x10000, 0x20000000000, 0x1f, 0x9, 0x4, 0x3, 0x9, 0x9, 0x6, 0xfffffffffffffffc, 0x2, 0x8, 0x7fffffff, 0x5, 0x5]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000003c0)={"14c855646ad953ede3a3071cd5c0c7f6", r8, r9, {0x81, 0x7}, {0x6, 0xbc}, 0xab5, [0x0, 0x6f, 0x9, 0xfe, 0x66, 0xffffffffffff0a68, 0x143, 0x6f5, 0x6, 0xb567aa1, 0x5, 0x3, 0xfffffffffffffff9, 0x1, 0x9, 0x7]}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5131020000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="55febe3a67c4d5847a79d3c60086677ce4acae99bf0859483f3b7e247e4b08b9beb2a250a90a5552916e881e3d58727dd58d7780ba36f358bbade8dae2bc92e8461915bfda569860989dac05c559e8de956ec6a974d13f6a9629704939399fc56997535ab2eaf48535f4f20cd3f5b8de046d10ca6ce1202eed1da54a8b95fbe6a9738941c15c1f3da2514526317f51695d68dc33e500a124fd25ccbb56c6594a0da4959d493eadc55f8c8c397b422f3d0c94833034b5b5674b566d12a60e7ddda4c78bd73541d5883a25791a73cb969f74744fd9af5678b6be784dd0ce8ce5130d8a223efde302b48ed4c85667ae4bb14ea607"], 0x3c}}, 0x0) [ 453.596832][ T8700] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 453.682861][ T9520] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 453.740169][ T9520] device netdevsim0 entered promiscuous mode [ 453.746429][ T9520] device macvtap1 entered promiscuous mode [ 453.835861][ T8700] usb 2-1: Using ep0 maxpacket: 16 [ 453.838595][ T9524] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 453.904498][ T9524] device macvtap2 entered promiscuous mode 07:17:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x20000, 0x0) fgetxattr(r2, &(0x7f0000000140)=@known='system.posix_acl_default\x00', &(0x7f0000000180)=""/135, 0x87) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r4, &(0x7f00000002c0)={@val, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'q\fD', 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_rs}}}}}}, 0x42) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) [ 454.037160][ T8700] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 07:17:01 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000040)) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x102a0, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000100)=""/28) syz_emit_ethernet(0xe, &(0x7f00000000c0)={@remote, @local, @void, {@generic={0xfbfb}}}, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "c42aa30ce4323231593414333f5783a18b41ba5133f375ef398a93435aeaaae1", "9cba4f7e8d995f1f2725d6425a9ea6997491397b6d8252c610fa10cbb45596f6", "e643e72fd63bc730767e02b0e30d5fac495333bbabaeea0f75cc824580d21d22", "16c6384f38aebd0b6566c59150df65e6b4996ea2b8509d58b2b95d94fb242a71", "13ab3bda9730c256919431b98962b74aef1f47d0450f071c7d1de7962301e5c3", "4ae6116bc9f361e88ba3596f", 0xd3, 0x9, 0x598, 0x5, 0x6d0}}) r4 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000340)={{0x0, 0x23, 0x0, 0x3, 0x3, 0x5, 0x9, 0x1, 0x3, 0x9, 0x5, 0x0, 0xff, 0xfffffffffffff91e, 0x10000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000280)={{r5, 0x1, 0x9, 0x2, 0xb2, 0x5, 0x4, 0xa721, 0x80000001, 0xfffffffd, 0x7, 0x9, 0x0, 0x3, 0x8}, 0x8, [0x0]}) [ 454.226705][ T8700] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 454.236109][ T8700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.244237][ T8700] usb 2-1: Product: syz [ 454.249077][ T8700] usb 2-1: Manufacturer: syz [ 454.253809][ T8700] usb 2-1: SerialNumber: syz 07:17:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000019007d57443e199d6fa4a5040a0000000000f2ff00"/36], 0x24}}, 0x0) [ 454.602663][ T9514] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20002 [ 454.624995][ T8698] usb 2-1: USB disconnect, device number 10 07:17:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r1, &(0x7f0000000180)="6963e64243ea806da3a74e3deec6fc5bbe650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33a7", 0x42) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)={0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r8, 0x4008ae48, &(0x7f0000000400)) r9 = syz_io_uring_setup(0x447c, &(0x7f0000000300)={0x0, 0x4068, 0x4, 0x3, 0x300, 0x0, r6}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x2}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000380)={r4, 0x1, r9, 0x100}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) [ 455.464993][ T8698] usb 2-1: new high-speed USB device number 11 using dummy_hcd 07:17:03 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6b) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="220062e000"/17, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0) 07:17:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x500}, 0x40) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8011, r0, 0x614a71a1000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x5f) [ 455.705528][ T8698] usb 2-1: Using ep0 maxpacket: 16 07:17:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x168, 0x0, 0x0, 0x0, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x168, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x0, 0x21}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'ipvlan0\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x1000}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@ipv6={@private0, @local, [0xffffffff], [], 'veth0_to_batadv\x00', 'ip_vti0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x400480, 0x0) r3 = accept(r0, &(0x7f0000000440)=@ax25={{0x3, @bcast}, [@default, @bcast, @null, @rose, @rose, @netrom, @bcast]}, &(0x7f00000004c0)=0x80) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000003c0)={@mcast2}, &(0x7f0000000400)=0x14) [ 455.916252][ T8698] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 456.098281][ T8698] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 456.107920][ T8698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.116263][ T8698] usb 2-1: Product: syz [ 456.120562][ T8698] usb 2-1: Manufacturer: syz [ 456.125288][ T8698] usb 2-1: SerialNumber: syz 07:17:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8800000010003b0eefc000000000020000000000", @ANYRES32=0x0, @ANYBLOB="dd0c32b7000000fc08000a00", @ANYRES32=0x6, @ANYBLOB="600012000c000100697036746e6c00005000020014000300ffd10000008e258a74000000000000010800080039003a0014000300ff"], 0x88}}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000006c0)) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = signalfd4(r0, &(0x7f0000000000)={[0x5]}, 0x8, 0x0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4bc, 0x1, 0x5, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0x800}, 0x7, 0x7, 0x7, 0xff, 0x11, 'syz0\x00', "0f4c33743d0e7a20e5d25c270341876d0d5bc8d1212022791bd7863f793ba7ff", "acfc6bef8a7340053b65188bb3d1cd9a58e1cd31470cfbc65c136f5fac298ed5", [{0x9e4f, 0x101, {0x0, 0x7fffffff}}, {0xffff, 0x1, {0x2, 0x9}}, {0x2, 0xffff, {0x2, 0x48}}, {0x668, 0xffff, {0x2, 0x800}}, {0x0, 0x9, {0x2, 0x40}}, {0x2, 0x58, {0x2, 0x7fff}}, {0x80, 0xfffa, {0x1, 0x1}}, {0x6d, 0x4, {0x2, 0x6}}, {0x401, 0x8, {0x3, 0xfffffffb}}, {0x400, 0xfc01, {0x3, 0x5992f190}}, {0x1, 0xfffd, {0x2, 0x7}}, {0x5, 0x6, {0x0, 0xecb}}, {0x2, 0x0, {0x0, 0x10000}}, {0x5, 0x3ff, {0x1, 0x73bb3d94}}, {0x40, 0x8, {0x1, 0x10000}}, {0x98, 0x5, {0x0, 0x4123}}, {0x156, 0x2, {0x1, 0x3f8}}, {0x80, 0x8, {0x0, 0x3ff}}, {0x1, 0x4, {0x2, 0xd34f}}, {0x3, 0x2, {0x0, 0xfffffffe}}, {0x3, 0xfff9, {0x3, 0x100}}, {0x0, 0x8, {0x3, 0xa}}, {0x2, 0x4b60, {0x1, 0x4}}, {0x3, 0x3, {0x2, 0x2}}, {0x0, 0x27fa, {0x0, 0x7fff}}, {0x3781, 0xf07, {0x2, 0x3185}}, {0x9, 0x1, {0x0, 0x63}}, {0xdea, 0x50, {0x3, 0x4}}, {0x8001, 0xfff, {0x3, 0xffffff5f}}, {0x7, 0x9, {0x0, 0x3}}, {0x3, 0x7, {0x2, 0x10001}}, {0x6, 0x1f, {0x3, 0x7}}, {0x9, 0x0, {0x1}}, {0x1, 0x0, {0x0, 0x40}}, {0x4, 0x8, {0x3, 0xfffffff7}}, {0x38, 0x3, {0x2, 0x9}}, {0x0, 0x4, {0x2, 0x1ff}}, {0x9, 0x9, {0x3, 0x8}}, {0x4, 0x8, {0x1, 0x20}}, {0x5, 0x3ff, {0x3, 0x400}}]}}}, {{0x254, 0x1, {{0x0, 0x64f}, 0x2, 0x81, 0x2, 0x0, 0x1a, 'syz0\x00', "1ba6248eaf65ee2b5b52d4b313d1e92782d25be575a9b582ab545bc00e9c2578", "29980d7648a3a6421049e2445d6b1fc382061598725eac835c0f2ca1eb3be594", [{0x67, 0x6, {0x3, 0x800}}, {0x4, 0x1f, {0x0, 0x5}}, {0x7b, 0x8001, {0x3, 0x1b400}}, {0xff, 0xaf, {0x2, 0x8001}}, {0x1, 0x9dc0, {0x1, 0x6750}}, {0x3, 0x3ff, {0x1, 0xd120}}, {0xfff9, 0x1f, {0x2, 0x1}}, {0x2, 0x9, {0x3, 0x8}}, {0x1000, 0x0, {0x0, 0xbeb}}, {0x2, 0x9d, {0x2}}, {0xbe, 0xf947, {0x0, 0xfffeffff}}, {0x8, 0x4, {0x2, 0x101}}, {0x81, 0x8001, {0x0, 0x2}}, {0x9, 0xe2a, {0x0, 0x20}}, {0x6, 0x46e, {0x3, 0x8}}, {0x5, 0x3f, {0x1, 0x40}}, {0x8, 0x0, {0x1, 0x7}}, {0x3f, 0x40, {0x2, 0x3}}, {0x40, 0x8, {0x0, 0x7f}}, {0x5dd, 0x300, {0x2, 0x1}}, {0x2, 0x40, {0x1, 0x4}}, {0x7, 0x7, {0x0, 0x200}}, {0x853e, 0x5, {0x5, 0x80}}, {0x5, 0x8, {0x2, 0xd13}}, {0x1, 0x5d93, {0x2, 0x5}}, {0x6ee4, 0x7, {0x0, 0x5}}, {0xff, 0x8001, {0x2, 0x2}}, {0xd6, 0x3, {0x0, 0x507}}, {0x0, 0x1, {0x0, 0x400}}, {0x5, 0x8, {0x3, 0x13157da8}}, {0x9, 0x6, {0x0, 0x2}}, {0x4, 0x9}, {0x9, 0x5800, {0x2, 0x7}}, {0xfd16, 0xc03f, {0x3, 0x3}}, {0xfffb, 0x0, {0x0, 0x10001}}, {0x200, 0x3a2, {0x0, 0x2}}, {0x8000, 0xac1, {0x0, 0x7ff}}, {0x3, 0x7, {0x6b4296b2be3a50ae, 0xcc2}}, {0x8001, 0x4, {0x1, 0x3f}}, {0x1, 0xff, {0x0, 0x5}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000) [ 456.190486][ T9573] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 456.230798][ T9574] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 456.392426][ T9578] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 456.409206][ T8698] usb 2-1: can't set config #1, error -71 [ 456.442502][ T8698] usb 2-1: USB disconnect, device number 11 07:17:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x50}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x101, 0x141c81) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000000c0)={0x8, 0xffff, 0x2, 0x3, 0x9, "beed1f7f4d861d938491bba45481400c2ab740", 0x80000000, 0x7}) 07:17:04 executing program 1: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000002700)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000002740)=0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}, {0x0, 0x0, 0x6}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000003980)=[{{&(0x7f0000000280)=@in={0x2, 0x4e23, @empty}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="f5a800ef3065c53c714d52142b7c7a4e6d626ff7015726196cd6236cbb18d59527b69011cd4f197c9400f0e990aa269317f6e67c96da8dfddd5d6208d2a2eb03f26f0c9323", 0x45}], 0x1, &(0x7f0000000380)=[{0x70, 0x0, 0x4, "f0be0bc740371fcf02dc783f496685459c733bfc1810b5c2a3ecc47961f1b6c05eaf60d19314a34ad745614bf79bc73e01e881f62615f2947aca28151baa56e5536cc959378e09a9ae822b1a9f8469268334d03700ef2516a8"}, {0x70, 0xff, 0xe94e, "239d801252fde8f8da074353598df786bb4c8591cfd672dd7a3bfacf90d4fcbff60609ff7dc05b78a34349092ba22cf49262adc84de244ba5e5e564c8e56c8450a4349c14bb8a872456c2c28179de0d46a5fdbd0cfb3d63c6ccbc4ae4c76"}, {0xe8, 0x44e4e1fd1fda8998, 0x1c, "78ed36a8666708e34c398dd57349470435fa4ac9e7c8a01628fdf9530796b6e56e148cfcf19c7e427f149aa2549c023047f5ee6297ef20c62fea6ce4b87cf08e8b421a5fc344a08683c1a827a4a5da5a8c6c80f059c18b762a4defbb7148d51deb5d96e5ffd68d25e5dd1f627ee2beefa763d240aed2c3204044275a72bd76a87ea139cebf453406d208419bcd797080d9090b6cde1eecf2c47304e3b13fcfc735e47830ab46a810c802fcc81e069a4f601b4bdb2d8423d1d76771c1e607363333d386751cc2591f9a0b053ac6fb2b2ee550c495"}, {0x10, 0x10f, 0xffffffff}], 0x1d8}}, {{&(0x7f0000000580)=@xdp={0x2c, 0x5, 0x0, 0x27}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000600)="0b1f916a8995dc9a7f", 0x9}, {&(0x7f0000000640)="f8cab2cb125e3488548849b675699c4c7441c3964fc30709ece695591efd5f91c219c3a64ed6bb311297ec28f7d3c9e1f8d848e41fc75c2c921482ff986133ca5df1fa391cb6ea5e0d5ca72e6440793a02111d7d4d3f733e20761a36806698dced13d1d92cbf8dd46a8348e6f2046ae6b15fb3f6f635e927176865cd35cb991667678a697a06df1537e34b488b0153be0df31405247d94e18fdf88ed65d468002d7795b50b454e907f562a4df463e6449b37e21272f11f199e9bff7c8d6b3cec8a9ffc2dbe04256c08a2c525a4bf2f21af63", 0xd2}, {&(0x7f0000000740)="846cd5fa18d17df11e553b0cf47cfb7c9de02cd0689f9e097ea899331788056d1687e47cddf9ee9d698732f0bae6d3de07df887192955a5adbc6af1542d3de6d3e53c7eb01509798b923faabcb8d51ec1808124c36a7e012c66fa5feee42da432fab2691ed68bcdcce1035adbd87945b8fc5a736b45d42e01edc08434b27a3a083bfceaa46ea7ca1ad877e70fc5ce66416df89661d706e3d161c7e4a029fcecac93ecf537f1deb3a8f079a2da64e158de655b05701d54986b1bc28a1a981e92dbea66599f8", 0xc5}], 0x3, &(0x7f0000000880)=[{0x20, 0x101, 0x2, "0a0bddce445faeaa86"}], 0x20}}, {{&(0x7f00000008c0)=@caif=@dbg={0x25, 0xc1, 0xac}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000940)="5ae3c35aee4ae2e56b2cd8cbec04382c3f10e361f31e30b0fab86e2266e3715f996e1db42f31ed1d70f06dada6c245f1f5d26467bd0f18f7f94f636433f239", 0x3f}, {&(0x7f0000000980)="4fbad4a5a0bb65c4415befa061ff237c98d0205506f595650669242c909818be49a438bceae03f2b0537d3f44bef9e98423d90d0f344dbaacf61db6c5f048db0b45e669384d04df0c692b4edfa4e3d134edd90ecf0d4d2f5173a01d40b1357f3fc5fe63df9fcc03392aba96c1fcc70fc778e6b9da8df980da8eea486fb506740a815be0471ff73758b6dddea12e8c4d9006dabba7c1a199ce39da0181cb3c24126f0b3666bddbf68f7c143d225298126144faaf78a9799bd643a3b42b53df7be44699137bdd3359ff40058aa6ccca8bfb0f92688604a4cf69653d1cb1a6f108a586f6247", 0xe4}, {&(0x7f0000000a80)="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", 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001ac0)="21606e2812959512f07ac135124ba31f06045e66f523", 0x16}, {&(0x7f0000001b00)="a5dd4647826dc8cbb53120ad7678b1d607e8616c6c3fb4ca4b4fef7dd12dc23c93e5e61fa0c2530a3d56f013b567a708a9bd3b11d75a67114bee919377a29f15eb02bf550338fc6298d4bb1afd3569862068ffb66302016ce8437e2667cdbb386790f8a938fa8784cc21a85a28f3b9efa3e50372b91c193338cd29f5e652cc7169", 0x81}, {&(0x7f0000001bc0)="66fc4d7b3fd907fe3b8fe6046c60f7241947f24b5e6953ebba6f84110ae0272b8ab708487ba6e15fc0f114592b3d864be5495ec9a0e1c4e91518e32b079df0905f284eef67cd23a964a608223d0986de239aace895c15a", 0x57}, {&(0x7f0000001c40)="f3b6fec633643ae554fe22ae2f4f2927b3a2ea0448248ba52c5e995a62ed9904ff152dbfa38f1efb5160ac7b5134ba85fab589b30f5202e7bc8c71353f2b8e8bf742d5ef28825c36cdb2de1d175010290ab64e8b001c28fb16e211503a108d09f3ba3014b84671f3caa5f2af2ed8742052605c347bff61839d1e1a628bec1d3c9a2a7e35afedd6c146fec51a38fd5f4b6f0fd673675edf3a596b80523b0612e3432302e169bfd4ac1d713705a351549d2b66741285b0559f051505fe4166ded68a64d84f915e7aa2e2ce42899be02a4e6ef95b290ed36e4e307fcb2e39792a8fee41c31053ac1a83339d0c8c4607ca0c81bf2b9a89", 0xf5}], 0x4}}, {{&(0x7f0000001d80)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast2}, 0x1, 0x2, 0x0, 0x1}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="a76b9f5acc8785f38568eecce0402d4be677d660187d0e8687", 0x19}, {&(0x7f0000001e40)="5f75c07abeeaf3fbbf5f90739440d351ade2d6dbeaa6b74ba8a98a92d832ae108ae4ad90b4783f1744a4ae75bd7d21a3861109cf93afcb54e32624e2228da99b71fdf4", 0x43}, {&(0x7f0000001ec0)="78a3", 0x2}, {&(0x7f0000001f00)="65ce4d1de2675daaef31ae9ab57304ebe3583a5595377bf73fbdb6a6dda3fe0d3e5220a1c22e2cfeaa4b4713431016696870e5629bde87feb003a65afd45baabb66d9acc7298ec6af98feb036de9cc208cb74191f0a328c98dab1e33fad8a099b48ca2a9ffb05da870a13f93cbe94b644f322a0c0291c31bc7abd6eec1f58101438cb3a51da2043ab206", 0x8a}], 0x4}}, {{&(0x7f0000002000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x4, 0x4, 0x3, {0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, [], 0x1}, 0x7}}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000002080)="50186304c4ec688f49f0ed4e01e6e79e9bc8e84d818bd3ae06322baa97e7b599ff5ef5d0e16ce2809579f8f90e", 0x2d}, {&(0x7f00000020c0)="89bba2", 0x3}], 0x2, &(0x7f0000002140)=[{0x60, 0x10d, 0x7, "30094ff013251d37a296d15bf80f6532974278e1c8cad7542a177033e9f6743405643b7e852ad5476c7472c7d3b7c03fe752e63b76dd77f0dfbd5e2a22a763a26aa97f9ee922d314f71d47"}, {0xe0, 0x116, 0x1ff, "71f12eec8a026eed2da241b493fbe5101bf7735fedd1f7a7ce6f46caf1e80acce6793be6770d8f70840924337722b7db37be385b9ce6ece815da7e4b2469da702fda0bb7ea906d5a952ae61649862a4d7ee12891584553744b7e62dc71ddbc83a0de06f6c0a2792761c1a2af08c91456e41db8526560676485909ec805001832b9b0ba14c905a64769a5b0032fae346ecec8ad9dcb04646e3b8d85c6e39dc1ac0fcc7cf0cf5926fc948a11e33b0df499259fc9b27c304b9d43bfc44a2342c108f4138d3c89a6a0b8f0c4707426f253"}, {0x38, 0x102, 0x5, "a9c3e25d220c3bde1600233d1bb7dee52109df90d6e7db6cefb6bfd7ce57f7ee0738f7"}, {0xd8, 0x107, 0x3, "bb7c95dbe3eb6326d20ac6b0aee49267a56dfa6cf46155562a110fc542bb7231e10d1036df2c2d8dc692cb967ce1407553491c3b76bf00e9bba446314d235f09d0b809a191c0dc150d0339bd852aebe4680df44ab788c0493688f6ee836824232f9ed99ab18ce9746f7f9e688adce58297fb28a54d5654256c1991962483b2ffc2d7c01fe5c620adc3cc80d36e47538cfd20f750038a7bd8b44b13888a03a1077fc8f7625627a3a191cfb27c879c317451b23b1dbce8cd9a8b1589992863b407d478ed5b22c90e"}, {0xa0, 0x105, 0x9, "3f54b8acbef6b1c502b5b71089269801c89b819f94c4c9048dd1580ef932bba2ba68a1c4d473b43b0de63479ec4c1481a327f757280ac29e892214d584c4f12ced14d853c5b42efd2634dd21e2ce89dcda735fa873e77f2b717e8337098e2af221f5631d1ba20b04b67288f5a704e8d9f5b4c6bb15a822bcd09b63785f6cd7b3c843baaf225a6be47ef468a9102c"}], 0x2f0}}, {{&(0x7f0000002440)=@generic={0x25, "517f694d70391bcbfd0d2065a375f44155f8d94e02ea74f31b044dd9c5780c01a3d7caf2c06a9ee7d7b23f6a0a2ffb1df2a78c8b58d7c0e6924bdd664d11a626322d3b19e248f57ccb47593fc704602432aeb873473eab9cb374ddcdc5b2e2f16f3342eb8ec41c6b59088c2428ca264164010cf9cae0e4b7f7e404bbdc6c"}, 0x80, &(0x7f00000026c0)=[{&(0x7f00000024c0)="55dc8e8b063c5520488332857613594e49dd5358b83744798400e1684d60acb0e6f51d97b2c462ec417b6bcccb929caf505e2b65a91cb1854d7ab707dd820b126dd22dfc25008437420595f4bb0a877ea775254509d743ff42adf18ae671a62947cc", 0x62}, {&(0x7f0000002540)="c7fdecbd5896faa23ad3c52f5a26285449a327a513482c75ab2fa34d3c77d2c8cc02a49753a0aeb76817c224c0a21b29dc33ed4c92303b860cec75bb8f773dbe0f567b0cd9ae34b047d524ee52ca3a56f17943ff47203cfe57b02cb6763d40cedadd02662796472e1c21b0a33e0677945666f8e6283c73e0c29a399558c9d5a6c458c13322eb1efb820657c59d8d87f32c78ee5244d58df3c23870534c56de05ae48e78f37b52176321c5465f7e40d54fd9eab47ec24c3552890e0ea7b52a40bf3540062529a6d7dd7f9d5149bfdf1109f2085b54f8a161e1d779d8a8fcdb9a4", 0xe0}, {&(0x7f0000002640)="43432b7c09933a1c9c946a2ec4c08123cb06cf9a818d639678d931c700717808d3b6622d97cda51f1594e1f7ff07bf5415c81b3583c54ea84af44b52166921f7ec59424653aa8950851bc554ac3b2baa177fd3cc2036ec4fcbb3eb943c1e", 0x5e}], 0x3, &(0x7f0000003b40)=ANY=[@ANYBLOB="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"], 0x1260}}], 0x7, 0x4000001) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x3d}, {0x6}]}, 0x10) r6 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) [ 456.600079][ T9578] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 456.752399][ T9597] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 07:17:04 executing program 0: r0 = socket(0x1e, 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='.\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000000000000024100000002001365"], 0x5d}}, 0x0) ioctl$sock_ifreq(r0, 0x8936, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 07:17:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$dsp(r3, &(0x7f0000000000)="401163d5d6e07c208b98cb3cb9fdb2a15735788a49151554a251376a2dd3f82c6a3787ac5bee2c326418c80ee990befd3528e419316922ba88eec63f40ddf5ae3cc9cc", 0x43) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x402d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 456.858207][ T9599] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 07:17:04 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1c2) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) dup(r2) write$binfmt_elf32(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0xb27) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x4e8000, 0xffff, 0x0, r3, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) unshare(0x40000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r5], 0x2c}, 0x1, 0x0, 0x0, 0x10000004}, 0x10040804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e25, 0xc1d4, @initdev={0xfe, 0x88, [], 0xfe, 0x0}, 0x40}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x100) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000040)=0x2) 07:17:04 executing program 0: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000240)="34cf5a533f6e2e12adaad739313d792849231968d2155e962d3536c2c773875ba6d6dfec76fe8725b5cbbf8e7e2f67f777357e19e2b507254107cf05aecff54e7842790045b7aabab9daa0683343720f94ba435cf2e7f112e0f1fe8d3970a0d1799c56a2fb647019f9a5050325f641d1dafc0b2f69acb705c865c112eacf7c074123cda6925e8ff54869eadaafdc1c10bbeeb7dfe341ab3c859b80ca1c68de0f2da41d7c8adc93e9be961025463ca8dc7b067b3a8ea322b40ce9c3f292a891074e1d040544a74a74c80f908fd8ff5b619229b9b276ed", 0xd6, r0) keyctl$revoke(0x3, r1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) wait4(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12023}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 457.307484][ C1] sd 0:0:1:0: [sg0] tag#4191 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 457.318126][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB: Test Unit Ready [ 457.324847][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.334837][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.344721][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.354571][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.364408][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.374248][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.384098][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.393944][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.403790][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.410011][ T8700] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 457.413611][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.430789][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.440630][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 457.450475][ C1] sd 0:0:1:0: [sg0] tag#4191 CDB[c0]: 00 00 00 00 00 00 00 00 [ 457.550485][ T9613] IPVS: ftp: loaded support on port[0] = 21 [ 457.615634][ T9615] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 457.657717][ T8700] usb 3-1: Using ep0 maxpacket: 8 [ 457.913628][ T8700] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 458.131832][ T9619] IPVS: ftp: loaded support on port[0] = 21 [ 458.156358][ T8700] usb 3-1: New USB device found, idVendor=046d, idProduct=402d, bcdDevice= 0.40 [ 458.165752][ T8700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.173877][ T8700] usb 3-1: Product: syz [ 458.178331][ T8700] usb 3-1: Manufacturer: syz [ 458.183077][ T8700] usb 3-1: SerialNumber: syz [ 458.418713][ C1] sd 0:0:1:0: [sg0] tag#4192 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 458.422937][ T8700] uvcvideo: Found UVC 0.00 device syz (046d:402d) [ 458.429350][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB: Test Unit Ready [ 458.435821][ T8700] uvcvideo: No valid video chain found. [ 458.448106][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.457954][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.467797][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.477635][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.487485][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.497344][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.507274][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.517210][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.527048][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.536894][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.546726][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.556559][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 458.566387][ C1] sd 0:0:1:0: [sg0] tag#4192 CDB[c0]: 00 00 00 00 00 00 00 00 [ 458.666040][ T8698] usb 3-1: USB disconnect, device number 6 07:17:07 executing program 2: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x80000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x2000000000000000, 0x0, 0x3c2, 0x0, 0x0, 0x404cb, 0x0, 0x5, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x100000, 0x1000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000740)={0x6, &(0x7f0000000900)=""/4096, &(0x7f0000000680)=[{0x3, 0xc1, 0x54a, &(0x7f0000000200)=""/193}, {0x7, 0xb1, 0x404f, &(0x7f0000000440)=""/177}, {0x0, 0xb, 0x8, &(0x7f0000000300)=""/11}, {0xe6f1, 0x76, 0xed8, &(0x7f0000000500)=""/118}, {0x3, 0x27, 0x2, &(0x7f0000000340)=""/39}, {0x8cc, 0xee, 0x7, &(0x7f0000000580)=""/238}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 459.751700][ T9613] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 07:17:07 executing program 2: fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/11], 0xb, 0x3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7119769]}, 0x45c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 459.981407][ T9019] tipc: TX() has been purged, node left! [ 460.173621][ T9691] input: syz0 as /devices/virtual/input/input5 [ 460.225803][ T9696] input: syz0 as /devices/virtual/input/input6 07:17:07 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1c2) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) dup(r2) write$binfmt_elf32(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="7f454c4606014080f9ffffffffffffff0200030000f0ffffd3020000380000006c0200000100010006002000020008006b070500000000000000006002000000685d0000030000000101000002000000080000000400000003ec1870ecbd01aa6da7622d3a907aead3031e2e4f60cb2ad8e2996afb738f36e348f8cade7719e6f0bcef7a1cb3f3fbbfcbe0d583cc02f2fb476ddf73782f13c5d13174c67cb1530978f50275c3d7f6585407bd9cc0de6dfc6b6027a15a72030d6fc74b754b146297a8e9dfb01ffbc30d1562c5a7a992459adfd1bc0b382e2bd056e970038e73ae9b16fccf6d7db4a2ea3cf1614fadf2caeecf6bc882f0aac77a97813f9f96bd468d56ccb5735c369a11f96744bc20d78270736d39852d9c3c974885f3ee4fff11f20873583fb6280000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006470283d09503b137e921c289a"], 0xb27) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x4e8000, 0xffff, 0x0, r3, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) unshare(0x40000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r5], 0x2c}, 0x1, 0x0, 0x0, 0x10000004}, 0x10040804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e25, 0xc1d4, @initdev={0xfe, 0x88, [], 0xfe, 0x0}, 0x40}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x100) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000040)=0x2) 07:17:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="fe000000000000001cf211000c000100626f6e060000001495c664620000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x326}, 0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={r5, 0x200}, 0x8) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000240)=0x4) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, &(0x7f0000000280)=0xff000000) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="214edc7d588ac1e55af3fc180647ba4c00000010", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800800010003000000080002000200000008000a00", @ANYRES32=r7, @ANYBLOB], 0x4c}}, 0x0) [ 460.682038][ C0] sd 0:0:1:0: [sg0] tag#4208 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 460.692726][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB: Test Unit Ready [ 460.699573][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.709457][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.719336][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.729271][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.739157][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.749111][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.758978][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.768851][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:17:08 executing program 2: write$nbd(0xffffffffffffffff, &(0x7f00000001c0)={0x67446698, 0x0, 0x1, 0x3, 0x1, "df891e9dc4429569e68640cfb042fc0946f29d4cd00f82d51382c6a5390f769687cfc5aa3774dbc7d8edbfacd18a9e2519f17134454ce643301e04609e80f0ec955adcc652b98b034250be0ada49f9b81edb3a0c447096e35eb4d10defd81388af7d14f69c7a42080e3b6bc8a2874f1d0d829c3c8790c27f6075f5c8448185fc05e07b523db0ee30c90e9f1842504badf3e80450c1da9b08ae5c3faa75c932a5561fa5b60acfe9581f1c91c277b8c247ac08a2054dedcdb47a69"}, 0xca) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000407d1eb42d400000000001090224000009210000000122011e0ee7cfcc38bd750bcae747f6cc030020000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) [ 460.778720][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.788585][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.798423][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.808283][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 460.818139][ C0] sd 0:0:1:0: [sg0] tag#4208 CDB[c0]: 00 00 00 00 00 00 00 00 [ 460.915843][ T9706] IPVS: ftp: loaded support on port[0] = 21 [ 460.916193][ T9707] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 461.416829][ T8699] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 461.776236][ T8699] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 461.786774][ T8699] usb 3-1: config 9 has no interfaces? [ 461.792438][ T8699] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.40 [ 461.801799][ T8699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.235523][ T8699] usb 3-1: string descriptor 0 read error: -71 [ 462.266735][ T8699] usb 3-1: USB disconnect, device number 7 [ 462.977033][ T8699] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 463.395431][ T8699] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 463.403250][ T8699] usb 3-1: can't read configurations, error -71 07:17:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYRES64=r0], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010400000000000000000000005c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x4c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r6 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r7}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000240)=0xc) [ 463.818492][ T9748] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 463.918265][ T9753] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 463.959222][ T9753] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 464.051918][ T9748] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. 07:17:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) r1 = memfd_create(&(0x7f0000000640)='\x10\x01\x00t-\x8f\xa5l\x00\x00`\xb8\x00\x00\xad\x8d\x00\x01\xbf\x00\x00\x93(\xe5\xd9Z\xc2\xaaB,\xc2\xd0\xb2\x98\x01f\xdc\xf0qf4\xa3\xc8Fog\xabM\x9e\xd2\xbb\xb7\xff\xa3\x1c<\xe7\x9b\xf3Wh\xa2P\x90\xfc\xaf\xc4g~dR\xaa\xd8\xb4\xc3\xc8OYa\xf9=R\xed\xeb\x17\xc3\xc8\xeaY\x195\x9d\xcd\xf0\xdb\xf7B\xe0\x01\xcc\x8d\rW!\xc1Y\x17t\xbe\xb7)\xb9\xc0\xd2\xc0\x88\xed(c\x1e\x89V\xda\xedFu2O\xad\xb9_P\xb5A2\x18\xce\xd3l\xc9\x84\xa14/]F\xef\x90\xd6{\x92\xa41\xcfU\xd2\xe0\x94\xb1\xb4\xd2E\xfd<\x18\xa6K\xbd\x03\xb9$\xde\xa1\xf2\xee\x85\x0f`4\xc6{?r\xd6;\xaeP\xc28F\xf8\xed\x99U1`\xac\x92\x157M^\xa0\x90\xd7\xe8\xd9\xa9\xdf\x15\xb1]\xf0C\x02]\x14K\xe8\x00\x00\x00\x8f\xca\xe4\x9d\xa2)\xf1\x00`.*\x1d/\xef\xe7G\x02\xbfH\xd3\x9cK+K\xc4\t\xdd\x96FA\xd5\xb57=\xbf1\xb9\x91\xc8\x98bc>\x93\xec\xcb\xa7\x04\xe6\x9d\xcf\xafgJ,\x9c\xaa\xbdY\xf6\xa7\x91\xb2\x00ihv\x0f3\xde\xae\xa2r\xc7\xa4\xa6\xf8\xd9A\x19\x9eA\xc3\x8d\x15B__=JwH\xe06\x82\x8bCJ\x14dF\x0f\xb2\xb8Q\x82\x95?\f\x8fa\xc0\'K\x1eN{\xd8\x82yW\x83\xc2\xce\xec\xf5F}\xeb\x91\xbe\x90\a\xbdr\b\x89\x980 dwX{\x06\x9e\xf3O\'\x166\xbfY\xd3\x9a\xa1\x9d\xf6\x84(o\xa8\xban3\xf2\xcdW\xdc\xa0\xd9\xe5\xaf\x1c\xeb\xfe\xc7\bAR$I\xe0,\xb2\xbd{\x8b\xf8*\xe7\xc1:', 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="43ed7c739af66b132ad2e57ff959c57fc05221545b374d", 0x17}], 0x1, 0x1, 0x83) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000080)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {0x17e}, 0x0, {}, 0x0, 0x0, 0x0, 0xc, "b04a837066a95a8f7b289271c607adb22d4d79c301007b1291b1150d4d3aa30d7beebc503c0ec25e290679d1042f1a0800e8af694c0d4300", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 07:17:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4b4, 0xbca1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000080), &(0x7f0000ee3000/0x2000)=nil, &(0x7f0000ee6000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket(0x10, 0x803, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r4, 0x0, 0x0, 0x0, 0x40}, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000000)=0x1, 0x0, 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x6, {[@local, @main=@item_4={0x3, 0x0, 0x0, "d6cfa20b"}]}}, 0x0}, 0x0) 07:17:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x800000000002, @local}, 0x10) [ 465.055530][ T8702] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 465.072978][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 07:17:12 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$update(0x2, r1, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @random="f6f0599e85e2", 'sit0\x00'}}, 0x1e) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xca, "bff81799e11acbfe88c0d43d53594682759c93bc9efddc76e09fc957e542c9a025fb78eeb07f8052eb968c377aaa44b431f2534a515a6fe932d2b13f6ef885fe472e03e018364069ca98b544b4520f06e61818ddd15100d75b48f86c6933d89790a183fbd80c5c2f5b581017e040124b66e852ce42e3b05e03dd014ee460ea3fcfff69f50d9eec742c18e04899dca8b0788e0f4f5b77281d2079787fe14b24faea09579df676bcae67857f3f1a98d5ea9d40178fe041e0cf9f632a230e4e8b8345ae5c7f392b5edc8b3f"}, &(0x7f00000001c0)=0xd2) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={r2, @in={{0x2, 0x4e22, @private=0x10001}}, 0x800, 0x800}, &(0x7f00000002c0)=0x90) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1) 07:17:13 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x50, 0xc0220) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x1) r1 = mq_open(&(0x7f0000000140)='/dev/audio#\x00', 0x40, 0x182, &(0x7f0000000180)={0x100, 0x20, 0x1, 0x48}) r2 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0xd8000, 0x98) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000240)={0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}]}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001680)='/dev/dlm-control\x00', 0x8000, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f00000017c0)={&(0x7f00000016c0), 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x10}}]}, 0x50}}, 0x20006010) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001800)='/dev/vcsu\x00', 0x280c00, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000001840)) sendfile(r4, r1, &(0x7f0000001880)=0x7, 0x1b0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000001900)={0x0, @aes128}) memfd_create(&(0x7f0000001940)='/dev/vcsu\x00', 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001a80)={'syztnl1\x00', &(0x7f0000001a00)={'syztnl2\x00', 0x0, 0x4, 0x5d, 0x3, 0x80, 0x60, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40, 0x1, 0x1b8a, 0x3}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000001ac0)={r6, 0x1, 0x6, @remote}, 0x10) r7 = dup3(r3, r1, 0x0) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000001c00)={0x4, 0xcc, &(0x7f0000001b00)="d9a700393a65a9894b5e820d13b7edbfdf501f24dcee1708f096d8fda86c33e404133297b16b1b7c9007dce19b46064e149fe03dc746941ea93e291ebc3505b06e714c10918dabe4509eadefe966d1c867b16b94bfd06efb730caa1fec8453cc6a56c86ba99807146860f2e5d9678e944c10d1788b6daa3aaaac17338a35e4f3df19ccb15cc3b56047d80c06e30759f2a23ef412463079c108837207685d7d1854b43a13e8fdbec7d46c4e50d49f75b4e6723420855fcf684845f55773e8445312f6a9d76d4dd0cc2a477d90"}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/nvme-fabrics\x00', 0x80080, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x30030006}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) [ 465.456053][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.467184][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.477286][ T8702] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.40 [ 465.486563][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.652875][ T8702] usb 2-1: config 0 descriptor?? 07:17:13 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@generic={0x3, 0xffff, 0x6}) [ 465.995447][ T8702] usbhid 2-1:0.0: can't add hid device: -71 [ 466.001970][ T8702] usbhid: probe of 2-1:0.0 failed with error -71 [ 466.059994][ T8702] usb 2-1: USB disconnect, device number 12 07:17:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00f5ffff1000aebf1e0fa4f4f2eef74af9aa3463771d25c4b9851bf545d30ad40ceb9e8ddfc4033cf1717f24d78c9907b0e8f5bda8a73b30088ae64a281fd86f696b4c0afe44b6346772e7eaff", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x1, 0x401, 0x0, @private0={0xfc, 0x0, [], 0x1}, @loopback, 0x1, 0x20, 0x0, 0x81}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000400)={@private0, @local, @remote, 0xd8, 0x0, 0x5a9, 0x400, 0x8, 0x400000, r6}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) [ 466.525140][ T8702] usb 2-1: new high-speed USB device number 13 using dummy_hcd 07:17:14 executing program 2: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0xfffc, @local}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f00000001c0), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) [ 466.925600][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.936818][ T8702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.947074][ T8702] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.40 [ 466.956364][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.109015][ T8702] usb 2-1: config 0 descriptor?? 07:17:14 executing program 2: syz_usb_connect(0x0, 0x58, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) [ 467.353974][ T9019] tipc: TX() has been purged, node left! [ 467.371306][ T9019] tipc: TX() has been purged, node left! 07:17:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x20000000) r5 = inotify_init() read(r5, 0x0, 0x11) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x2000000) write$hidraw(0xffffffffffffffff, &(0x7f0000000380)="3bdcf3842f339332643accdd351ae8df20a0148d5e06396a0a67bec06304fc0ba6823726a577a87a2029245ce1a02809c67a118d8f4e3ce08a3e55bbbf5fce26a66a9017441feb413511927cc532d50f23dea9002c615147ea58ad422f325b7a949932b6c1fe3fc3ee023aba183d7c48d7dd713f27b64cd6f7ee24f2195cb8877d6b4ecf472158f6d4fa299ebbea67141ca2977df3c13f2a538c74daf9fdd80ea2096d9e955ba24187c9296bce399fb2a3ba68db2692f1988d1bc00a553e2dc9128a0cee8cf01d6b8fb6abcf419bf69dd95a285407b2cdb3b0", 0xd9) inotify_rm_watch(r5, 0x0) inotify_rm_watch(r2, r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6500000000000000200012800b00010067656e6576650000100002800800010004005869"], 0x40}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) statx(r7, &(0x7f0000000080)='./file0\x00', 0x6000, 0x2, &(0x7f0000000240)) read$hidraw(r7, &(0x7f0000000140)=""/247, 0xf7) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 467.580848][ T8702] cypress 0003:04B4:BCA1.0001: item fetching failed at offset 1/5 [ 467.589499][ T8702] cypress 0003:04B4:BCA1.0001: parse failed [ 467.596301][ T8702] cypress: probe of 0003:04B4:BCA1.0001 failed with error -22 [ 467.676793][ T8699] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 467.699206][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 467.782739][ T9020] usb 2-1: USB disconnect, device number 13 [ 467.946954][ T8699] usb 3-1: device descriptor read/64, error 18 [ 468.335167][ T8699] usb 3-1: device descriptor read/64, error 18 [ 468.555658][ T9020] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 468.605042][ T8699] usb 3-1: new high-speed USB device number 11 using dummy_hcd 07:17:16 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r6 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r7}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000700)=@updpolicy={0x330, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffff9}}, @policy={0xac, 0x7, {{@in6=@remote, @in=@broadcast, 0x4e22, 0x1f, 0x4e23, 0xb2c, 0x2, 0x0, 0x0, 0xb2, r4, r3}, {0x9, 0xf5fd, 0x5, 0x800, 0x5, 0x0, 0x0, 0x6960}, {0x74d, 0x100, 0x0, 0x9}, 0xfffffe00, 0x0, 0x0, 0x1, 0x1, 0x2}}, @migrate={0xe8, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@mcast1, @in6=@mcast1, 0x3c, 0x3, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, [], 0xc}, @in6=@mcast2, @in=@loopback, @in6=@mcast2, 0x3c, 0x1, 0x0, 0x3500, 0x2, 0xa}, {@in=@multicast1, @in=@broadcast, @in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6c, 0x4, 0x0, 0x3502, 0x2, 0x2}]}, @policy={0xac, 0x7, {{@in6=@ipv4={[], [], @broadcast}, @in6=@mcast2, 0x4e20, 0x0, 0x4e23, 0x1, 0xa, 0x0, 0x30, 0x87, 0x0, r7}, {0x3, 0x9, 0xfffffffffffffffd, 0x6, 0x62b, 0x8000, 0x9}, {0x2, 0x1, 0x3, 0x6}, 0x3, 0x6e6bb0, 0x1, 0x0, 0x3, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0xa}}]}, 0x330}, 0x1, 0xfffff000}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 468.876124][ T8699] usb 3-1: device descriptor read/64, error 18 [ 468.915944][ T9020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.927656][ T9020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.937793][ T9020] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.40 [ 468.947270][ T9020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.021122][ T9848] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 469.073800][ T9849] netlink: 736 bytes leftover after parsing attributes in process `syz-executor.0'. [ 469.113511][ T9020] usb 2-1: config 0 descriptor?? [ 469.114545][ T9848] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 469.127087][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 469.144397][ T9848] device ipvlan2 entered promiscuous mode [ 469.270557][ T9849] netlink: 736 bytes leftover after parsing attributes in process `syz-executor.0'. [ 469.280831][ T8699] usb 3-1: device descriptor read/64, error 18 [ 469.296316][ T9853] netlink: 736 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:16 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x36b, 0x101101) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000040)=0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000140)={0x1, 0x48, [], 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 469.321861][ T9849] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 469.330576][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 469.348365][ T9849] device ipvlan3 entered promiscuous mode [ 469.360482][ T9020] usb 2-1: can't set config #0, error -71 [ 469.396983][ T9020] usb 2-1: USB disconnect, device number 14 [ 469.407794][ T8699] usb usb3-port1: attempt power cycle 07:17:17 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r6 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r7}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000700)=@updpolicy={0x330, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffff9}}, @policy={0xac, 0x7, {{@in6=@remote, @in=@broadcast, 0x4e22, 0x1f, 0x4e23, 0xb2c, 0x2, 0x0, 0x0, 0xb2, r4, r3}, {0x9, 0xf5fd, 0x5, 0x800, 0x5, 0x0, 0x0, 0x6960}, {0x74d, 0x100, 0x0, 0x9}, 0xfffffe00, 0x0, 0x0, 0x1, 0x1, 0x2}}, @migrate={0xe8, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@mcast1, @in6=@mcast1, 0x3c, 0x3, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, [], 0xc}, @in6=@mcast2, @in=@loopback, @in6=@mcast2, 0x3c, 0x1, 0x0, 0x3500, 0x2, 0xa}, {@in=@multicast1, @in=@broadcast, @in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6c, 0x4, 0x0, 0x3502, 0x2, 0x2}]}, @policy={0xac, 0x7, {{@in6=@ipv4={[], [], @broadcast}, @in6=@mcast2, 0x4e20, 0x0, 0x4e23, 0x1, 0xa, 0x0, 0x30, 0x87, 0x0, r7}, {0x3, 0x9, 0xfffffffffffffffd, 0x6, 0x62b, 0x8000, 0x9}, {0x2, 0x1, 0x3, 0x6}, 0x3, 0x6e6bb0, 0x1, 0x0, 0x3, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0xa}}]}, 0x330}, 0x1, 0xfffff000}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 07:17:17 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r6 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r7}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000700)=@updpolicy={0x330, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffff9}}, @policy={0xac, 0x7, {{@in6=@remote, @in=@broadcast, 0x4e22, 0x1f, 0x4e23, 0xb2c, 0x2, 0x0, 0x0, 0xb2, r4, r3}, {0x9, 0xf5fd, 0x5, 0x800, 0x5, 0x0, 0x0, 0x6960}, {0x74d, 0x100, 0x0, 0x9}, 0xfffffe00, 0x0, 0x0, 0x1, 0x1, 0x2}}, @migrate={0xe8, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@mcast1, @in6=@mcast1, 0x3c, 0x3, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, [], 0xc}, @in6=@mcast2, @in=@loopback, @in6=@mcast2, 0x3c, 0x1, 0x0, 0x3500, 0x2, 0xa}, {@in=@multicast1, @in=@broadcast, @in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6c, 0x4, 0x0, 0x3502, 0x2, 0x2}]}, @policy={0xac, 0x7, {{@in6=@ipv4={[], [], @broadcast}, @in6=@mcast2, 0x4e20, 0x0, 0x4e23, 0x1, 0xa, 0x0, 0x30, 0x87, 0x0, r7}, {0x3, 0x9, 0xfffffffffffffffd, 0x6, 0x62b, 0x8000, 0x9}, {0x2, 0x1, 0x3, 0x6}, 0x3, 0x6e6bb0, 0x1, 0x0, 0x3, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0xa}}]}, 0x330}, 0x1, 0xfffff000}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 469.945761][ T9866] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 469.978362][ T9866] netlink: 736 bytes leftover after parsing attributes in process `syz-executor.0'. [ 470.012853][ T9866] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 470.021440][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 470.039120][ T9866] device ipvlan4 entered promiscuous mode [ 470.096137][ T5] Bluetooth: hci3: command 0x0409 tx timeout [ 470.125343][ T9870] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 470.126840][ T8699] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 470.164587][ T9870] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 470.212603][ T9870] device ipvlan2 entered promiscuous mode 07:17:17 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r6 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r7}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000700)=@updpolicy={0x330, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffff9}}, @policy={0xac, 0x7, {{@in6=@remote, @in=@broadcast, 0x4e22, 0x1f, 0x4e23, 0xb2c, 0x2, 0x0, 0x0, 0xb2, r4, r3}, {0x9, 0xf5fd, 0x5, 0x800, 0x5, 0x0, 0x0, 0x6960}, {0x74d, 0x100, 0x0, 0x9}, 0xfffffe00, 0x0, 0x0, 0x1, 0x1, 0x2}}, @migrate={0xe8, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@mcast1, @in6=@mcast1, 0x3c, 0x3, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, [], 0xc}, @in6=@mcast2, @in=@loopback, @in6=@mcast2, 0x3c, 0x1, 0x0, 0x3500, 0x2, 0xa}, {@in=@multicast1, @in=@broadcast, @in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6c, 0x4, 0x0, 0x3502, 0x2, 0x2}]}, @policy={0xac, 0x7, {{@in6=@ipv4={[], [], @broadcast}, @in6=@mcast2, 0x4e20, 0x0, 0x4e23, 0x1, 0xa, 0x0, 0x30, 0x87, 0x0, r7}, {0x3, 0x9, 0xfffffffffffffffd, 0x6, 0x62b, 0x8000, 0x9}, {0x2, 0x1, 0x3, 0x6}, 0x3, 0x6e6bb0, 0x1, 0x0, 0x3, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0xa}}]}, 0x330}, 0x1, 0xfffff000}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 470.316724][ T8699] usb 3-1: device descriptor read/8, error -61 07:17:18 executing program 1: socket$nl_audit(0x10, 0x3, 0x9) clone3(&(0x7f0000000340)={0xc7002000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') lseek(r0, 0xffb5, 0x1) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000140)={{0x2, 0x0, @descriptor="2fda4fe306d5a352"}, 0x9e, 0x0, [], "56f8275c95ac22ab5d7d962224317954a52843a8bcd845101049a2f561811f364efa4cac756c9a2793c2cec722318ca21ebe7ac579829003b12e4068cc272a12aa818325cddbd2dcc3ef5360bb59a0f77052e883166f1e637c22f2a1d7f3ee1ff2efaa978162990412e54cac21256e4f784ab9348918357da148b0507565394fe2d663b55e08ca80bd46ef6a6ee5c70d672d8e7722f17f0e7633e83ce390"}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/100) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = gettid() clone(0x8003400, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) shutdown(0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 470.566199][ T8699] usb 3-1: device descriptor read/8, error -71 [ 470.609035][ T9876] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 470.626028][ T9876] device ipvlan5 entered promiscuous mode [ 470.919781][ T9880] IPVS: ftp: loaded support on port[0] = 21 [ 471.008778][ T9842] IPVS: ftp: loaded support on port[0] = 21 [ 471.349521][ T9880] IPVS: ftp: loaded support on port[0] = 21 [ 471.564387][ T1388] tipc: TX() has been purged, node left! [ 471.889662][ T9842] chnl_net:caif_netlink_parms(): no params data found [ 472.176877][ T9020] Bluetooth: hci3: command 0x041b tx timeout [ 472.220436][ T9842] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.227822][ T9842] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.237497][ T9842] device bridge_slave_0 entered promiscuous mode [ 472.361085][ T9842] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.368904][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.378425][ T9842] device bridge_slave_1 entered promiscuous mode [ 472.472398][ T9842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.545232][ T9842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.623595][ T9842] team0: Port device team_slave_0 added [ 472.653448][ T9842] team0: Port device team_slave_1 added [ 472.769194][ T9842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.776577][ T9842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.802874][ T9842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.854371][ T9842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.861807][ T9842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.888223][ T9842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.960879][ T9842] device hsr_slave_0 entered promiscuous mode [ 472.975313][ T9842] device hsr_slave_1 entered promiscuous mode [ 472.988263][ T9842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.996005][ T9842] Cannot create hsr debugfs directory [ 473.335628][ T9842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 473.353676][ T9842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 473.371452][ T9842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 473.398273][ T9842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 473.803104][ T9842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.853801][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 473.864445][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.893840][ T9842] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.922807][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.932798][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.943948][ T8702] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.951243][ T8702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.977454][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.986683][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.996631][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 474.006504][ T8698] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.013745][ T8698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.040794][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 474.066968][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 474.097848][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 474.109065][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 474.190288][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 474.200785][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 474.211366][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 474.222123][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 474.231729][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.241313][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 474.251183][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 474.275926][ T9020] Bluetooth: hci3: command 0x040f tx timeout [ 474.283207][ T9842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 474.411513][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 474.419462][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 474.449744][ T9842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.550454][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 474.560990][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 474.637277][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 474.647888][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.672507][ T9842] device veth0_vlan entered promiscuous mode [ 474.681660][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.691204][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.726444][ T9842] device veth1_vlan entered promiscuous mode [ 474.785815][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 474.795796][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 474.826739][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 474.837002][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 474.858818][ T9842] device veth0_macvtap entered promiscuous mode [ 474.887956][ T9842] device veth1_macvtap entered promiscuous mode [ 474.946486][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 474.957101][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.967247][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 474.979169][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.989239][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 474.999880][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.014032][ T9842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.039486][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 475.049110][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 475.058835][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 475.069056][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 475.120854][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 475.131572][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.141785][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 475.152971][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.163074][ T9842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 475.173758][ T9842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.187955][ T9842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.200576][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 475.210784][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:17:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x80000001, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x80) unshare(0x6c060000) r2 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x12, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000001500)=@v2={0x2, @aes256, 0x8, [], "80c16ede626005ef4a7498b0c33748df"}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8040, 0x100) getdents64(r3, &(0x7f00000000c0)=""/4095, 0xfff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001540)='/dev/vcsu\x00', 0x80502, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000001580)={0x0, @bt={0x20, 0x9, 0x1, 0x6, 0x7f73, 0x4, 0x6f75a365, 0x80000000, 0x400, 0x5, 0x9, 0x2d9, 0x80000001, 0x8, 0x1, 0x0, {0x1, 0xfffff83c}, 0xb5, 0x13}}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 07:17:23 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040001) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000040)={[0x4]}, 0x8) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 07:17:23 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r6 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r7}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000700)=@updpolicy={0x330, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffff9}}, @policy={0xac, 0x7, {{@in6=@remote, @in=@broadcast, 0x4e22, 0x1f, 0x4e23, 0xb2c, 0x2, 0x0, 0x0, 0xb2, r4, r3}, {0x9, 0xf5fd, 0x5, 0x800, 0x5, 0x0, 0x0, 0x6960}, {0x74d, 0x100, 0x0, 0x9}, 0xfffffe00, 0x0, 0x0, 0x1, 0x1, 0x2}}, @migrate={0xe8, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@mcast1, @in6=@mcast1, 0x3c, 0x3, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, [], 0xc}, @in6=@mcast2, @in=@loopback, @in6=@mcast2, 0x3c, 0x1, 0x0, 0x3500, 0x2, 0xa}, {@in=@multicast1, @in=@broadcast, @in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6c, 0x4, 0x0, 0x3502, 0x2, 0x2}]}, @policy={0xac, 0x7, {{@in6=@ipv4={[], [], @broadcast}, @in6=@mcast2, 0x4e20, 0x0, 0x4e23, 0x1, 0xa, 0x0, 0x30, 0x87, 0x0, r7}, {0x3, 0x9, 0xfffffffffffffffd, 0x6, 0x62b, 0x8000, 0x9}, {0x2, 0x1, 0x3, 0x6}, 0x3, 0x6e6bb0, 0x1, 0x0, 0x3, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0xa}}]}, 0x330}, 0x1, 0xfffff000}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 07:17:23 executing program 1: socket$nl_audit(0x10, 0x3, 0x9) clone3(&(0x7f0000000340)={0xc7002000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') lseek(r0, 0xffb5, 0x1) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000140)={{0x2, 0x0, @descriptor="2fda4fe306d5a352"}, 0x9e, 0x0, [], "56f8275c95ac22ab5d7d962224317954a52843a8bcd845101049a2f561811f364efa4cac756c9a2793c2cec722318ca21ebe7ac579829003b12e4068cc272a12aa818325cddbd2dcc3ef5360bb59a0f77052e883166f1e637c22f2a1d7f3ee1ff2efaa978162990412e54cac21256e4f784ab9348918357da148b0507565394fe2d663b55e08ca80bd46ef6a6ee5c70d672d8e7722f17f0e7633e83ce390"}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/100) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = gettid() clone(0x8003400, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) shutdown(0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 475.957128][T10150] __nla_validate_parse: 5 callbacks suppressed [ 475.957166][T10150] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.010996][T10153] netlink: 736 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.050341][T10150] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 476.058899][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.076736][T10150] device ipvlan6 entered promiscuous mode [ 476.128974][T10154] IPVS: ftp: loaded support on port[0] = 21 [ 476.198073][T10162] IPVS: ftp: loaded support on port[0] = 21 [ 476.350807][ T8699] Bluetooth: hci3: command 0x0419 tx timeout 07:17:24 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040001) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000040)={[0x4]}, 0x8) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 07:17:24 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r5 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r6}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000700)=@updpolicy={0x330, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffff9}}, @policy={0xac, 0x7, {{@in6=@remote, @in=@broadcast, 0x4e22, 0x1f, 0x4e23, 0xb2c, 0x2, 0x0, 0x0, 0xb2, r3, r2}, {0x9, 0xf5fd, 0x5, 0x800, 0x5, 0x0, 0x0, 0x6960}, {0x74d, 0x100, 0x0, 0x9}, 0xfffffe00, 0x0, 0x0, 0x1, 0x1, 0x2}}, @migrate={0xe8, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@mcast1, @in6=@mcast1, 0x3c, 0x3, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, [], 0xc}, @in6=@mcast2, @in=@loopback, @in6=@mcast2, 0x3c, 0x1, 0x0, 0x3500, 0x2, 0xa}, {@in=@multicast1, @in=@broadcast, @in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6c, 0x4, 0x0, 0x3502, 0x2, 0x2}]}, @policy={0xac, 0x7, {{@in6=@ipv4={[], [], @broadcast}, @in6=@mcast2, 0x4e20, 0x0, 0x4e23, 0x1, 0xa, 0x0, 0x30, 0x87, 0x0, r6}, {0x3, 0x9, 0xfffffffffffffffd, 0x6, 0x62b, 0x8000, 0x9}, {0x2, 0x1, 0x3, 0x6}, 0x3, 0x6e6bb0, 0x1, 0x0, 0x3, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0xa}}]}, 0x330}, 0x1, 0xfffff000}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) [ 476.672849][T10164] IPVS: ftp: loaded support on port[0] = 21 [ 476.753146][ T1388] tipc: TX() has been purged, node left! 07:17:24 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040001) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000040)={[0x4]}, 0x8) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 477.024417][T10229] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 477.090932][T10230] netlink: 736 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x0, 0x2, 0x4, @ipv4={[], [], @private=0xa010101}, @loopback, 0x20, 0x8, 0xfffffff8, 0x8}}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x170, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x438}, @NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x88}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x20}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x70}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc9, 0xbe, "09fe5ee9acf4ea0d10db36e444f28cc274ff781e30dec79209bf2ac3add6bcc373162b27b39c7aa902571f2904b292f1bfbdd7e47bd39410d210f3322fbc8813b0278b65e6a0a37c8e277edbea3ab8b8371294f1dfe8c5e96256576e27964f31dab16f296d53d4a77f7b8b1973dd79e3266c775f435d17e19f39d442426c5f95c247f3cec91e6bea79bf6f530ed6556532f239614fcb885b1b8a6be33a05ffafc20f65e3d2a1112f260175288018550c4dfd86e871cf536834b67f913a374c4970f94b00b2"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffffb, 0x80000000}}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1c, 0x13, "76707e89b3996a14fbae21d519d5add5a6a2bd888bc82abd"}]}, 0x170}, 0x1, 0x0, 0x0, 0x800}, 0x4000881) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c4a73f8ad4ad000000023", @ANYRES16=r1, @ANYBLOB="f928000000000a00106bdb7427e7fee4448004000a00"], 0x1c}}, 0x84) 07:17:24 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r5 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r6}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000700)=@updpolicy={0x330, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffff9}}, @policy={0xac, 0x7, {{@in6=@remote, @in=@broadcast, 0x4e22, 0x1f, 0x4e23, 0xb2c, 0x2, 0x0, 0x0, 0xb2, r3, r2}, {0x9, 0xf5fd, 0x5, 0x800, 0x5, 0x0, 0x0, 0x6960}, {0x74d, 0x100, 0x0, 0x9}, 0xfffffe00, 0x0, 0x0, 0x1, 0x1, 0x2}}, @migrate={0xe8, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@mcast1, @in6=@mcast1, 0x3c, 0x3, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, [], 0xc}, @in6=@mcast2, @in=@loopback, @in6=@mcast2, 0x3c, 0x1, 0x0, 0x3500, 0x2, 0xa}, {@in=@multicast1, @in=@broadcast, @in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6c, 0x4, 0x0, 0x3502, 0x2, 0x2}]}, @policy={0xac, 0x7, {{@in6=@ipv4={[], [], @broadcast}, @in6=@mcast2, 0x4e20, 0x0, 0x4e23, 0x1, 0xa, 0x0, 0x30, 0x87, 0x0, r6}, {0x3, 0x9, 0xfffffffffffffffd, 0x6, 0x62b, 0x8000, 0x9}, {0x2, 0x1, 0x3, 0x6}, 0x3, 0x6e6bb0, 0x1, 0x0, 0x3, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0xa}}]}, 0x330}, 0x1, 0xfffff000}, 0x0) 07:17:25 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040001) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000040)={[0x4]}, 0x8) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 477.606281][T10242] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 477.648649][T10242] netlink: 736 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x401}}, 0x10) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r3, 0x4) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x80010, r0, 0x0) 07:17:25 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:25 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040001) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000040)={[0x4]}, 0x8) dup(r3) [ 478.239738][T10253] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:26 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) socket(0x18, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:26 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1ec) r1 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f66696c653009f0"], 0xc) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x5, 0x0, 0xf000}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x50000}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24000042) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x50a, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00@', @ANYRES16=r4, @ANYBLOB="000428bd7000fbdbdf250d00000005002e000000000008003900010001000500290001000000080032000400000006002800010000000500300000000000080031000700000008003a000200000008003b00ff01000008003a0003000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) recvmmsg(r2, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/261, 0x105}], 0x1}}], 0x20a, 0x40010002, 0x0) [ 478.638542][ C0] sd 0:0:1:0: [sg0] tag#4219 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 478.649262][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB: Test Unit Ready [ 478.656203][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.666333][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.676205][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.682522][T10260] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 478.686087][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.705327][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.715194][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.725051][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.734913][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.744751][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.754599][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.764471][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.774239][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.784115][ C0] sd 0:0:1:0: [sg0] tag#4219 CDB[c0]: 00 00 00 00 00 00 00 00 07:17:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000018105e04da07000000001e0109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f42a8598e771508fc7"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002222000000962303020f0158270c4ac2c206e53f070d0000002a9000170900be0083"], 0x0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9ed, 0x7, 0x5e}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000040)=""/82) 07:17:26 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040001) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) signalfd(r2, &(0x7f0000000040)={[0x4]}, 0x8) 07:17:26 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) socket(0x18, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:27 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040001) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) [ 479.593873][T10269] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 479.684720][ T8698] usb 2-1: new high-speed USB device number 15 using dummy_hcd 07:17:27 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) socket(0x18, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 480.016031][ T8698] usb 2-1: Using ep0 maxpacket: 16 07:17:27 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) socket(0x18, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:27 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) [ 480.117442][ T1388] tipc: TX() has been purged, node left! [ 480.138465][ T1388] tipc: TX() has been purged, node left! [ 480.154963][ T8698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 07:17:27 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) socket(0x18, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 480.166145][ T8698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.176502][ T8698] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 480.360357][ T8698] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 480.369728][ T8698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 480.378375][ T8698] usb 2-1: SerialNumber: syz [ 480.473724][ T8698] usb 2-1: config 0 descriptor?? 07:17:28 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) 07:17:28 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x73af0700, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) [ 480.973707][T10288] __nla_validate_parse: 3 callbacks suppressed [ 480.973743][T10288] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 480.994950][ T8698] usbhid 2-1:0.0: can't add hid device: -71 [ 481.001254][ T8698] usbhid: probe of 2-1:0.0 failed with error -71 07:17:28 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) [ 481.072518][ T8698] usb 2-1: USB disconnect, device number 15 [ 481.100328][T10292] device batadv0 entered promiscuous mode [ 481.210701][T10292] device batadv0 left promiscuous mode [ 481.705527][ T8698] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 481.955133][ T8698] usb 2-1: Using ep0 maxpacket: 16 [ 482.085885][ T8698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.097067][ T8698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.107141][ T8698] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 482.215816][ T8698] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 482.225999][ T8698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=30 [ 482.234219][ T8698] usb 2-1: SerialNumber: syz [ 482.297788][ T8698] usb 2-1: config 0 descriptor?? 07:17:30 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') 07:17:30 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:30 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:30 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) [ 482.495212][ T8698] usb 2-1: can't set config #0, error -71 [ 482.547508][ T8698] usb 2-1: USB disconnect, device number 16 [ 482.645642][T10313] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 482.700248][T10319] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:17:30 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) 07:17:30 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES64=0x0], 0x0) 07:17:30 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000939a12407d04015060a5000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') [ 483.189096][T10326] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 483.223553][T10329] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. 07:17:30 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) 07:17:31 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 483.544759][ T5] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 483.584515][ T8703] usb 4-1: new high-speed USB device number 2 using dummy_hcd 07:17:31 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) [ 483.641194][T10337] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:31 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 483.874650][ T8703] usb 4-1: device descriptor read/64, error 18 [ 483.905543][ T5] usb 2-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 483.915040][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.994110][ T5] usb 2-1: config 0 descriptor?? [ 484.041155][ T5] gspca_main: se401-2.14.0 probing 047d:5001 07:17:31 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) [ 484.152706][T10345] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:31 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:31 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) [ 484.304418][ T8703] usb 4-1: device descriptor read/64, error 18 [ 484.464885][ T5] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 484.472641][ T5] se401: probe of 2-1:0.0 failed with error -71 [ 484.507636][ T5] usb 2-1: USB disconnect, device number 17 [ 484.554901][T10353] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 484.584445][ T8703] usb 4-1: new high-speed USB device number 3 using dummy_hcd 07:17:32 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) 07:17:32 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 484.865449][ T8703] usb 4-1: device descriptor read/64, error 18 07:17:32 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 485.224601][ T5] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 485.275888][ T8703] usb 4-1: device descriptor read/64, error 18 [ 485.394943][ T8703] usb usb4-port1: attempt power cycle [ 485.585600][ T5] usb 2-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 485.595073][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.634689][ T5] usb 2-1: config 0 descriptor?? [ 485.682144][ T5] gspca_main: se401-2.14.0 probing 047d:5001 [ 485.904640][ T5] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 485.912462][ T5] se401: probe of 2-1:0.0 failed with error -71 [ 485.955826][ T5] usb 2-1: USB disconnect, device number 18 [ 486.107141][ T8703] usb 4-1: new high-speed USB device number 4 using dummy_hcd 07:17:33 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x5c, 0x2) r1 = open(&(0x7f0000000140)='./file0\x00', 0x4cc201, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) listen(0xffffffffffffffff, 0x1) 07:17:33 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) 07:17:33 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:33 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x1) socket$kcm(0x10, 0x7, 0x10) [ 486.304654][ T8703] usb 4-1: device descriptor read/8, error -71 [ 486.516314][ T8703] usb 4-1: device descriptor read/8, error -71 [ 486.556885][ C0] sd 0:0:1:0: [sg0] tag#4220 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 486.567554][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB: Test Unit Ready [ 486.574393][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.584250][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.594021][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.603928][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.613797][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.623660][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.633521][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.643446][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:17:34 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) [ 486.653339][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.663209][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.673081][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.682938][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 486.692800][ C0] sd 0:0:1:0: [sg0] tag#4220 CDB[c0]: 00 00 00 00 00 00 00 00 07:17:34 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x80c002000104082, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x12, 0x4, 0x11a, &(0x7f00000001c0)="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"}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x10, &(0x7f0000000000), 0x20a154cc) 07:17:34 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:34 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x5c, 0x2) r1 = open(&(0x7f0000000140)='./file0\x00', 0x4cc201, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) listen(0xffffffffffffffff, 0x1) [ 487.083916][T10399] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:34 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) 07:17:34 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket(0x18, 0x0, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='veth0_virt_wifi\x00', 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="ff02013b965283018aa08c9980f0d1fdd3"], 0x64}, 0x1, 0x0, 0x0, 0x4000014}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4}, 0x14) sendmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x1, 0x1}, {0x10}], 0x20}}], 0x1, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000001c0)=0x4) 07:17:34 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 487.448840][ C1] sd 0:0:1:0: [sg0] tag#4221 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 487.459639][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB: Test Unit Ready [ 487.466412][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.476262][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.486109][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.495977][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.505809][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.515641][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.525489][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.535326][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.545160][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.554990][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.564811][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.574645][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 487.584488][ C1] sd 0:0:1:0: [sg0] tag#4221 CDB[c0]: 00 00 00 00 00 00 00 00 07:17:35 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x5c, 0x2) r1 = open(&(0x7f0000000140)='./file0\x00', 0x4cc201, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) listen(0xffffffffffffffff, 0x1) [ 487.745818][T10410] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:35 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x800000000000401) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000d50000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff00000000000000000000000020010000000000000000000000000000ac141400000000000000000000000000000000000000000000000200ff010000000000000000000000000001ffffffff000000000000000000000000ffffffff000000000000000000000000200100"/164], 0xec}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)={0x79e9, 0x0, 0x4, 0x40000000, 0xb00d, {0x77359400}, {0x3, 0xc, 0x5, 0x6a, 0x40, 0x6, "63122a3c"}, 0x0, 0x4, @userptr=0x800, 0x0, 0x0, r1}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x48) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) sendfile(r1, r0, &(0x7f0000000080)=0x10001, 0x620d99d) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000abaff9)={0x77359400}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x40400000}, &(0x7f0000000100)=0x8) socket$inet(0x2, 0x6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 07:17:35 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) 07:17:35 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 488.040948][ C0] sd 0:0:1:0: [sg0] tag#4223 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 488.051636][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB: Test Unit Ready [ 488.058426][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.068305][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.078159][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.088096][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.097970][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.107836][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.117701][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.127582][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.137446][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.147308][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.157148][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.167004][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 488.176872][ C0] sd 0:0:1:0: [sg0] tag#4223 CDB[c0]: 00 00 00 00 00 00 00 00 [ 488.459738][T10419] IPVS: ftp: loaded support on port[0] = 21 07:17:36 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xee, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff6377cdb5b524347c47478bdfdb968f3b27e59aa146175dd106736d173f0fc7ec6e26710000000049d2e181baf9459c5c953148c6801d2c0945a08ba8c552fc99a742000080812d27ae40b8ae4f2a88d2fbea75e16a61fd063f026bd7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb21be3d037359f1886a0ecfea4342b11a5dbb27622cd9f9d843a8d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994ccc7e054d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000005f01eb88910285f6dd69048821b68b5f2e9cecb34ad4000000007a6e3cdf09bc1a8e99592b3c4fbdc777d8532e0d70be3e431198daca0f4be445cfdfcf0d12a01a9221c844e28a6c53a26058375113fdd3bb6e53262f83e7c803a677320b12c843464f2d96463acc1f4ebcf33068b222499f8b119e2072d4efea53dc01cf640840ab9a9dd6b9c80f3c7f5b67bd20d5c0349548c64db5dddbffafe7da8b4f277dbf9d80e6e596575e6b44c483adc4b5fdeaaa47149da1a6757ed7e97544517f32a976ef3c66e033da46bfa31468eba625d264673301883128266b6201eacdfe51736c31f7feb6f6030a10e69c903927a5c11effd62911abc72d261c2eeb0a7c7f08bb280c4fc342717c43d8e2192f121cedce1b0440d42644ff87ae860a58a490e012785e2d04eba58a52cc9f15d9e9bcec24a3230a7bff038000000000003a3964045af092de789b7ef8ce392c4704d324b954be4d817cc3a5d5096e15b1aceeaf5631a8e510ad0c0467e033ce6c4e989c2e0f8b947ad687df3f5a18a26163815865e05ca718ece427f792ce459abdaf4f37ba61dc89567451000000000000000000da5fad4927bcc92b26fc45d76e64a428257381d2e46d6adc68cf5da791865bb3a834ecb6ed99147efcc54bcb21c16ccc8e65a5fc0b336a01c1fb7ea7632e9eef404b16867bec7ab5ed9604a5f0496f5b974848e02e7c1f1e8963cb608adb66979a5d28771337190d93bc6a41e0071e429c40518009e449006457bc3b9e34a98472682fd9758c963c7b89f4f6e502b78df6534d00000000000000000000000000000000434671d454c9c1993888cd6249849fce9470b379b9f0e282302dde802bddb8261147df2219c3b7c2cf8327094fbaa37b23b822"], 0x14f) socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x5c, 0x2) r1 = open(&(0x7f0000000140)='./file0\x00', 0x4cc201, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) listen(0xffffffffffffffff, 0x1) [ 488.519966][T10421] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:36 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) 07:17:36 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 489.082823][T10446] IPVS: ftp: loaded support on port[0] = 21 [ 489.093501][ C1] sd 0:0:1:0: [sg0] tag#4170 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 489.104249][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB: Test Unit Ready [ 489.110905][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.120812][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.130871][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.140768][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.150641][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.160515][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.170400][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.180286][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.190199][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.200071][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.209965][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.219886][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:17:36 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x800000000000401) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000d50000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff00000000000000000000000020010000000000000000000000000000ac141400000000000000000000000000000000000000000000000200ff010000000000000000000000000001ffffffff000000000000000000000000ffffffff000000000000000000000000200100"/164], 0xec}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)={0x79e9, 0x0, 0x4, 0x40000000, 0xb00d, {0x77359400}, {0x3, 0xc, 0x5, 0x6a, 0x40, 0x6, "63122a3c"}, 0x0, 0x4, @userptr=0x800, 0x0, 0x0, r1}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x48) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) sendfile(r1, r0, &(0x7f0000000080)=0x10001, 0x620d99d) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000abaff9)={0x77359400}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x40400000}, &(0x7f0000000100)=0x8) socket$inet(0x2, 0x6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 489.229760][ C1] sd 0:0:1:0: [sg0] tag#4170 CDB[c0]: 00 00 00 00 00 00 00 00 07:17:37 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) 07:17:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setxattr$security_ima(0x0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "0c41dbc80a465e005113d24cfdbe7851e5a23cc8"}, 0x15, 0x2) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffff) lsetxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x3) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x10000}], 0x1c) r2 = socket(0x18, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={r0, 0x8, 0x3, 0x3}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)='./file0\x00', 0x75308d175b5de091, 0x101600, 0x12345}, 0x3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000000)={{0x0, 0x0, @reserved="dcf12778b6d8c99542775803885a46d38c82ecfa8c4e87912995972c47d264e6"}}) [ 489.544599][T10472] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:37 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 489.747966][T10474] IPVS: ftp: loaded support on port[0] = 21 07:17:37 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) [ 490.330380][T10492] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:38 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x6d, &(0x7f0000000080)={r8}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r8, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000080)=0x84) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x30000000}}]}, @TCA_U32_SEL={0x14}]}}]}, 0x84}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:17:38 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 490.643311][ T9017] tipc: TX() has been purged, node left! 07:17:38 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) 07:17:38 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x800000000000401) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000d50000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff00000000000000000000000020010000000000000000000000000000ac141400000000000000000000000000000000000000000000000200ff010000000000000000000000000001ffffffff000000000000000000000000ffffffff000000000000000000000000200100"/164], 0xec}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)={0x79e9, 0x0, 0x4, 0x40000000, 0xb00d, {0x77359400}, {0x3, 0xc, 0x5, 0x6a, 0x40, 0x6, "63122a3c"}, 0x0, 0x4, @userptr=0x800, 0x0, 0x0, r1}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x48) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) sendfile(r1, r0, &(0x7f0000000080)=0x10001, 0x620d99d) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000abaff9)={0x77359400}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x40400000}, &(0x7f0000000100)=0x8) socket$inet(0x2, 0x6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 490.773583][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 490.910745][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 490.943065][T10514] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:38 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:38 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xea59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x2000) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20040, 0x8a10}, [@IFLA_IFALIASn={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) [ 491.303788][T10518] IPVS: ftp: loaded support on port[0] = 21 07:17:39 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) [ 491.680227][T10531] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:39 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:17:39 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 492.156573][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 492.260086][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 492.271326][T10534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 492.611681][T10548] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 492.636322][T10549] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 492.655714][T10549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 492.663488][T10549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 07:17:40 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:17:40 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 493.312549][T10568] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:41 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) 07:17:41 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000100)={0x6, 0x7, &(0x7f0000000040)=[0x2, 0x40, 0xffff, 0x3f, 0xffff, 0x3, 0x9], &(0x7f0000000080)=[0xfff, 0xee73, 0x1, 0x6, 0x0, 0x40, 0x4, 0x5, 0x1f], &(0x7f00000000c0)=[0x1, 0x3, 0x7, 0x8000]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r2, 0x2}}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x3, 0xa5, 0x9, 0x20, @private1, @private1, 0x1, 0x40, 0x303778dd, 0x8000}}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x7c, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000680)=0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) ioctl$RTC_VL_CLR(r4, 0x7014) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc8, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2000080}, 0x40000) r5 = dup(r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x3) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x0) getsockname$packet(r0, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b40)=0x14) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/null\x00', 0x200, 0x0) [ 493.801704][T10576] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:41 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) 07:17:43 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x800000000000401) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000d50000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff00000000000000000000000020010000000000000000000000000000ac141400000000000000000000000000000000000000000000000200ff010000000000000000000000000001ffffffff000000000000000000000000ffffffff000000000000000000000000200100"/164], 0xec}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)={0x79e9, 0x0, 0x4, 0x40000000, 0xb00d, {0x77359400}, {0x3, 0xc, 0x5, 0x6a, 0x40, 0x6, "63122a3c"}, 0x0, 0x4, @userptr=0x800, 0x0, 0x0, r1}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x48) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) sendfile(r1, r0, &(0x7f0000000080)=0x10001, 0x620d99d) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000abaff9)={0x77359400}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x40400000}, &(0x7f0000000100)=0x8) socket$inet(0x2, 0x6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 07:17:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r2 = memfd_create(&(0x7f0000000380)='\xd3\xde\xbc\"\x10\xe2', 0x0) pwrite64(r2, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000004, 0x2010, r1, 0xc627b000) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x0) 07:17:43 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:43 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:17:43 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:17:43 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 495.573149][T10588] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 495.911806][T10595] IPVS: ftp: loaded support on port[0] = 21 07:17:43 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'vlan0\x00', 0x0}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x10001) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x21}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x7400, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440088ad00"/20, @ANYRES32=0x0, @ANYBLOB="03fa000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 496.352179][T10613] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:44 executing program 2: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0xc0404309, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) [ 496.661998][T10622] IPVS: ftp: loaded support on port[0] = 21 07:17:44 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:44 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x0, 0xfb7d, 0x1c5a000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ftruncate(r0, 0x200004) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r3, 0x40045108, &(0x7f0000a07fff)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x40045108, &(0x7f0000a07fff)) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000280)={{0x6, 0x3, 0x401, 0x3f, 'syz0\x00', 0x2}, 0x2, 0x20000000, 0x7732, r5, 0x9, 0x100, 'syz1\x00', &(0x7f00000001c0)=['\x00', '\xff^%\\}[@%\x00', ':\\[$\'\x00', 'C\\\xfe!*}#\x88\x00', '/dev/kvm\x00', './cgroup.net/syz1\x00', './cgroup.net/syz1\x00', '\x00', './cgroup.net/syz1\x00'], 0x59, [], [0x0, 0x2, 0x8, 0x7f]}) fstatfs(0xffffffffffffffff, &(0x7f0000000040)=""/26) [ 497.103047][ T9017] tipc: TX() has been purged, node left! [ 497.161262][T10658] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 497.564211][T10622] chnl_net:caif_netlink_parms(): no params data found [ 497.848060][T10622] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.856228][T10622] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.866035][T10622] device bridge_slave_0 entered promiscuous mode [ 497.970144][T10622] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.978444][T10622] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.988125][T10622] device bridge_slave_1 entered promiscuous mode [ 498.122132][T10622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.163014][T10622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.295021][T10622] team0: Port device team_slave_0 added [ 498.311175][T10622] team0: Port device team_slave_1 added [ 498.415164][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 498.417996][T10622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.428386][T10622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.454542][T10622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.470700][T10622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.477978][T10622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.505223][T10622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.579123][T10622] device hsr_slave_0 entered promiscuous mode [ 498.588982][T10622] device hsr_slave_1 entered promiscuous mode [ 498.598168][T10622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.606015][T10622] Cannot create hsr debugfs directory [ 498.978024][T10622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 499.027097][T10622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 499.068370][T10622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 499.107762][T10622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 499.702088][T10622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.779103][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 499.788758][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 499.814746][T10622] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.838819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 499.849235][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 499.858851][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.866289][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.914946][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 499.924515][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 499.935608][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 499.945137][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.952359][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.961585][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 499.994189][ T8699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 500.012816][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 500.023967][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.086633][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.096674][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.107244][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.118067][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.127834][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.166114][T10622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.180645][T10622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 500.231379][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.241285][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.286439][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 500.295185][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 500.322808][T10622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.411188][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 500.421345][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 500.501888][ T8705] Bluetooth: hci4: command 0x041b tx timeout [ 500.558836][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 500.568800][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 500.677218][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 500.686865][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 500.706685][T10622] device veth0_vlan entered promiscuous mode [ 500.839921][T10622] device veth1_vlan entered promiscuous mode [ 501.189741][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 501.199435][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 501.209190][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 501.220139][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 501.268575][T10622] device veth0_macvtap entered promiscuous mode [ 501.362937][T10622] device veth1_macvtap entered promiscuous mode [ 501.451773][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 501.462108][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 501.519803][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 501.530830][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.540884][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 501.551520][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.561507][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 501.572157][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.582211][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 501.592837][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.607191][T10622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.639685][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 501.650332][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 501.838764][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 501.849352][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.859864][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 501.870468][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.880504][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 501.891108][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.901186][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 501.912149][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.926629][T10622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.968373][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 501.978997][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 502.576527][ T8698] Bluetooth: hci4: command 0x040f tx timeout 07:17:50 executing program 1: syz_usb_connect(0x3, 0x52, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xac, 0x73, 0x26, 0x40, 0x13d3, 0x3321, 0x9497, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xaa, 0x0, 0x1, 0xf5, 0xa0, 0xa7, 0x0, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x5, 0x3, 0x40, 0xf9, "28588b762e27"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x0, 0x2, "42136bcd"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x4, 0x81, 0x7, "d36914"}]}], [{{0x9, 0x5, 0xa, 0x10}}]}}]}}]}}, 0x0) 07:17:50 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:17:50 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:50 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000240)=[0x1, 0x5, 0xf7f, 0x10000, 0x1ff, 0xafdd], 0x6, 0x180000, 0x0, 0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000013c0)) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001500)={&(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x1, 0x6}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xf0, 0x3, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x2c, 0x17, [0xffff, 0x9, 0xc2, 0x3, 0x1ff, 0x0, 0x8001, 0x1, 0x10001, 0x7]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_LABELS={0x4}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xfffff614]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x86}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_NAT_DST={0x50, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, [], 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc090}, 0x40840) 07:17:50 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) r6 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x28) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0xfffb, @private=0xa010101}}) write$tun(r3, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x8, 0x4, 0x0, 0x0, 0x24, 0x0, 0x6000, 0x0, 0x88, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) [ 503.059879][T10867] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:50 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:17:50 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x44e, 0x1215, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect$cdc_ecm(0x5, 0x84, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x6, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x93, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x8000, 0x1000, 0x2}, [@country_functional={0x10, 0x24, 0x7, 0x3, 0x1000, [0x6, 0x16, 0x0, 0x57, 0x20]}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x1f, 0x9}, @acm={0x4, 0x24, 0x2, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x2600, 0x2, 0x88, 0x80, 0x5}, @dmm={0x7, 0x24, 0x14, 0x3f, 0x662}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x7, 0xfff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x18, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x59, 0x80}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x6, 0x8, 0x8, 0x0, 0x80}, 0x26, &(0x7f0000000180)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x9, 0xfff8}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "fd89200d847019da065491e1166e5cc5"}]}, 0x4, [{0xc7, &(0x7f00000001c0)=@string={0xc7, 0x3, "08da7b19fdc725e76bc97149aefd2c8986322c8554ce48ca92895b65e349473a495f6d7daf0f926e69ef52e65df04350dc6a5a104a31283020dd44c7969d3a485b61c7f6252a11de8d07bba35e7a155f55ed63525adb7dcef3f534a27ec609fa66b5e16ec833df2a2261b3d0a98226495c94f753c33a0ccda95ef1fa69efb21bdb42afc7f2834b5838f472f6fe3b6d5e8f7304edec97092780a9ad89dd19cfe5d0ea9cb14ebf8187c10930e97088b935fe617d2bcc3bd2f2addd03bf864f4ac5b8d8da5afb"}}, {0xa0, &(0x7f0000000300)=@string={0xa0, 0x3, "2ee5d569039c153da8c9c704ac5ba6c2090b827def7bff24e7cc84f53607569350536e9d659712026e8c254a0f43f56400a2a66685b0a3388786a8f0985e511a3df586fce129ea43d9b1b2902378d09cbbb639e64264bb0adc1addfe1483b678d8fb0440b47ad72ab3d3b7d2b2168120022b3c73bc4ea9a69e19333a25e470b70202dc5d04bf3bc14b5df66738c062280988b83b86bcc503dbca8c02f12e"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x410}}]}) syz_usb_control_io(r2, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x40, 0x10, 0xa, {0xa, 0x21, "cb8a662841be4f0a"}}, &(0x7f0000000500)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "47b7b616d86150812d35998a6768e881133407817fedd134a99f9faf358001042962ec059c8a452b42f00641d133ec57d5d83d72457165ac788389238954926f4d21653a6453ad178feca55898c3f538c4c9fa96ad41d393d64ef620a076b641cf53ec6d4a229ac754befd"}}, &(0x7f0000000580)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x4, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0x3, 0xf00, 0x7, [0xc0f0, 0xf0, 0x0, 0xff00ff, 0x14090, 0x3f00]}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x60, 0x7, 0x40, "eb450c57", "97c1eb67"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0x81, 0x7f, 0x17, 0x6, 0x5}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000680)={0x0, 0x14, 0x7b, "c5174f9d662b3f1b10e50a1ba46260166736a4ffcc045a62d16cbe7259c5a316ca5904e70cc8e2245bd2221757ee5c71ef1edcf08a13688f8ed4732e54528437dc77320c154e007072e48a5441b825cb8ec89142783fdd6389972f6a71c53811bbbed53d4a40c25e25e9378fe9278edd4e736d90d95d3e41a7af45"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x20, 0x2, [0xf0]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "2dac"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000940)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x17, 0x6}, &(0x7f00000009c0)={0x40, 0x19, 0x2, 'p*'}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x0, "b023"}, @main=@item_012={0x1, 0x0, 0x30a16f2fad511884, "a8"}]}}, 0x0}, 0x0) [ 503.325290][ T3739] usb 2-1: new high-speed USB device number 19 using dummy_hcd 07:17:51 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 503.658978][T10887] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 503.684613][ T3739] usb 2-1: config 0 has an invalid interface number: 170 but max is 0 [ 503.692961][ T3739] usb 2-1: config 0 has no interface number 0 [ 503.699462][ T3739] usb 2-1: config 0 interface 170 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 503.709665][ T3739] usb 2-1: New USB device found, idVendor=13d3, idProduct=3321, bcdDevice=94.97 [ 503.718960][ T3739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.884097][ T9020] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 503.920754][ T3739] usb 2-1: config 0 descriptor?? 07:17:51 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) [ 504.133635][ T3739] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 504.244900][ T9020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.256144][ T9020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.266277][ T9020] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.40 [ 504.275700][ T9020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:17:52 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 504.460670][ T9020] usb 4-1: config 0 descriptor?? [ 504.656579][ T8703] Bluetooth: hci4: command 0x0419 tx timeout [ 504.794029][ T9020] usbhid 4-1:0.0: can't add hid device: -71 [ 504.800444][ T9020] usbhid: probe of 4-1:0.0 failed with error -71 07:17:52 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) [ 504.873271][T10911] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 504.898568][ T9020] usb 4-1: USB disconnect, device number 6 07:17:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, 0x4, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x8f85}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x20}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x200400d0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000700aaaaaaaaaaaa08004500001c0000000000029078007f00000000000000009078e0000001"], 0x0) [ 505.119094][ T3739] usb 2-1: device descriptor read/64, error -71 [ 505.333749][ T9020] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 505.694983][ T9020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.706455][ T9020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.716579][ T9020] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.40 [ 505.725938][ T9020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.736358][ T3739] ieee80211 phy7: rt2x00usb_vendor_request: Error - Vendor Request 0x07 failed for offset 0x1000 with error -32 [ 505.748807][ T3739] ieee80211 phy7: rt2800_probe_rt: Error - Invalid RT chipset 0x0000, rev 0000 detected [ 505.759394][ T3739] ieee80211 phy7: rt2x00lib_probe_dev: Error - Failed to allocate device [ 505.787680][ T9020] usb 4-1: config 0 descriptor?? [ 505.809981][ T3739] usb 2-1: USB disconnect, device number 19 07:17:53 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)=0x2) dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:17:53 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:53 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:17:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x400) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8002, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d032aaf93e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) [ 506.197570][T10946] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 506.257139][T10883] udc-core: couldn't find an available UDC or it's busy [ 506.264393][T10883] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:17:53 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) [ 506.378176][ T9020] hid-alps 0003:044E:1215.0002: unknown main item tag 0x4 07:17:54 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x88, 0x1, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x401}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2e}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1e7}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000024000b0f000000000000000000001200", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b00010074617072696f000074000200560001000200000000000000000000000000000000000800040000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000019f27b22eaa50bd66ff000000000000100002800c000180080004000100008008000a0002000000"], 0xa4}}, 0x0) r3 = accept(r0, &(0x7f00000000c0)=@nl=@unspec, &(0x7f0000000140)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', r1, 0x2f, 0x0, 0x7f, 0xfffffff9, 0x0, @remote, @mcast1, 0x7, 0x8000, 0x8, 0x4}}) [ 506.442679][ T9020] hid-alps 0003:044E:1215.0002: hidraw0: USB HID v0.00 Device [HID 044e:1215] on usb-dummy_hcd.3-1/input0 [ 506.590375][ T9020] usb 4-1: USB disconnect, device number 7 [ 506.635148][T10964] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 507.363327][ T9020] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 507.726917][ T9020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.738235][ T9020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.748379][ T9020] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.40 [ 507.757745][ T9020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.827575][ T9020] usb 4-1: config 0 descriptor?? 07:17:55 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:17:55 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:55 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:17:55 executing program 4: getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000040)=0x28) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{}, {@val, @actul_num={@void, 0x2}}}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESHEX], 0x0) 07:17:55 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r6 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r7}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x3000002, 0x20010, 0xffffffffffffffff, 0x83000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400b59500000000000000000a", @ANYRES64=r3, @ANYRES64, @ANYRESOCT=r3, @ANYRESDEC=r2, @ANYRESHEX=r7], 0x40}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e22c, 0x0) [ 508.054250][ T9020] usbhid 4-1:0.0: can't add hid device: -71 [ 508.060591][ T9020] usbhid: probe of 4-1:0.0 failed with error -71 [ 508.098484][T10989] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 508.152185][ T9020] usb 4-1: USB disconnect, device number 8 [ 508.200173][T10992] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 508.230086][T10993] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 07:17:55 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:17:56 executing program 0: socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 508.463213][ T8703] usb 5-1: new full-speed USB device number 2 using dummy_hcd 07:17:56 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:17:56 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) [ 508.753050][ T8703] usb 5-1: device descriptor read/64, error 18 [ 508.796887][T11008] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:17:56 executing program 0: socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:56 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:17:56 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f0000580002000c00000000000000000000000000000d"], 0x88}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100)=0x3, 0x2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x1f, 0x20, @private2, @remote, 0x7800, 0x8000, 0x81, 0x80000000}}) 07:17:56 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) [ 509.153008][ T8703] usb 5-1: device descriptor read/64, error 18 [ 509.289100][T11015] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 509.433250][ T8703] usb 5-1: new full-speed USB device number 3 using dummy_hcd 07:17:57 executing program 0: socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:57 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 509.722863][ T8703] usb 5-1: device descriptor read/64, error 18 [ 509.819639][T11028] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 510.112892][ T8703] usb 5-1: device descriptor read/64, error 18 [ 510.243641][ T8703] usb usb5-port1: attempt power cycle [ 510.984228][ T8703] usb 5-1: new full-speed USB device number 4 using dummy_hcd 07:17:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) name_to_handle_at(r1, &(0x7f0000000000)='\x00', &(0x7f0000000640)={0x1008, 0x1ea0674b, "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"}, &(0x7f0000000080), 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xc3, 0x8e, 0x76, 0x20, 0x2ca3, 0x31, 0x77b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x99, 0xb5, 0x8c}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}}) 07:17:58 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:17:58 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:17:58 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000272000)) 07:17:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x7) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d533b20886120120872c0020000109022400010000000230da671709050b02280100000009058ae6c5"], 0x0) [ 511.152501][ T8703] usb 5-1: device descriptor read/8, error -71 [ 511.276146][T11044] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 511.375268][ T8703] usb 5-1: device descriptor read/8, error -71 07:17:59 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:17:59 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000272000)) 07:17:59 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 511.562384][ T8705] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 511.802519][ T8705] usb 2-1: Using ep0 maxpacket: 32 07:17:59 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) [ 511.849400][T11056] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 511.863614][ T8703] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 511.954756][ T8703] usb 5-1: Using ep0 maxpacket: 8 07:17:59 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000272000)) 07:17:59 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 512.094290][ T8703] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 512.104846][ T8703] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 512.204054][ T8705] usb 2-1: New USB device found, idVendor=2ca3, idProduct=0031, bcdDevice=77.b8 [ 512.213363][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.221495][ T8705] usb 2-1: Product: syz [ 512.226022][ T8705] usb 2-1: Manufacturer: syz [ 512.230751][ T8705] usb 2-1: SerialNumber: syz [ 512.237498][ T8703] usb 5-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=2c.87 07:17:59 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) [ 512.246863][ T8703] usb 5-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 512.255251][ T8703] usb 5-1: Product: syz [ 512.307349][ T8703] usb 5-1: config 0 descriptor?? [ 512.391236][ T8705] usb 2-1: config 0 descriptor?? [ 512.424112][T11065] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 512.446623][ T8705] usb-storage 2-1:0.0: USB Mass Storage device detected [ 512.527602][ T8705] usb-storage 2-1:0.0: Quirks match for vid 2ca3 pid 0031: 2000000 [ 512.559354][ T8703] usb 5-1: USB disconnect, device number 5 [ 512.689854][ T8705] usb 2-1: USB disconnect, device number 20 07:18:00 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @mcast2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x31}}, 0x80, 0x8000}}) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000000c0)={0xffffffc0, 0x81}) 07:18:00 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:00 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:18:00 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:00 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000272000)) [ 513.452079][T11091] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:01 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:18:01 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:01 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:01 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:01 executing program 1: ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f00000000c0)={0x0, 0x40}) r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9e, 0x9d, 0xd9, 0x40, 0x6d6, 0x41, 0x6532, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa3, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 514.024844][T11103] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:01 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:18:01 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:01 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:02 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:02 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000272000)) [ 514.656492][T11117] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:02 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:02 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:18:02 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:02 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="db40570f17c26ce74d531db941d0", 0xe}], 0x1}}], 0x1, 0x0) 07:18:02 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) [ 515.167599][T11129] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:02 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:03 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:18:03 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:03 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:03 executing program 1: r0 = syz_usb_connect(0x5, 0x181, &(0x7f0000000000)=ANY=[], 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L-', 0x7e40000000000000}, 0x16, 0x2) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="e31548fb22000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 515.736063][T11142] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:03 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:03 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:03 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:03 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) [ 516.174067][ T8703] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 516.260859][T11155] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:03 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:04 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 516.476654][ T8703] usb 2-1: device descriptor read/64, error 18 07:18:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:04 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:18:04 executing program 5: ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0xb5b) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000080)={0x9, 0x5966125e4080c2d2, 0x7, 0xfffffff8}) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000000c0)={0x8, "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"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x80400) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x64, 0x40) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x6, 0x5c, 0x5, {r3, r4/1000+60000}, {}, {0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "48ed1b0b12bb7e8c"}}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x4840) r5 = dup(r0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xafb}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x27}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4bf, 0xc6da05ecaa892fec}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x18}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000500)={0x0, 0x30}, &(0x7f0000000540)=0x8) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000580)) pselect6(0x40, &(0x7f00000005c0)={0xe9, 0xfffffffffffffbff, 0x2e, 0x400, 0x6e, 0xc9, 0x3, 0x9}, &(0x7f0000000600)={0x4, 0xafb, 0xffffffff, 0x2, 0x8, 0x8, 0x7eb2, 0xff}, &(0x7f0000000640)={0x7, 0x5, 0x3, 0x8, 0x0, 0x401, 0x5, 0x3}, &(0x7f0000000680)={0x0, 0x989680}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x8]}, 0x8}) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000740)) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f00000007c0)={0x0, 0xb7, 0x80000000, [], &(0x7f0000000780)=0x3}) r7 = syz_open_dev$vcsn(&(0x7f0000000800)='/dev/vcs#\x00', 0x5, 0x31b040) ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f0000000840)) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd7, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x7, 0x1, 0x1, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xff, 0x40}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x310, 0xe1, 0xf8, 0x4, 0x20}, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}}) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000980)=@assoc_id=r6, 0x4) [ 516.759599][T11164] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:04 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000272000)) [ 516.896206][ T8703] usb 2-1: device descriptor read/64, error 18 07:18:04 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 517.165072][T11173] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 517.175515][ T8703] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 517.487584][ T8703] usb 2-1: device descriptor read/64, error 18 [ 517.901820][ T8703] usb 2-1: device descriptor read/64, error 18 [ 518.027605][ T8703] usb usb2-port1: attempt power cycle [ 518.761802][ T8703] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 518.853331][T11193] IPVS: ftp: loaded support on port[0] = 21 07:18:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x15) timerfd_create(0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) 07:18:06 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:18:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:06 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:06 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 519.062013][ T8703] usb 2-1: device descriptor read/8, error -71 [ 519.156657][T11222] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 519.285089][ T8703] usb 2-1: device descriptor read/8, error -71 07:18:06 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:18:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:07 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:07 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 519.769820][T11291] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 519.972076][T11193] chnl_net:caif_netlink_parms(): no params data found [ 520.227331][T11193] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.234971][T11193] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.244850][T11193] device bridge_slave_0 entered promiscuous mode [ 520.258861][T11193] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.266318][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.276076][T11193] device bridge_slave_1 entered promiscuous mode [ 520.329087][T11193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.347087][T11193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.394821][T11193] team0: Port device team_slave_0 added [ 520.413185][T11193] team0: Port device team_slave_1 added [ 520.463403][T11193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.470472][T11193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.496892][T11193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.527612][T11193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.534895][T11193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.561186][T11193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.652084][ T8703] Bluetooth: hci5: command 0x0409 tx timeout [ 520.687304][T11193] device hsr_slave_0 entered promiscuous mode [ 520.712745][T11193] device hsr_slave_1 entered promiscuous mode [ 520.729960][T11193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.739460][T11193] Cannot create hsr debugfs directory [ 521.159114][T11193] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 521.179513][T11193] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 521.207913][T11193] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 521.234143][T11193] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 521.669783][T11193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.828967][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 521.838405][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 521.864185][T11193] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.902326][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 521.913453][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 521.923039][ T9020] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.930261][ T9020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.946067][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 521.975863][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 521.988168][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 521.997832][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.005147][ T9020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.044074][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 522.071377][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 522.116055][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 522.126976][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 522.173114][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 522.183395][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 522.194271][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 522.205579][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 522.215506][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.249728][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 522.259681][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 522.287367][T11193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 522.371165][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 522.378975][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.443630][T11193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.515694][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 522.526451][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 522.676386][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 522.686872][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 522.731568][ T8703] Bluetooth: hci5: command 0x041b tx timeout [ 522.741279][T11193] device veth0_vlan entered promiscuous mode [ 522.769765][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 522.779267][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 522.985308][T11193] device veth1_vlan entered promiscuous mode [ 523.483651][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 523.494458][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 523.571413][T11193] device veth0_macvtap entered promiscuous mode [ 523.752279][T11193] device veth1_macvtap entered promiscuous mode [ 523.773692][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 523.783688][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 524.128248][T11193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.139428][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.149580][T11193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.160144][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.170137][T11193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.180980][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.190998][T11193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.201551][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.211534][T11193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.222188][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.236862][T11193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.279036][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 524.289674][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 524.494690][T11193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.505270][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.515356][T11193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.525906][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.535903][T11193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.546440][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.556561][T11193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.567312][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.577334][T11193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.588281][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.602975][T11193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.618000][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 524.628981][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 524.810805][ T8705] Bluetooth: hci5: command 0x040f tx timeout 07:18:13 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffff9) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)=r4) 07:18:13 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:18:13 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:13 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:13 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:13 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) [ 526.463675][T11577] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:14 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:14 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:18:14 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000404f045ab640000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "32b06b34"}]}}, 0x0}, 0x0) 07:18:14 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0xb715804226422096) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_open_procfs(0x0, &(0x7f0000272000)) [ 526.900386][ T8705] Bluetooth: hci5: command 0x0419 tx timeout 07:18:14 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) [ 526.982005][T11591] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 527.411368][ T8700] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 527.778174][ T8700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.789386][ T8700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.799989][ T8700] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.40 [ 527.809234][ T8700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.859500][ T8700] usb 2-1: config 0 descriptor?? 07:18:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) epoll_create(0x4000c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15, 0x61}, 0xfe4f) 07:18:15 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:18:15 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c00028006"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:15 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:15 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0xb715804226422096) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_open_procfs(0x0, &(0x7f0000272000)) [ 528.046432][T11618] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:15 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:15 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c00028006"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:15 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) [ 528.293049][T11622] input: syz1 as /devices/virtual/input/input7 07:18:15 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0xb715804226422096) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_open_procfs(0x0, &(0x7f0000272000)) [ 528.430630][ T8700] usbhid 2-1:0.0: can't add hid device: -71 [ 528.436959][ T8700] usbhid: probe of 2-1:0.0 failed with error -71 [ 528.475449][ T8700] usb 2-1: USB disconnect, device number 25 [ 528.610973][T11638] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 529.090444][ T8701] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 529.450670][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.461851][ T8701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.471904][ T8701] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.40 [ 529.481255][ T8701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.512015][ T8701] usb 2-1: config 0 descriptor?? 07:18:17 executing program 1: pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9049, 0x0, 0x1000000}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f00000000c0)="e5ce2b2840f1ec310cfd911eab4f1234867a5d31b510", &(0x7f0000000140)=""/207, &(0x7f0000000240)="dd3e674c806953503a777304", &(0x7f00000002c0)="83985258caab9c52c1dcc68454b832798de32630c90a00865a9892542b01393da80395a8d346fadc1425ec4a259b246b893b127775594595eb72c2e9293c2a7c543ef147aa0a7d7d0d79245dc5e25ab0c7cd8466daa39a9f67f59a35581c34bb46b5bfe6cfd6c9f64497f2205274e5c303265c55ea1e9f0bb7a389fd6da92b83388688c1aa1ec5cb1685ef09ee5aafa3315c340beb", 0x40a, r2}, 0x38) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 07:18:17 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f00000000c0)={0x1, "9c6a4ba704e5fe5d044d7d0184993fc539d6be954d8deb0dd0c093d73c3e54a075521e8bb18a9315f05f562737116a011b730aef0e3b7dc6334ee37814915232"}) 07:18:17 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:17 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c00028006"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:17 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) 07:18:17 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 529.880198][ T8701] usbhid 2-1:0.0: can't add hid device: -71 [ 529.886495][ T8701] usbhid: probe of 2-1:0.0 failed with error -71 [ 529.972593][T11658] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 529.988462][ T8701] usb 2-1: USB disconnect, device number 26 07:18:17 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:17 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c000280060001000319000006000100000000"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:17 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 07:18:17 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:18 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x4141, 0x0) [ 530.626498][T11683] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:18 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 07:18:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600325683b70c9a0f19acf830", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) 07:18:18 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:18 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:18 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c000280060001000319000006000100000000"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:18 executing program 5: ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x80000000}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b708030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 07:18:18 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) [ 531.264807][T11701] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:19 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 07:18:19 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:19 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000140)) close(r1) [ 531.462028][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 07:18:19 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 531.548637][T11704] 8021q: adding VLAN 0 to HW filter on device bond1 07:18:19 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c000280060001000319000006000100000000"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 531.940088][T11753] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r1}}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 07:18:19 executing program 1: memfd_create(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3}) 07:18:19 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:19 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) syz_open_dev$mouse(0x0, 0x0, 0x90000) 07:18:19 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:19 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b877"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 07:18:20 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:20 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) write(r0, &(0x7f0000000040)="bd38832aa0da3ed709249f2c8e21", 0xca) 07:18:20 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @empty=0xc301}, @in={0x2, 0x0, @local}, @rc={0x1f, @fixed}, 0x5}) [ 532.648594][T11771] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:20 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) [ 532.818030][T11775] input: syz1 as /devices/virtual/input/input9 07:18:20 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b877"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 532.927614][T11775] input: syz1 as /devices/virtual/input/input10 07:18:20 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r1) 07:18:20 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) [ 533.240608][T11795] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:20 executing program 5: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/52, 0x34}], 0x1) 07:18:20 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:21 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:21 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b877"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:21 executing program 1: r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000000)='eth0\x00') 07:18:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x42002, 0x0) write$dsp(r2, &(0x7f0000000080)='!', 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 07:18:21 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:21 executing program 5: r0 = memfd_create(&(0x7f0000000340)='\x04\x9f\xb9x\x8a\xa4\xc5\xa4%\xdb\xd6g\x1e\xa7\xc1\xd5\xc2\xf93\x8a\x05\x9f\x16 E\xff\x01\x00\x00\x00\x00\x00\x00\'}\\\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\xf07\x18\xda\xfd\x8a\x8b\xff\xff\xff\xff\x00\x00\x00\x00,N\x17\x9b\xb7\xaa\xcd\x90\xcb0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:22 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f0000000500), &(0x7f00006d7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 07:18:22 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:22 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:22 executing program 1: syslog(0x4, &(0x7f0000000140)=""/3, 0x3) [ 534.879904][T11833] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:22 executing program 1: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 07:18:22 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x3, 0x0) bind(r3, &(0x7f0000000100)=@generic={0x11, "8100010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b38360054a5b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8ef6b3327d3a09ffc2c654"}, 0x80) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff00d) 07:18:23 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) listen(r1, 0x0) listen(r0, 0xe68) 07:18:23 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:23 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:23 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 535.979574][ T29] audit: type=1326 audit(1598599103.596:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11855 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 07:18:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) [ 536.066835][T11860] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:23 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:23 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:24 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socket$inet6(0xa, 0x802, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530) 07:18:24 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:24 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:24 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="7c000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 536.766917][T11877] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:24 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 07:18:24 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a000500"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 537.067326][T11883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 537.131567][T11883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 07:18:24 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:25 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) [ 537.435909][T11892] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:25 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:25 executing program 2: sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4ee5c1ed61875696e8c177930ea233209fc93febf2a2e56d94d3ac00000000254061927b263df9aea8824ec9e590cdd4fa4600090058c41b3c63ffa05fcd345e13c59ca0a841dc3a23091051b25eb2eb2c410ad4d06cb8f646c031ceb649e334958e62d1c43377202daaa407361787c0e5b81902f25b44ac8db2ded091861fa2be53ca0d96f5212b82f7b150bf064d806430b81201a63e504f8a9a13639359b9011f525ae819b7cff07b4e6bede7b4fe2dc332e8a536eb5db1a7feeb0b31c2427102b10a32e648a0223d56a28965e33ac2de75d2e1da2a3ddcec7111d0f8f2f0ad200102a0d99ef99bd10600000000000000ffd426bf5b0a", @ANYRES16=0x0, @ANYBLOB="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"/340], 0x15c}}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4, 0x20}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xa0) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="2711a1ec5c133669f5e96dc3e50c9bb5f26361f6c73422dce70f2d3602941c80b0f8675a9f555c6077fbe6eda48a695caf", 0x31}, {&(0x7f0000000080)="0d484187465b53b7932eef7dfc45323eac00e93f04c1cf38f018e41cecf5376b0c7802de5f4835617e40b83fbe8f1beab8021344e7ac22356472f8e8e5dbfc727e6288115ad967", 0x47}, {&(0x7f0000000200)="d92503acff3f94f5", 0x8}], 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 537.770072][ T8705] usb 2-1: new high-speed USB device number 27 using dummy_hcd 07:18:25 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) [ 538.339273][ T8705] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 538.348637][ T8705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.356925][ T8705] usb 2-1: Product: syz [ 538.361308][ T8705] usb 2-1: Manufacturer: syz [ 538.366043][ T8705] usb 2-1: SerialNumber: syz 07:18:26 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 538.454873][ T8705] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 07:18:26 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000006060102f00000000000000000000000100003006269746d006f3a706f72700005000400000000000900020073797a300000000005000500000000000500010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 07:18:26 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) [ 539.085207][T11883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.139402][ T3217] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 539.170444][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 07:18:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f364602344361336a91e111254e1f87592479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe9217", 0xaa}], 0x4, 0xa) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 07:18:27 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 539.612428][T11935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 539.824044][ T8701] usb 2-1: USB disconnect, device number 27 [ 540.178881][ T3217] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 540.186003][ T3217] ath9k_htc: Failed to initialize the device [ 540.193940][ T8701] usb 2-1: ath9k_htc: USB layer deinitialized 07:18:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 07:18:28 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a000500"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:28 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:28 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:28 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) listen(r0, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 07:18:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x309, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 540.657903][T11964] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:28 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:28 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000400000000000900020073797a3000000000050005000200000005000100060000000c000300686173683a69700014000780080012400005"], 0x58}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:18:28 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a000500"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x2, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0004000200"}]}, 0x28}}, 0x0) [ 541.316884][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 541.338765][ T8701] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 541.374247][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:18:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) [ 541.510566][T11985] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 541.524655][T11984] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 541.561556][T11986] vlan1: FDB only supports static addresses [ 541.603540][T11985] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 541.613799][T11986] vlan1: FDB only supports static addresses [ 541.876028][ T8701] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 541.885465][ T8701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.894059][ T8701] usb 2-1: Product: syz [ 541.898518][ T8701] usb 2-1: Manufacturer: syz [ 541.903262][ T8701] usb 2-1: SerialNumber: syz [ 541.980280][ T8701] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 542.578704][ T8700] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 542.997145][ T8701] usb 2-1: USB disconnect, device number 28 [ 543.609598][ T8700] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 543.616729][ T8700] ath9k_htc: Failed to initialize the device [ 543.624258][ T8701] usb 2-1: ath9k_htc: USB layer deinitialized 07:18:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 07:18:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000108000000000000000000180000", @ANYRES32=0x0, @ANYBLOB="000000000000000044001a80080002800400018038000280340001800800190000000000080016000000000008001a000000000041fd0000000000000800000000000000080000000000000008001b"], 0x6c}}, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3f, 0x0) 07:18:31 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:31 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x2, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0004000200"}]}, 0x28}}, 0x0) 07:18:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) [ 543.849308][ T3217] Bluetooth: hci0: command 0x0406 tx timeout [ 543.932353][T12009] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 544.010654][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.064248][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.072183][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.165256][T12018] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 544.175708][T12019] ipvlan0: FDB only supports static addresses 07:18:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x2, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0004000200"}]}, 0x28}}, 0x0) 07:18:32 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xb715804226422096) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:32 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 544.706536][T12015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.724004][T12015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.731865][T12015] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.815794][T12024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 544.833732][T12030] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 544.873816][T12024] veth0_macvtap: FDB only supports static addresses 07:18:32 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:32 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 545.128241][ T8703] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 545.306190][T12038] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 545.719343][ T8703] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 545.728681][ T8703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.736812][ T8703] usb 2-1: Product: syz [ 545.741312][ T8703] usb 2-1: Manufacturer: syz [ 545.746043][ T8703] usb 2-1: SerialNumber: syz [ 545.830286][ T8703] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 546.428321][ T3217] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 546.755696][ T8699] usb 2-1: USB disconnect, device number 29 07:18:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 07:18:34 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x2, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0004000200"}]}, 0x28}}, 0x0) 07:18:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002140)=[{{&(0x7f0000000900)=@xdp, 0x80, 0x0}, 0x2}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x6}, 0x0) dup(0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r4, &(0x7f0000000500), 0x37d, 0x0, 0x0) 07:18:34 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:34 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 547.417261][T12055] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 547.434411][T12054] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 547.448205][ T3217] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 547.455502][ T3217] ath9k_htc: Failed to initialize the device [ 547.462568][ T8699] usb 2-1: ath9k_htc: USB layer deinitialized [ 547.498551][T12059] geneve0: FDB only supports static addresses 07:18:35 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:35 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xb715804226422096) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:35 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x2, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0004000200"}]}, 0x28}}, 0x0) [ 547.898396][T12071] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:35 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) [ 548.078243][ T28] usb 2-1: new high-speed USB device number 30 using dummy_hcd 07:18:35 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) [ 548.134234][T12077] netdevsim1: FDB only supports static addresses [ 548.318646][T12082] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 548.658141][ T28] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 548.667288][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.675567][ T28] usb 2-1: Product: syz [ 548.679989][ T28] usb 2-1: Manufacturer: syz [ 548.684860][ T28] usb 2-1: SerialNumber: syz [ 548.780089][ T28] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 549.408853][ T3217] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 549.866181][ T8701] usb 2-1: USB disconnect, device number 30 07:18:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 07:18:38 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x2, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0004000200"}]}, 0x28}}, 0x0) 07:18:38 executing program 2: r0 = syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082404009e40000108030109023f000101000000090400000342ba0100052406000005240000000d240f010000000000000000000424130009058202f7000000000905030234"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000001c0), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) 07:18:38 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:38 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, 0x0) [ 550.488765][ T3217] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 550.495994][ T3217] ath9k_htc: Failed to initialize the device [ 550.503181][ T8701] usb 2-1: ath9k_htc: USB layer deinitialized [ 550.558721][T12106] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:38 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003190000060001000000000006000a65b87700000a00050004"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0xfb, 0x9, 0x8, @rand_addr=' \x01\x00', @private0, 0x20, 0x40, 0xf84f, 0x7}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 07:18:38 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, 0x0) 07:18:38 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 07:18:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x2, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0004000200"}]}, 0x28}}, 0x0) [ 550.858537][ T8703] usb 3-1: new high-speed USB device number 14 using dummy_hcd 07:18:38 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 551.152227][T12130] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. 07:18:38 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xb715804226422096) syz_open_procfs(0x0, 0x0) [ 551.208932][ T8701] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 551.468093][ T8703] usb 3-1: Using ep0 maxpacket: 8 [ 551.602480][ T8703] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 247 [ 551.613069][ T8703] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 52 [ 551.623186][ T8703] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.738930][ T8701] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 551.748341][ T8701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.756475][ T8701] usb 2-1: Product: syz [ 551.761074][ T8701] usb 2-1: Manufacturer: syz [ 551.765834][ T8701] usb 2-1: SerialNumber: syz [ 551.798769][ T8703] usb 3-1: New USB device found, idVendor=0424, idProduct=9e00, bcdDevice= 0.40 [ 551.808212][ T8703] usb 3-1: New USB device strings: Mfr=1, Product=8, SerialNumber=3 [ 551.816379][ T8703] usb 3-1: Product: syz [ 551.820900][ T8703] usb 3-1: Manufacturer: syz [ 551.825630][ T8703] usb 3-1: SerialNumber: syz [ 551.829689][ T8701] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 551.898955][T12105] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 551.906325][T12105] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 551.945074][ T8703] smsc95xx v1.0.6 [ 552.144423][T12105] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 552.154749][T12105] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 552.407800][ T8703] ===================================================== [ 552.414884][ T8703] BUG: KMSAN: uninit-value in smsc95xx_read_eeprom+0x266/0xa10 [ 552.422438][ T8703] CPU: 1 PID: 8703 Comm: kworker/1:4 Not tainted 5.8.0-rc5-syzkaller #0 [ 552.430756][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.440847][ T8703] Workqueue: usb_hub_wq hub_event [ 552.446005][ T8703] Call Trace: [ 552.449350][ T8703] dump_stack+0x21c/0x280 [ 552.453733][ T8703] kmsan_report+0xf7/0x1e0 [ 552.458165][ T8703] __msan_warning+0x58/0xa0 [ 552.462684][ T8703] smsc95xx_read_eeprom+0x266/0xa10 [ 552.467907][ T8703] smsc95xx_bind+0x3fa/0x1720 [ 552.472593][ T8703] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 552.478763][ T8703] ? smsc95xx_mdio_write+0xcd0/0xcd0 [ 552.484056][ T8703] usbnet_probe+0x1152/0x3f90 [ 552.488739][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 552.493947][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 552.499151][ T8703] ? kmsan_set_origin_checked+0x95/0xf0 [ 552.504707][ T8703] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 552.510792][ T8703] ? usbnet_disconnect+0x670/0x670 [ 552.515974][ T8703] usb_probe_interface+0xece/0x1550 [ 552.521191][ T8703] ? usb_register_driver+0x900/0x900 [ 552.526562][ T8703] really_probe+0xf20/0x20b0 [ 552.531169][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 552.536376][ T8703] driver_probe_device+0x293/0x390 [ 552.541499][ T8703] __device_attach_driver+0x63f/0x830 [ 552.546890][ T8703] bus_for_each_drv+0x2ca/0x3f0 [ 552.551746][ T8703] ? coredump_store+0xf0/0xf0 [ 552.556432][ T8703] __device_attach+0x4e2/0x7f0 [ 552.561211][ T8703] device_initial_probe+0x4a/0x60 [ 552.566243][ T8703] bus_probe_device+0x177/0x3d0 [ 552.571107][ T8703] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 552.576918][ T8703] device_add+0x3b0e/0x40d0 [ 552.581448][ T8703] usb_set_configuration+0x380f/0x3f10 [ 552.586918][ T8703] ? usb_set_configuration+0xb41/0x3f10 [ 552.592499][ T8703] usb_generic_driver_probe+0x138/0x300 [ 552.598054][ T8703] ? usb_choose_configuration+0xe70/0xe70 [ 552.603782][ T8703] usb_probe_device+0x311/0x490 [ 552.608646][ T8703] ? usb_register_device_driver+0x540/0x540 [ 552.614542][ T8703] really_probe+0xf20/0x20b0 [ 552.619141][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 552.624350][ T8703] driver_probe_device+0x293/0x390 [ 552.629475][ T8703] __device_attach_driver+0x63f/0x830 [ 552.634867][ T8703] bus_for_each_drv+0x2ca/0x3f0 [ 552.639727][ T8703] ? coredump_store+0xf0/0xf0 [ 552.644417][ T8703] __device_attach+0x4e2/0x7f0 [ 552.649197][ T8703] device_initial_probe+0x4a/0x60 [ 552.654224][ T8703] bus_probe_device+0x177/0x3d0 [ 552.659199][ T8703] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 552.665013][ T8703] device_add+0x3b0e/0x40d0 [ 552.669544][ T8703] usb_new_device+0x1bd4/0x2a30 [ 552.674413][ T8703] hub_event+0x5e7b/0x8a70 [ 552.678879][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 552.684083][ T8703] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 552.689894][ T8703] ? led_work+0x7c0/0x7c0 [ 552.694309][ T8703] process_one_work+0x1688/0x2140 [ 552.699358][ T8703] worker_thread+0x10bc/0x2730 [ 552.704128][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 552.709333][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 552.714546][ T8703] kthread+0x551/0x590 [ 552.718623][ T8703] ? process_one_work+0x2140/0x2140 [ 552.723828][ T8703] ? kthread_blkcg+0x110/0x110 [ 552.728629][ T8703] ret_from_fork+0x1f/0x30 [ 552.733046][ T8703] [ 552.735370][ T8703] Local variable ----buf.i.i92@smsc95xx_read_eeprom created at: [ 552.743006][ T8703] smsc95xx_read_eeprom+0x124/0xa10 [ 552.748207][ T8703] smsc95xx_read_eeprom+0x124/0xa10 [ 552.753392][ T8703] ===================================================== [ 552.760315][ T8703] Disabling lock debugging due to kernel taint [ 552.766459][ T8703] Kernel panic - not syncing: panic_on_warn set ... [ 552.773048][ T8703] CPU: 1 PID: 8703 Comm: kworker/1:4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 552.782837][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.792906][ T8703] Workqueue: usb_hub_wq hub_event [ 552.797925][ T8703] Call Trace: [ 552.801220][ T8703] dump_stack+0x21c/0x280 [ 552.805631][ T8703] panic+0x4d7/0xef7 [ 552.809640][ T8703] ? add_taint+0x17c/0x210 [ 552.814070][ T8703] kmsan_report+0x1df/0x1e0 [ 552.818580][ T8703] __msan_warning+0x58/0xa0 [ 552.823092][ T8703] smsc95xx_read_eeprom+0x266/0xa10 [ 552.828310][ T8703] smsc95xx_bind+0x3fa/0x1720 [ 552.832993][ T8703] ? kmsan_memcpy_memmove_metadata+0x10c/0x2e0 [ 552.839161][ T8703] ? smsc95xx_mdio_write+0xcd0/0xcd0 [ 552.844452][ T8703] usbnet_probe+0x1152/0x3f90 [ 552.849133][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 552.854334][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 552.859564][ T8703] ? kmsan_set_origin_checked+0x95/0xf0 [ 552.865128][ T8703] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 552.871211][ T8703] ? usbnet_disconnect+0x670/0x670 [ 552.876327][ T8703] usb_probe_interface+0xece/0x1550 [ 552.881540][ T8703] ? usb_register_driver+0x900/0x900 [ 552.886831][ T8703] really_probe+0xf20/0x20b0 [ 552.891440][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 552.896651][ T8703] driver_probe_device+0x293/0x390 [ 552.901777][ T8703] __device_attach_driver+0x63f/0x830 [ 552.907162][ T8703] bus_for_each_drv+0x2ca/0x3f0 [ 552.912019][ T8703] ? coredump_store+0xf0/0xf0 [ 552.916719][ T8703] __device_attach+0x4e2/0x7f0 [ 552.921498][ T8703] device_initial_probe+0x4a/0x60 [ 552.926529][ T8703] bus_probe_device+0x177/0x3d0 [ 552.931392][ T8703] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 552.937207][ T8703] device_add+0x3b0e/0x40d0 [ 552.941731][ T8703] usb_set_configuration+0x380f/0x3f10 [ 552.947203][ T8703] ? usb_set_configuration+0xb41/0x3f10 [ 552.952783][ T8703] usb_generic_driver_probe+0x138/0x300 [ 552.958337][ T8703] ? usb_choose_configuration+0xe70/0xe70 [ 552.964068][ T8703] usb_probe_device+0x311/0x490 [ 552.968930][ T8703] ? usb_register_device_driver+0x540/0x540 [ 552.974838][ T8703] really_probe+0xf20/0x20b0 [ 552.979442][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 552.984656][ T8703] driver_probe_device+0x293/0x390 [ 552.989778][ T8703] __device_attach_driver+0x63f/0x830 [ 552.995161][ T8703] bus_for_each_drv+0x2ca/0x3f0 [ 553.000019][ T8703] ? coredump_store+0xf0/0xf0 [ 553.004712][ T8703] __device_attach+0x4e2/0x7f0 [ 553.009497][ T8703] device_initial_probe+0x4a/0x60 [ 553.014527][ T8703] bus_probe_device+0x177/0x3d0 [ 553.019393][ T8703] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 553.025207][ T8703] device_add+0x3b0e/0x40d0 [ 553.029737][ T8703] usb_new_device+0x1bd4/0x2a30 [ 553.034613][ T8703] hub_event+0x5e7b/0x8a70 [ 553.039074][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 553.044289][ T8703] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 553.050108][ T8703] ? led_work+0x7c0/0x7c0 [ 553.054458][ T8703] process_one_work+0x1688/0x2140 [ 553.059512][ T8703] worker_thread+0x10bc/0x2730 [ 553.064282][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 553.069491][ T8703] ? kmsan_get_metadata+0x116/0x180 [ 553.074705][ T8703] kthread+0x551/0x590 [ 553.078781][ T8703] ? process_one_work+0x2140/0x2140 [ 553.083993][ T8703] ? kthread_blkcg+0x110/0x110 [ 553.088763][ T8703] ret_from_fork+0x1f/0x30 [ 553.094500][ T8703] Kernel Offset: disabled [ 553.098816][ T8703] Rebooting in 86400 seconds..